Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File:                     4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier:          UpSHi29vS2xpcc8XaFM9XrJOWZdxetXsv75Og08NIUk=
Subject key identifier:   0A:4E:41:91:9A:60:E6:81:42:60:BA:5C:12:D1:E8:12:B9:C7:67:BA
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer:       /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial:       0195E122634A454D0110945DEC93F912CAED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number:          14D0
Signing time:             Sat 29 Mar 2025 09:01:21 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:21 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:21 +0000
Files and hashes:         1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: gcP93BjPUJ9YUvf1VUB1MyeQ9vJUbnnqyFgYEBH70lM=)
                          2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
                          3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
                          4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
                          5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
                          6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
                          7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
                          8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=)
                          9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:63:4a:45:4d:01:10:94:5d:ec:93:f9:12:ca:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
        Validity
            Not Before: Mar 29 09:01:21 2025 GMT
            Not After : Mar 30 09:01:21 2025 GMT
        Subject: CN=0a4e41919a60e6814260ba5c12d1e812b9c767ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:bc:ce:9d:86:16:04:cf:e7:c9:f5:de:ba:
                    fa:18:97:80:c1:fc:72:26:45:66:08:db:9b:fc:70:
                    5e:b0:92:56:2a:01:b4:71:a4:0b:61:de:e2:e3:2b:
                    c1:2c:fc:fd:07:e4:47:7e:79:20:25:10:7a:ce:1f:
                    fc:74:82:7d:7a:ef:6f:3e:e3:9a:ec:45:83:43:1e:
                    1e:28:f2:21:9f:38:7e:d1:b2:25:2c:46:a6:58:56:
                    f7:b9:48:e3:79:95:35:6e:06:c8:a0:c3:d3:f3:25:
                    e7:34:d5:25:38:0c:3b:3c:61:91:7c:a6:3d:fc:7b:
                    1a:48:1f:33:91:9f:d5:49:ca:99:c2:07:46:19:59:
                    21:b9:20:85:71:7a:89:6d:08:4e:c5:dd:7b:df:14:
                    de:68:63:87:f4:7a:6c:ab:1c:37:7e:88:c0:50:74:
                    ab:7d:3d:84:ed:39:f5:d7:16:1a:8f:83:f6:d0:2d:
                    a8:1e:26:4d:66:4b:eb:a9:b8:66:00:66:35:db:3b:
                    bc:e0:73:dd:38:36:b8:32:9e:ed:a2:3d:c7:3c:2e:
                    b7:e1:52:ec:c7:79:bf:5b:b1:67:29:02:01:46:45:
                    33:dc:df:11:32:0c:70:17:19:c9:61:7e:e1:3f:48:
                    e5:44:c8:86:76:9f:1e:21:f4:46:5f:7f:69:40:4a:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4E:41:91:9A:60:E6:81:42:60:BA:5C:12:D1:E8:12:B9:C7:67:BA
            X509v3 Authority Key Identifier:
                keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f6:46:12:08:b8:90:a3:7f:45:b6:b2:ca:94:89:a4:25:dc:
         ef:bb:42:f9:c5:98:e9:3c:41:d6:74:b0:25:83:82:17:d0:21:
         26:4d:a0:62:ff:8f:a2:f1:ea:4b:cb:9b:61:27:2c:1e:bd:69:
         ca:e0:01:ae:44:a5:26:7a:0c:75:68:11:7e:11:21:d7:2c:e7:
         92:57:24:8e:76:9d:a7:a8:f9:b9:80:f1:c4:30:02:5c:c8:2c:
         51:20:8c:0f:7a:a3:8a:02:35:ae:49:ba:e1:8f:02:d5:bb:fd:
         f4:18:19:70:0e:9a:95:20:87:ab:a1:78:73:ec:76:0d:b5:4e:
         b4:64:f7:da:6a:93:9f:30:57:d1:02:96:24:d1:f4:e8:1f:37:
         95:3d:a3:50:9b:2a:c7:22:47:5f:d5:ab:85:1c:33:42:92:53:
         73:46:8f:4e:8d:ea:78:d1:c6:f9:1e:c8:1d:79:67:1d:f7:4d:
         b6:b8:73:90:e1:82:c2:21:7f:82:dc:6c:29:7c:b7:c9:33:4f:
         0e:66:2f:4d:29:ea:77:b8:c4:e8:11:13:dd:72:30:1e:c4:f7:
         07:b0:fc:8b:d5:8e:6d:83:60:0e:88:e4:2a:c1:6e:3f:da:82:
         1d:34:f2:0c:84:7e:06:75:82:6d:8b:91:6d:3a:10:b8:86:22:
         c4:83:bf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----