Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
File:                     h4R32LYtCfmui_29gSpT-X7UxXY.mft (raw, json)
Hash identifier:          zbuV6fndlQSMUn3dwU4N7ox9kr0vt9oeyL9qw3304gw=
Subject key identifier:   4E:3D:F3:6F:87:49:28:9E:C1:53:BC:CF:8F:71:44:04:01:78:78:6E
Authority key identifier: 87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
Certificate issuer:       /CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Certificate serial:       01962F06BC4FECEEFF883E28E9C563CABFB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
Manifest number:          0312
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: 1-chTvEPLKpclBFunFsZudwhteCw.roa (hash: Mk7QbJ14tNyeCXu9wD1n7MpPtkSCXANni+lDYxJDiAk=)
                          2: h4R32LYtCfmui_29gSpT-X7UxXY.crl (hash: 6LVMLz87CFKuIvGCHmfJG6BmjyYrbELTQ4hpou3wifw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bc:4f:ec:ee:ff:88:3e:28:e9:c5:63:ca:bf:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=4e3df36f8749289ec153bccf8f7144040178786e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f1:02:c7:a1:6f:02:74:12:db:57:d2:54:20:
                    d7:80:62:4d:ab:01:fd:61:10:67:00:a1:bd:fa:64:
                    94:ec:f8:07:49:76:1d:7e:41:70:26:19:36:dd:04:
                    c2:e8:9d:75:9a:a7:e8:f0:c9:c2:2f:d4:b1:22:a6:
                    f1:f5:cc:c9:08:68:08:16:35:0b:b5:d8:ae:d2:bb:
                    be:cc:f5:4c:fb:6e:14:fe:25:93:35:95:42:12:97:
                    fa:3d:7d:0f:e3:14:ef:f2:d3:cf:ff:26:71:0d:cd:
                    3b:39:66:da:bc:74:41:0a:c6:59:81:83:69:9c:bf:
                    ed:eb:3f:4e:42:d9:2a:d5:21:4f:80:69:65:10:8d:
                    f3:63:63:78:14:ef:1e:fa:49:3d:42:a8:ba:88:c8:
                    89:99:67:e1:55:d0:78:c4:04:72:df:dc:ad:43:a4:
                    29:af:7e:74:1c:19:a5:e3:1b:f2:fa:cd:79:bf:ba:
                    ff:47:5e:82:b0:00:be:e5:67:c9:2f:29:c8:3a:8e:
                    76:22:30:27:2f:67:e4:97:d2:31:55:69:df:1f:6c:
                    f8:c7:0d:e6:41:ff:a9:26:9b:70:48:f1:72:f3:49:
                    3d:e2:e7:80:97:fc:4d:8b:cd:86:61:8c:2b:3a:8f:
                    a1:eb:ef:82:54:48:1d:10:2c:50:c6:27:bd:11:93:
                    6a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3D:F3:6F:87:49:28:9E:C1:53:BC:CF:8F:71:44:04:01:78:78:6E
            X509v3 Authority Key Identifier:
                keyid:87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:01:ae:80:d6:6a:76:37:12:6f:a0:3f:3b:7a:f0:ae:98:c0:
         5e:f5:e2:ec:cf:12:77:36:07:32:d2:8d:5c:2f:de:c1:82:a0:
         3d:55:9e:a2:50:05:8b:fa:c0:73:b7:3f:b6:c1:91:05:dd:fe:
         96:16:d9:f7:76:4c:5e:07:37:e1:ea:67:9d:37:4c:d8:d1:37:
         25:9a:75:20:8a:21:97:6d:11:ac:15:2a:0e:14:ae:63:62:81:
         d4:c3:0f:29:89:65:54:49:d2:f0:c7:37:8e:0f:dc:69:38:73:
         93:3c:34:b3:83:a3:b3:c5:69:3f:00:1e:67:70:9b:3c:88:be:
         d6:e4:2e:ba:71:89:a9:36:1c:f2:47:af:d6:9d:24:e3:b1:59:
         1a:61:f5:31:5a:6b:d0:4a:65:c2:3f:64:b1:e7:0f:f3:65:82:
         59:f5:24:10:db:87:92:f2:f8:1c:75:0d:d1:93:32:08:05:42:
         62:70:a4:99:4d:d3:0c:58:4d:ea:a7:67:27:bf:cb:f4:f6:e8:
         b0:c6:56:ff:64:f6:09:66:33:52:22:ad:25:fb:4a:c5:2c:58:
         8b:22:c5:6b:0b:72:93:ec:0e:fa:d5:47:bd:15:e9:ef:10:b1:
         ea:39:3e:3a:c0:a5:03:7b:e5:db:e7:1a:22:63:8e:58:28:df:
         be:08:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----