Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File:                     4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier:          ebJiBBfhuxI96tf1+acS0IjdkAagiKugItic8St3EoU=
Subject key identifier:   35:96:60:86:A4:03:F9:80:F9:CA:28:0A:F0:98:88:17:2D:E5:A6:51
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer:       /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial:       01962F74575D30C078679A2021F179C63076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number:          0BD2
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: WFDvOW2VAcKD0eM4g/E4N4lg/hnIA3/ITR92W+nu9UI=)
                          2: Q3-HdEPCyjZHl-Sg4_PuJRYIuT8.roa (hash: XEPQxkckVuIQ5rwgxJmegps237sKjQ4AEXFUBlmNa1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:57:5d:30:c0:78:67:9a:20:21:f1:79:c6:30:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=35966086a403f980f9ca280af09888172de5a651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cf:88:06:73:93:27:a2:24:85:9c:84:c6:a1:
                    01:75:62:7b:fb:7d:fe:7a:c4:6d:62:fc:02:6d:e0:
                    ec:71:ab:a6:56:e8:29:4e:d1:79:fc:db:35:19:9d:
                    91:3c:03:0c:b2:34:ac:02:2e:06:e6:ca:bd:ce:0e:
                    d0:28:07:59:79:9d:50:7c:9f:d9:7e:68:c8:71:ad:
                    77:57:44:dd:a1:2f:70:10:1f:14:6f:48:43:da:05:
                    a2:a3:ae:74:ea:fe:79:b8:ad:82:d5:f0:60:4c:cb:
                    9f:c6:16:ea:24:f4:fa:d8:83:f4:98:d3:dd:62:3f:
                    c2:e9:2a:da:33:20:54:bd:fd:36:62:2a:ac:c6:da:
                    71:14:61:03:ab:d7:4a:bb:21:cc:bb:ba:db:73:ae:
                    03:3f:ef:8b:d7:d9:4b:9f:66:cd:ff:e4:56:eb:65:
                    e4:77:4e:b4:98:ed:1c:af:5a:09:4d:e4:0a:35:4f:
                    41:f4:cd:05:d8:0e:4a:70:e0:2f:50:a9:6e:05:38:
                    e3:af:f7:2f:fd:19:8e:40:a7:3c:ab:42:e5:7d:e7:
                    03:3a:54:47:20:2b:ca:c6:ec:26:88:56:e9:f8:83:
                    b9:bd:fc:ee:c1:91:a8:e5:53:0e:60:20:2c:c1:55:
                    b9:df:c2:1b:f6:5a:32:ee:21:0b:0e:9d:27:7c:6a:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:96:60:86:A4:03:F9:80:F9:CA:28:0A:F0:98:88:17:2D:E5:A6:51
            X509v3 Authority Key Identifier:
                keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:8c:9e:02:ef:d4:21:20:4d:8f:49:67:01:39:32:3d:73:
         8e:71:48:38:c8:eb:d4:33:e1:82:4b:89:ca:87:e7:47:ec:e0:
         b0:3e:c2:47:a3:b2:09:f4:6a:0f:fb:96:0b:f1:df:8b:cc:dc:
         27:8c:ab:d7:3d:ff:3b:e7:10:02:27:6c:ce:56:cd:0f:d8:36:
         46:d7:14:f2:d7:06:1c:0b:ad:e9:0f:aa:4c:b0:3a:12:9c:0b:
         0e:72:d8:b5:bd:a1:f1:6d:df:8f:7e:3d:0f:61:92:9e:0e:7c:
         cd:58:67:5b:8b:c2:e2:0b:31:00:e3:be:ca:0a:9e:b1:38:ae:
         63:7e:a5:5e:33:f7:0e:99:46:5a:1b:ff:5a:78:ae:96:ef:e8:
         19:ac:dd:f0:0a:07:e5:19:d8:3d:4b:57:83:53:86:b1:5a:20:
         e1:9f:9c:6a:6b:85:65:d4:28:f0:92:ca:2a:d6:fe:24:09:11:
         b0:f5:ea:72:a7:e4:12:c9:03:2a:71:7b:21:65:92:f4:9a:46:
         d1:c3:37:07:cb:a9:35:1d:35:12:ad:22:ba:0a:6c:d9:6e:38:
         10:9f:dd:1c:39:8f:32:62:1a:ca:c8:8d:1f:eb:97:9a:0b:90:
         0a:f5:56:94:7b:0c:66:fe:78:39:74:8c:5e:80:0a:37:bd:64:
         74:bf:1a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----