Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File:                     4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier:          C2vOaDELXkNWq1CrY2a/56WamqfEk1AXdFeapdrdTU8=
Subject key identifier:   4F:6D:96:C8:71:82:39:2F:04:8A:EC:AD:AD:26:A1:39:6E:98:35:85
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer:       /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial:       01962E98B079F7FE8A024E8A011C3E751B86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: uRjT+GqQfGS5Pw6up0KiHPlnDt+tWpCTI0DHzAXAaps=)
                          2: BDxLMkKnaceqpe6Gqca_PK3aI0Q.roa (hash: g477khgykIY2Mcl6yKjre2phFpHAMbTwNboQthw3CVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b0:79:f7:fe:8a:02:4e:8a:01:1c:3e:75:1b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=4f6d96c87182392f048aecadad26a1396e983585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:94:46:1c:28:fd:cd:4e:5a:e0:e8:de:4f:
                    fb:ef:2d:20:0c:e5:7d:3d:65:e9:1c:ff:ca:e1:10:
                    83:cf:4d:27:ca:2c:cb:dc:d8:f2:3f:48:fb:40:8d:
                    1d:94:06:df:e1:57:b2:04:b7:23:5a:cc:c3:d2:f8:
                    b6:38:9f:7e:c3:59:bb:52:fa:f2:b7:f1:4a:d0:c2:
                    0f:d0:57:2c:c7:21:eb:e0:13:0a:54:fb:de:e8:b6:
                    1e:1b:1d:49:10:fd:88:da:3e:28:5e:2f:e8:e7:7e:
                    fb:15:a0:8d:49:63:23:fb:1e:e1:4a:ee:e8:f5:0f:
                    f0:54:df:be:f3:bd:08:05:79:7f:cb:b5:ad:c0:87:
                    5a:95:bc:c6:61:88:ff:18:a3:6d:78:af:9f:80:aa:
                    06:fb:b5:46:e8:48:25:36:34:88:58:a1:f5:e8:db:
                    88:d2:2b:bf:f9:c6:01:c4:32:da:ae:e5:41:14:ea:
                    87:35:1f:b4:9a:55:3d:ab:8e:d1:32:5c:d6:70:9c:
                    b1:86:31:93:84:6f:f4:e4:27:26:84:27:48:12:de:
                    67:47:9a:58:04:de:de:6b:be:7d:3d:cd:70:f3:2b:
                    70:fd:f9:df:83:c4:f7:9c:48:09:d6:b8:68:6f:05:
                    ef:db:77:17:cb:a7:bc:b3:0b:c9:89:41:ac:2c:67:
                    c9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6D:96:C8:71:82:39:2F:04:8A:EC:AD:AD:26:A1:39:6E:98:35:85
            X509v3 Authority Key Identifier:
                keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5a:a0:7f:ca:78:ef:10:1e:f3:d2:56:60:b4:cd:a7:79:0d:
         15:30:68:20:48:17:17:bc:63:45:f1:d2:28:57:f1:46:4b:36:
         bd:82:68:d9:f5:8e:70:a1:fb:cc:b5:2f:f6:95:c1:24:78:6d:
         26:b9:ea:64:30:d4:ef:ae:02:53:83:88:c1:8c:69:34:71:78:
         86:7e:61:a3:28:b1:bd:0e:34:cc:e7:74:b4:c6:38:f0:39:37:
         4f:c4:6e:e4:29:3f:f3:97:70:eb:2c:17:39:62:5d:e2:77:b0:
         36:40:c4:3a:8f:5d:66:a4:57:b5:c5:45:ec:43:aa:0b:74:74:
         1b:e4:5a:b5:4a:fd:b9:17:a8:c9:41:79:f6:05:6d:85:4f:83:
         27:54:3e:a4:c6:0c:f1:c7:c7:d8:1f:7e:0b:22:e3:44:34:dc:
         7d:26:05:4e:1d:d5:50:41:c0:5a:8d:c4:c7:c1:ce:7c:28:a2:
         e0:9f:0d:d9:cc:b9:ad:a1:53:a0:ac:38:75:8d:d2:8d:12:a0:
         44:9f:bd:bc:a5:5e:b0:1e:91:40:4a:ea:80:f3:d5:54:95:9d:
         f0:8f:1e:7e:de:06:b6:35:0d:e0:0a:96:a3:5a:05:b1:25:72:
         79:6e:7b:f5:ff:94:a7:66:8d:13:f2:16:04:ae:d0:88:7c:32:
         0b:a6:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----