Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File:                     4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier:          cT3lzkwQta/J4vntPVTLpVRsc1L4pvP+CtZvorLTmok=
Subject key identifier:   BF:F7:DA:B9:59:BD:4B:D9:3A:AE:DE:F7:B7:19:62:D0:46:1B:CE:00
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer:       /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial:       01962E99090784F34C98410B9519EF16EAF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number:          1012
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: KYka/+8atZUdfnEyoZWVV4tJYqlar2uG1tJSawZktQE=)
                          2: NPk_GHNqq8k7MUydVHIUCQUBAQo.roa (hash: 8i7mapEQ11nmMTFwNuWUxWdEwqzqNv3Aacz7I3tfzMk=)
                          3: TY3bJpTGwSql-13Pjck1BzHDr8I.roa (hash: B/70euLBU/mf/YMvD1qZRHP7TxQr60sKZhW4C66SeVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:09:07:84:f3:4c:98:41:0b:95:19:ef:16:ea:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=bff7dab959bd4bd93aaedef7b71962d0461bce00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e5:c7:19:82:f9:06:b4:1c:54:61:75:d6:43:
                    1f:9b:19:07:4c:be:60:86:26:66:30:40:55:84:76:
                    8f:a4:e2:3e:2c:d6:7d:1a:11:ce:c9:9b:ad:ac:b0:
                    9f:37:96:d7:5d:c6:78:f3:d6:e8:a7:2b:41:5a:36:
                    c9:02:c7:af:71:b2:6d:d6:61:60:6f:43:bf:c0:28:
                    06:05:bf:d5:fb:16:98:fb:83:5e:a9:5f:57:d0:24:
                    f7:6b:29:ad:9d:72:a0:5b:f7:54:16:00:ea:e5:d9:
                    d4:29:e5:84:c7:16:21:14:2f:8f:9a:65:d6:99:c6:
                    b4:4e:5d:4e:af:65:f7:15:10:30:d6:b2:86:0c:11:
                    cc:91:d4:9a:30:ed:a0:3d:57:3a:b6:4c:6a:c0:50:
                    20:ce:18:3a:50:19:63:d2:13:a0:20:79:78:0e:5a:
                    6b:43:55:df:13:cf:bc:3e:23:f2:b7:2e:9e:e5:c7:
                    2c:61:4f:0a:59:3f:f0:32:60:b7:02:20:0f:ac:29:
                    e7:27:ee:07:72:72:84:74:c2:12:f9:1c:47:14:01:
                    0b:9a:e3:21:a6:15:14:6d:03:10:e7:a0:27:78:68:
                    aa:1f:74:e3:76:5c:a5:0b:70:cd:74:e7:80:48:27:
                    dc:e7:bf:78:a9:09:1c:a2:87:26:47:83:7e:db:95:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F7:DA:B9:59:BD:4B:D9:3A:AE:DE:F7:B7:19:62:D0:46:1B:CE:00
            X509v3 Authority Key Identifier:
                keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:17:a9:7f:54:a6:cb:93:cb:c0:ce:43:06:f1:10:1c:8e:35:
         61:3e:26:60:cb:20:dc:9b:81:92:51:2d:9c:43:0b:a7:b4:35:
         75:94:38:0a:eb:fa:88:64:45:45:f3:c2:69:aa:09:d0:2f:eb:
         e6:2c:70:88:10:93:07:b0:01:1f:e6:3b:30:53:6e:5d:8f:3b:
         b8:dc:c9:02:c1:e7:5d:0a:b4:8a:fb:b9:e3:64:70:70:7b:de:
         d2:a3:19:5c:c3:15:2c:66:e1:c0:0b:62:3a:21:42:39:14:25:
         5b:4f:23:2e:8c:6c:69:1f:44:71:ab:a0:f2:d4:8c:42:0e:28:
         00:2d:7a:76:e0:93:d8:6e:d3:fc:95:c4:cd:e2:90:51:ae:ad:
         6f:78:39:e4:fa:4f:78:76:ab:77:73:1a:f7:db:41:db:30:af:
         50:b4:70:98:ee:04:a3:5a:78:69:b8:67:e7:a6:4c:d1:da:43:
         f0:af:92:62:43:cf:ba:56:e7:1e:98:64:1d:5a:7b:e4:7c:6e:
         0b:50:b7:07:eb:9b:d1:9b:fd:a2:75:a4:0f:e6:df:90:62:0f:
         35:58:2f:c0:51:6c:c4:1c:ae:f3:f9:76:5a:41:6c:e1:f6:94:
         9f:74:0f:13:b3:e1:cd:f1:52:f6:6b:72:eb:72:3a:fc:ea:20:
         04:ee:71:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----