Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File:                     4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier:          qd/wuIDQa8gCUVK+ZQ5hPecy/KzBwdPgp6QHmBKvCRI=
Subject key identifier:   D2:EA:1C:B6:F4:1A:CC:C6:CE:A7:0E:C3:46:4F:8A:39:55:21:7F:76
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer:       /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial:       01962F0685C5C00C3C8FFE60AC4BB87F3C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: 1-3RhAT2YPB0r1ebiXkFnyV6tG8Y.roa (hash: IQS6khxqEbU9ABB49P6SoigiSYTvtS2Iy2GfbbCv2tY=)
                          2: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: rL+0BS97sX1tEJvalq8i7tBlGcwbxPZp3J9YyN4WAEI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:85:c5:c0:0c:3c:8f:fe:60:ac:4b:b8:7f:3c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=d2ea1cb6f41accc6cea70ec3464f8a3955217f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:8d:fc:06:2e:52:85:c5:56:c0:5b:a3:98:
                    70:10:0a:ac:a6:ed:b7:e5:04:8e:47:36:36:b2:cc:
                    64:48:5c:d8:96:ac:74:c9:73:13:f3:39:46:7c:76:
                    75:10:09:23:e9:ab:a4:b1:93:5b:88:34:ed:7c:78:
                    ba:24:1e:a8:76:9f:66:54:c0:b9:bd:86:22:b1:a1:
                    cc:0f:ee:76:5b:63:4b:28:d0:69:48:c5:e7:3c:3f:
                    a6:7b:48:7b:94:bf:d5:de:bf:50:36:e4:b1:a7:93:
                    0b:08:8d:1b:f0:56:53:46:37:df:05:89:fa:70:8c:
                    f2:7e:e3:fc:3e:67:40:5d:e6:c8:50:82:28:3a:32:
                    f7:d4:d7:60:7d:58:10:10:03:23:32:c8:e8:9e:45:
                    18:61:c6:f6:52:41:a1:71:22:a0:d5:5c:47:3a:47:
                    1d:26:6c:d5:48:a4:b6:19:21:da:c7:90:07:a3:a2:
                    8c:66:e3:90:b6:ee:de:21:17:8c:b6:70:46:4d:0f:
                    11:0e:43:03:83:61:85:fb:43:c9:94:7b:b8:02:9f:
                    96:65:1e:b8:9a:1d:08:16:78:7c:83:18:5a:74:4c:
                    1d:ca:1e:ef:83:09:fb:d0:51:99:a0:35:b4:88:cc:
                    1b:3f:5c:23:ab:b9:19:41:a7:58:7b:c5:6c:12:a2:
                    61:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EA:1C:B6:F4:1A:CC:C6:CE:A7:0E:C3:46:4F:8A:39:55:21:7F:76
            X509v3 Authority Key Identifier:
                keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a0:5b:94:35:e1:8b:64:90:b8:f1:06:60:0a:35:ba:d5:64:
         6b:a6:fe:ba:dc:7c:7c:fd:ea:a6:0c:3c:21:92:a7:39:ed:4f:
         b1:e5:b0:84:e7:84:fa:b5:86:65:e1:dc:a9:90:b4:d3:d7:15:
         a2:e5:d5:e3:de:e0:09:f0:13:22:5b:6e:91:06:af:74:86:7b:
         78:c2:64:08:73:1b:d8:17:9c:78:bb:52:23:76:e3:17:2c:8c:
         b0:f6:c8:e9:06:39:e3:e9:b9:8f:18:5b:c3:f5:56:9a:25:53:
         1a:e6:11:2f:92:9e:79:dd:c0:9f:56:0b:97:96:ae:d8:b3:58:
         5e:79:51:d8:a9:ed:e5:4c:a9:45:03:98:39:8c:a8:ce:8c:17:
         d1:ad:0b:eb:e5:27:f8:c3:af:7f:1b:e9:c6:a0:fd:16:e9:55:
         84:43:56:ed:9f:2b:7a:7a:89:68:4a:b1:56:04:c6:37:32:a3:
         a8:c4:31:c3:7a:aa:8a:8c:29:78:0c:28:e7:ff:ee:01:09:89:
         b9:e2:61:f4:52:57:47:91:98:3c:66:bf:86:a7:18:78:6a:3b:
         b2:96:36:5f:df:16:5a:03:b8:18:98:cc:92:18:87:57:68:2c:
         82:b5:c8:5e:7d:b7:d2:da:41:09:0a:22:6b:de:b7:17:5e:eb:
         70:3d:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----