Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft
File:                     0E45j3kEn2u7gzOBCoFhyXiWKiY.mft (raw, json)
Hash identifier:          iW7aF0s6xsNuRe33GAVc43Br4nDLCF4E8BQ4E7N68sU=
Subject key identifier:   4D:A2:0D:82:86:7A:D4:B4:01:A6:16:00:18:CA:D6:D2:0C:94:21:4F
Authority key identifier: D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26
Certificate issuer:       /CN=d04e398f79049f6bbb8333810a8161c978962a26
Certificate serial:       01962F06CEA2AF1E64B036170ABA146EBE96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft
Manifest number:          0DE6
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: 0E45j3kEn2u7gzOBCoFhyXiWKiY.crl (hash: PMIlQymrZ9zPJgN7JVbH+tJh5wQwdDqJA/+SnDLxWqo=)
                          2: fmJrqNi3AK7xf-5ry-ZR1hvBtQQ.roa (hash: R/N1KJCx1ZG7TAbnbY1p8xT86HawFSAUgAukKuDa69o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ce:a2:af:1e:64:b0:36:17:0a:ba:14:6e:be:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04e398f79049f6bbb8333810a8161c978962a26
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=4da20d82867ad4b401a6160018cad6d20c94214f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:02:4b:90:66:66:80:4e:48:20:f2:73:9c:ff:
                    84:0b:22:b2:1d:e9:ac:66:e3:2e:d3:af:5b:35:17:
                    8b:7f:52:64:5a:4c:3e:6e:0d:f1:d3:80:13:d8:99:
                    e3:b1:20:64:df:92:60:0a:3f:19:57:b0:7d:c3:b1:
                    13:fd:99:9c:be:30:46:59:1a:01:0f:3d:6e:06:18:
                    b2:50:9e:6c:e5:6a:f2:f3:19:39:77:1a:b9:27:9f:
                    c8:d6:66:78:62:75:92:6c:1b:11:b1:b6:b3:23:16:
                    86:5d:5b:ee:e9:22:ef:c7:d2:c9:ca:f0:33:15:24:
                    ac:62:8a:4d:bd:6a:65:e6:be:b3:6e:00:e8:58:3a:
                    88:75:80:be:9e:ff:5a:17:13:d2:02:9f:69:7e:37:
                    e0:bc:1c:3f:4a:cb:6f:c3:8e:da:3a:34:da:8a:d0:
                    6e:03:e9:e0:66:a8:90:bb:e1:59:2f:7a:0e:98:01:
                    3c:b9:9f:69:3f:4d:84:97:3d:3a:71:d7:1f:0c:85:
                    33:79:47:80:c1:f4:00:f4:fd:4d:62:8c:55:06:2a:
                    fc:96:3b:97:17:2c:da:d9:66:33:08:bd:38:ae:ea:
                    22:8d:06:32:31:73:4f:37:35:9a:f9:d5:35:c9:28:
                    13:c3:f4:21:f6:1a:ad:73:9a:29:6c:1c:70:24:b9:
                    99:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A2:0D:82:86:7A:D4:B4:01:A6:16:00:18:CA:D6:D2:0C:94:21:4F
            X509v3 Authority Key Identifier:
                keyid:D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1c:42:e4:4f:97:c4:67:a9:09:ae:40:e4:cf:63:df:11:1a:
         36:50:d7:ce:3c:6c:56:16:01:c2:2e:28:23:29:28:8a:a8:73:
         5c:2b:1d:11:2c:23:57:04:7c:4a:ea:28:77:c5:5f:01:60:ba:
         b0:82:69:dc:6b:50:d4:3e:45:b3:73:93:29:13:8b:a3:db:80:
         b0:0f:80:dd:0d:8d:dc:3b:04:23:c6:c2:dc:63:fe:8f:d4:a8:
         74:6a:e7:40:37:17:4e:ce:6e:cd:06:3c:64:97:29:cf:05:44:
         a4:aa:19:2c:18:d3:b8:0e:81:26:e3:75:9b:33:aa:0b:ef:e3:
         9a:14:c1:1a:e8:c7:f3:47:45:f1:f6:2d:1b:b0:f0:9a:01:9d:
         d2:a0:06:4f:ef:a6:c9:24:d1:ed:77:0b:40:94:f8:84:97:25:
         29:18:8e:08:71:7b:2a:d7:11:f0:d8:b9:4b:b0:8e:68:7c:72:
         c9:dc:02:6f:b0:b5:c3:1f:00:11:8e:f1:8b:63:e8:d4:17:96:
         48:5d:4b:77:cb:1c:b5:e3:80:22:a7:b4:ce:a3:f4:ec:01:47:
         43:b9:c1:0c:d6:22:3f:74:83:f9:cb:4e:ec:fb:fe:5b:c2:34:
         d8:b0:1c:0d:7e:b1:d1:ed:13:32:dd:87:41:fa:ac:3a:01:6b:
         62:b3:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----