Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
File:                     4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json)
Hash identifier:          XaNBu1Dg1q27XbspoLu3hMQc7kWTTCo1JNGXVZAuV2w=
Subject key identifier:   0A:54:10:D1:37:58:4C:07:BC:F3:B1:70:CF:E3:1C:E9:13:23:33:6B
Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
Certificate issuer:       /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Certificate serial:       01962FAB343AE801DF03286346291628DB8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: ot6Zj0mijh8I8pAO5Z4TFfH8llq0rY8ZJ1XhH3HGTf4=)
                          2: BfpSqqWPnz2zm8axpIU080CSsRs.roa (hash: i9cs+yG6O1Ft1obwZZ0jOFlWDCTv2KU1uV2QUmB00UQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:34:3a:e8:01:df:03:28:63:46:29:16:28:db:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=0a5410d137584c07bcf3b170cfe31ce91323336b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:f5:11:ff:b2:2d:ba:16:d3:b7:dc:42:9d:
                    fd:5e:56:c9:92:27:3d:b3:2e:3f:55:34:9c:7d:f5:
                    77:79:94:98:d1:92:63:df:6e:e3:70:c4:57:0e:83:
                    90:9c:0b:30:ad:81:ac:ff:d9:5c:9f:d2:cb:b7:9e:
                    82:c3:37:b9:64:10:90:91:b0:8e:5b:b5:87:8c:6c:
                    98:8e:b0:68:ef:94:ab:91:c7:68:ae:53:a4:0a:89:
                    4b:e9:9f:1b:4f:ab:a6:f4:0f:42:59:73:6c:b9:84:
                    f2:8f:40:74:00:92:ad:e4:07:31:e4:b3:29:42:dd:
                    f4:ec:1b:fb:2f:0e:96:66:2f:c7:d2:14:60:0c:a2:
                    ad:15:34:49:c3:e2:08:63:b5:ca:21:9c:0a:9b:bd:
                    47:c3:9d:3c:ad:8d:98:75:64:66:8e:e8:d0:73:8a:
                    7a:83:2d:a7:46:f4:ec:da:c7:88:c9:f8:60:db:d7:
                    72:0d:d4:c9:9b:ee:1f:22:d3:51:a4:04:0f:60:8e:
                    38:8e:88:32:94:02:d9:c3:bf:b7:31:f9:2e:61:21:
                    09:bd:e9:0f:d7:f0:62:8e:90:9e:a0:89:ce:3e:a0:
                    42:7f:cf:3f:1e:b7:32:88:88:0e:e0:d1:bf:7a:1a:
                    a7:cf:e4:6b:40:a7:4e:99:c2:90:8e:21:83:c5:cb:
                    81:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:54:10:D1:37:58:4C:07:BC:F3:B1:70:CF:E3:1C:E9:13:23:33:6B
            X509v3 Authority Key Identifier:
                keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:37:d3:6d:09:3a:d4:2f:de:a6:2d:23:b9:fb:71:48:b9:b3:
         36:6e:f9:90:0a:16:e3:3c:97:f1:61:6e:f6:b0:2a:cb:c9:ad:
         ed:30:90:82:bb:05:97:07:61:44:38:94:42:63:53:62:b6:cc:
         cd:40:31:52:ac:e6:82:f5:db:2f:87:4b:3f:91:19:22:12:66:
         f4:bb:67:d5:82:4f:6f:f7:74:6e:cf:04:36:6d:a9:9d:a8:e6:
         a9:3b:47:46:73:a7:a7:f9:17:92:ac:2d:18:b2:27:35:d3:43:
         75:69:42:c9:a6:35:6c:0d:fa:49:cc:5f:41:4a:66:ac:7c:25:
         e6:96:cb:c9:89:93:b1:47:b1:d9:9c:d1:1a:11:20:22:3d:af:
         86:fa:be:56:17:7d:87:0a:69:cf:14:7c:1f:ac:a7:a0:6c:c5:
         36:b1:80:24:70:ab:f6:8f:f3:c5:6a:f5:fe:42:1d:2b:71:86:
         d2:5c:8d:77:eb:20:92:37:37:72:65:31:78:c4:66:0f:cf:fc:
         2d:da:4f:fc:bd:9b:b4:99:2c:41:0e:6b:a1:7e:c6:2f:77:da:
         5d:51:7d:6b:2b:65:31:08:2a:8f:12:ce:27:e5:71:cb:c1:f8:
         07:69:3c:36:cb:ca:5e:7f:27:bd:bd:b4:55:74:62:8a:83:6a:
         ed:92:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----