Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File:                     4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier:          W8zL4qaZ5g3d5uxAyLFRpUBwQ+vBLNnZQO8NBkF4+VE=
Subject key identifier:   91:58:9B:17:A0:1C:D0:B5:87:BB:06:46:97:A7:67:6D:86:5A:2C:7C
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       01962FAB49202D4BA7AB22DF46125F72EC3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number:          150B
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: X4ZCFQwQw4x1pcBxYXPXhMR6myvvqd8K5bxyQEpZvUY=)
                          2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=)
                          3: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=)
                          4: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=)
                          5: YxnLmhiEAoRIPwqx7D5pI2tVg0E.roa (hash: Z5VZl3NN5nIeNmBSmYIBYR811mPwFTzRI+uDPXf+8B0=)
                          6: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=)
                          7: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=)
                          8: myrzpFPZKEFrMiKvWzGEDQDrl_I.roa (hash: J9rVlZg9Lutrp3UmbnqdopvJazmPd6IwXd6xHibeysc=)
                          9: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=)
                          10: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=)
                          11: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:49:20:2d:4b:a7:ab:22:df:46:12:5f:72:ec:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=91589b17a01cd0b587bb064697a7676d865a2c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:63:21:c9:7a:ba:9c:1c:42:91:43:e4:80:ba:
                    6b:7c:c9:4a:be:d0:0c:95:e8:74:b8:95:ef:51:19:
                    47:fc:8b:53:27:73:b7:b9:2a:ea:4d:72:8f:64:a2:
                    55:8f:be:c1:6a:2a:18:d0:57:cc:9d:63:ec:94:96:
                    73:b8:7d:07:9e:33:bd:7c:c2:d6:3d:82:30:c8:d8:
                    12:1e:4c:d8:29:5d:93:41:f6:0e:79:bb:8f:c5:42:
                    d8:76:ec:49:a6:ad:49:c4:d1:c4:67:e9:70:ca:02:
                    b3:4d:dc:0e:02:41:55:75:4b:42:12:b5:ce:b6:41:
                    33:76:ea:f6:e4:8a:35:fe:85:cf:ea:58:40:85:67:
                    20:a9:c3:cf:60:e5:d8:67:e0:6e:3f:b4:ab:08:fa:
                    0c:c6:3e:32:c5:e6:eb:56:69:f2:54:e0:26:d5:2a:
                    4c:a4:a9:f8:6b:1a:57:7f:5a:91:f8:dc:27:f8:95:
                    f9:90:61:81:05:cc:3b:97:ed:0b:ba:7f:8e:2e:99:
                    bb:a8:cd:07:86:03:05:35:31:b3:b1:5d:4f:5f:84:
                    41:25:a8:0b:a6:9b:2e:65:2f:2f:34:d2:25:eb:bd:
                    cf:71:f7:a6:66:a8:6a:44:59:fc:15:25:13:c2:fa:
                    76:b3:92:9a:b7:da:30:b7:17:b0:e1:82:8f:2b:77:
                    d8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:58:9B:17:A0:1C:D0:B5:87:BB:06:46:97:A7:67:6D:86:5A:2C:7C
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:b2:05:e4:9b:8f:89:4c:cb:e0:e6:8c:49:41:3d:66:2f:
         6c:ad:4a:df:3c:30:0a:ca:2b:14:15:a4:fc:62:2b:de:f0:e6:
         ad:df:e8:04:1d:fc:a6:5f:ba:0c:7e:09:f4:f0:28:c3:6f:be:
         fa:6a:1b:f8:fe:40:e5:86:4d:7a:20:c6:2b:17:39:68:39:11:
         57:f2:c6:7d:a2:2a:8e:b4:bc:d8:d5:a1:05:16:35:54:c7:b8:
         69:5e:16:33:62:ab:a6:86:79:40:ae:16:ac:65:ec:44:62:3a:
         ae:32:f1:3a:3b:a2:14:85:53:5d:bf:ec:fc:42:da:d7:02:b3:
         f8:33:59:96:0f:37:a3:e6:3a:7f:8e:e6:5b:bf:6d:84:fc:6c:
         8e:b8:11:eb:32:a3:ca:5c:05:f7:68:ab:3a:46:2a:c7:57:1d:
         b1:0f:51:a1:32:fc:19:2a:0d:61:a8:07:6b:0b:42:79:59:a5:
         52:88:29:f6:73:02:55:54:3b:60:e1:b4:1a:87:3d:41:c3:00:
         58:97:af:b1:7c:61:ec:f1:da:5a:bc:81:b1:e9:e7:e5:ff:9a:
         61:8c:5c:85:18:ed:d2:b9:b7:94:32:55:a6:96:ac:1b:bc:c9:
         7e:9a:ca:32:a7:5c:ee:14:9b:31:ae:f2:92:e8:f6:f7:b8:c7:
         9b:aa:81:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----