Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File:                     43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier:          l/+XlySguv3h/VNvy7VawE6X+c5CgPhYJAYBNFAOaH4=
Subject key identifier:   AE:89:CB:C1:62:3A:3E:10:AF:8D:E0:74:F1:37:6A:35:60:09:26:2D
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer:       /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial:       01962E61AA7FA937D9C4D21FC2D86EB8430D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number:          1419
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: Sm+8fC/AR5TxV3eNHeIaKwD1osQQYD3FJbpDoTFYK4s=)
                          2: LktO0B8qjGLInxw3N5jX_ouyGv4.roa (hash: 0acgVKGcL/QrYT0G9rMKO5SvHbTzsdzBy14zEKR/PS4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:aa:7f:a9:37:d9:c4:d2:1f:c2:d8:6e:b8:43:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=ae89cbc1623a3e10af8de074f1376a356009262d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:27:83:2a:d9:79:7f:31:cf:4d:cd:28:b1:4a:
                    7e:56:a1:c4:1e:1f:56:36:61:a7:97:26:78:d7:01:
                    2b:02:9f:d3:4c:36:8a:0f:d1:0f:4e:64:18:18:f0:
                    2a:22:1a:7a:fe:b3:ca:62:e0:24:e5:c8:c7:9e:b1:
                    68:7c:dd:12:97:40:5a:d3:7f:08:a7:08:11:33:9d:
                    a0:c0:0c:41:55:87:d2:9e:19:2e:e5:40:bd:bb:46:
                    96:7b:be:14:6d:0e:d3:3f:31:04:c8:53:1a:9e:e6:
                    d0:89:e0:1c:13:14:61:c7:31:14:12:88:9c:6f:f0:
                    dd:95:8a:bb:b0:b7:32:f4:2c:a1:44:8e:77:ad:04:
                    23:6e:29:55:87:f8:73:36:cf:de:9a:05:85:b7:7f:
                    c2:13:ac:82:58:0d:89:e0:4e:04:ab:1f:44:8d:af:
                    38:53:b3:6f:44:f1:da:06:f9:a1:a5:d7:db:af:c7:
                    b6:d5:89:6e:5c:cd:30:40:0a:9e:29:bf:bc:69:a8:
                    17:f0:fa:c9:67:2c:ec:4c:d6:7a:5c:f9:69:92:1f:
                    7d:2e:c0:41:76:94:20:35:06:69:59:bf:cc:54:c4:
                    52:30:f5:60:45:2a:fc:20:0e:1d:eb:a0:4b:02:00:
                    8c:7e:62:b1:8c:60:e7:50:81:cd:71:8f:9b:0a:6f:
                    73:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:89:CB:C1:62:3A:3E:10:AF:8D:E0:74:F1:37:6A:35:60:09:26:2D
            X509v3 Authority Key Identifier:
                keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5d:7d:11:ea:24:d7:2e:26:b5:40:18:43:66:39:12:fe:33:
         d5:5c:fb:32:26:f5:de:e7:b2:75:53:d3:57:aa:89:21:80:95:
         ed:df:b5:90:fa:a6:42:31:5a:22:ce:7f:19:f8:14:a8:4c:09:
         3d:6f:4e:b9:f6:00:0e:d7:1c:d7:0e:3d:46:28:b3:b4:a7:5c:
         1d:b0:9a:6f:89:d1:c3:b3:0a:42:b6:37:b0:ff:d4:8c:15:3b:
         69:cf:22:20:df:15:db:31:29:78:80:28:3c:36:f0:d7:ec:33:
         51:7c:13:63:d0:a6:95:8e:cd:cd:b2:88:8c:66:f4:d5:49:31:
         32:5e:78:61:98:77:6b:12:7a:22:91:68:d4:c3:d4:86:1a:a8:
         74:a6:4a:ff:17:e6:41:e2:79:a1:7b:a2:ee:4e:5f:98:43:62:
         9e:35:c7:b2:fa:f2:8e:48:f5:8f:97:21:9f:a7:b2:16:0f:2a:
         01:5b:4e:b2:c3:33:c4:29:9a:ae:a4:a7:1a:9e:a3:88:e2:9d:
         f4:ba:fa:ff:47:de:d7:f0:c5:dc:eb:8c:d4:eb:ab:05:76:ea:
         5c:82:5e:21:52:8d:09:4e:df:3a:62:a6:0c:d6:5a:64:dd:e1:
         f3:f9:d7:04:4d:14:0a:9e:96:07:6e:e2:fe:1f:9e:25:bc:b5:
         a1:55:9e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----