Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
File:                     4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft (raw, json)
Hash identifier:          4PfG1gBgoY5kTerKn5wvEAWwqPKPDTxaK8Zeee8Lspc=
Subject key identifier:   0C:68:97:EF:53:78:11:66:97:18:4C:BD:FD:DE:1F:F5:08:B2:A6:26
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Certificate issuer:       /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial:       01962DF3E6F027C1BB01E9773896AB453532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
Manifest number:          0DB8
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl (hash: YDuLuVrJQICF081CMSfj3ppBE1CaYFEOZpwPL0atURg=)
                          2: 7wwToY-I4oQ7zD9rX8H-_4Eb5b4.roa (hash: Hl91ZV/in/bxS0Jez/RCMKQB6Lc2qVYsfbP/T+sqKUA=)
                          3: VnRQ8C8QXZSlLiPv3ntpPix0MBc.roa (hash: GsTYSMVbMlYjzB/yj1A15/Pa7xUVFVUn8yyhUswywB0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e6:f0:27:c1:bb:01:e9:77:38:96:ab:45:35:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=0c6897ef5378116697184cbdfdde1ff508b2a626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:ce:c3:83:af:e8:07:19:59:7b:55:56:4b:
                    e3:38:cd:bc:a6:8b:9c:4a:f9:ab:28:66:b3:09:78:
                    a4:d1:be:a3:8d:73:23:1e:60:7e:f7:2b:75:69:78:
                    c8:06:ca:4e:96:b4:c7:90:40:5e:aa:e7:7e:5c:e8:
                    17:c9:3c:ff:e2:f1:f8:2a:b3:b3:11:da:cc:aa:44:
                    bd:42:a3:49:0b:0d:f2:23:cb:32:39:30:fc:87:75:
                    5c:a4:6f:51:bf:2b:24:32:1a:b6:0d:4a:c4:bd:2a:
                    84:be:53:e0:0e:ac:f3:1a:0d:98:a7:6d:04:e4:76:
                    a4:2c:51:76:d2:54:42:0a:2e:d4:8a:ce:8d:a6:e6:
                    ca:04:cb:a9:72:4e:aa:74:94:ad:17:5a:d5:27:b4:
                    e3:77:e7:00:e5:03:4d:ea:98:d5:99:ff:61:dd:37:
                    bb:24:81:15:80:18:19:df:a2:96:d9:9e:43:97:8c:
                    3c:63:4c:6d:73:58:8a:34:49:a6:15:1d:be:04:80:
                    e7:69:f7:c2:74:5c:83:08:07:b6:a7:e4:b6:b1:d7:
                    46:a3:5a:ed:2a:5d:d8:8d:85:22:2a:af:0f:32:53:
                    e0:fd:86:30:b4:52:6e:d2:e1:16:60:c6:9d:11:8d:
                    30:c2:52:09:1b:7f:a8:56:73:e3:7e:a3:4a:59:a6:
                    3d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:68:97:EF:53:78:11:66:97:18:4C:BD:FD:DE:1F:F5:08:B2:A6:26
            X509v3 Authority Key Identifier:
                keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:3f:57:82:96:a4:21:55:07:46:ac:06:7e:12:b4:5d:e8:c2:
         41:79:1f:da:73:18:ae:2e:c5:97:44:54:89:97:2b:bd:3f:79:
         0c:d7:ff:b1:b4:e1:76:8b:38:b4:91:14:47:46:32:54:3f:00:
         c4:69:5e:20:fa:93:9b:af:fc:0f:37:6e:50:f6:f9:86:1c:14:
         89:c3:4d:db:b3:4f:f3:b9:51:58:f8:c4:27:c9:af:cd:86:2f:
         09:25:94:e2:8b:0e:d4:7e:57:f2:6e:1c:b3:b3:ad:fb:d6:28:
         7e:08:1f:54:e3:94:3d:c2:53:a1:03:6f:22:18:71:60:52:46:
         c5:35:1a:72:32:a5:f1:05:ea:c2:68:6e:68:89:b3:7b:10:43:
         e5:0d:57:c1:a0:44:7e:5c:b5:af:a8:e7:4f:ec:3c:e0:a4:20:
         b8:d9:17:90:61:1e:98:6c:86:c0:c8:23:81:85:f3:5a:02:df:
         f4:e0:a1:04:4e:d4:df:85:b7:dc:61:8c:5e:f9:c4:92:02:73:
         2b:1f:01:15:17:63:f6:b2:48:d2:1f:1f:5a:f1:4a:58:24:e2:
         20:d1:d3:96:91:a1:f3:a8:13:e6:36:e3:68:40:82:0b:4c:a3:
         96:94:7e:c0:70:1e:44:5a:ae:cb:55:0c:fb:a2:19:ca:f7:a3:
         8f:49:74:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----