Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File:                     RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier:          EVaAllnx/ya2e5cAWpUYgJvz26fkFiuZvTVl6fVg5/U=
Subject key identifier:   7E:FC:72:45:D8:A1:8D:A5:43:9F:6C:4B:E2:79:B8:C8:C9:C1:88:62
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer:       /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial:       01962E98A631B149A45E2A8962E68224F729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: 5VyyRu9k0KJF1HIYdY3SbNtLs7Y.roa (hash: JzNrotC5WQ6zx3dtdKUI1Ev/FqX2rmyNFShITvJA34M=)
                          2: BFq1km9XkHnmoDoXJVc27vizfZA.roa (hash: cHrkhcCjIdFy9DEItV+YoEGVfmLA0+VuuQv0zsT4f+Q=)
                          3: EaYz9d8bcgido2cK-J8A5iABR88.roa (hash: 4N+EHFeIdH2VhV+aazrq8nz7FcT1+8SnVmo4BQnN98I=)
                          4: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: 6PWIWkAsSz6Igrx4B46fJyGOJv3j0NNlU9nB978JnSQ=)
                          5: bQc5T4PirD71F511kjzfy84OVUo.roa (hash: EWzOl7FZsznXJxW6MkTJcVJE6hamn7Yg/ELBjTogg48=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a6:31:b1:49:a4:5e:2a:89:62:e6:82:24:f7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=7efc7245d8a18da5439f6c4be279b8c8c9c18862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:24:ca:64:17:4a:d2:27:38:ee:41:6d:34:6c:
                    3f:5d:11:bb:1a:23:07:d6:b7:9a:34:3f:72:53:02:
                    1d:dd:62:a5:74:7f:54:20:78:ea:e8:6f:15:a9:2f:
                    80:c9:f8:4b:42:21:2f:f9:c0:59:ff:ca:15:c3:3e:
                    0e:fd:a5:29:86:db:1c:da:7a:0d:32:33:a2:77:4e:
                    f2:f1:1b:66:cd:1f:98:62:b5:96:9d:85:82:2a:c0:
                    34:c7:ba:43:7c:7e:c3:77:32:bb:40:f6:71:63:14:
                    2c:99:b5:b4:c2:c7:24:1f:71:fb:7e:88:08:0d:55:
                    5f:e4:77:92:d5:1a:3f:33:27:ac:96:5a:70:41:35:
                    d4:96:c7:26:e7:3c:41:4b:1d:e3:bd:5c:39:c2:45:
                    9c:e6:1c:22:eb:10:24:73:22:d7:26:5f:05:b4:c7:
                    53:90:85:21:70:b9:22:e9:1c:0f:df:c9:88:b2:82:
                    ba:ae:14:68:5d:d6:bd:0d:04:22:18:6e:53:c5:ef:
                    73:bb:94:c0:6c:a1:99:88:4f:fa:7a:3c:b5:ae:60:
                    21:ff:7e:83:30:03:93:0f:32:58:80:fa:b2:41:e1:
                    6e:89:18:b4:60:81:3e:a5:1c:b8:1e:99:32:3e:fd:
                    f8:63:0d:e1:e4:9d:dc:45:fc:8a:19:13:67:93:ef:
                    1f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FC:72:45:D8:A1:8D:A5:43:9F:6C:4B:E2:79:B8:C8:C9:C1:88:62
            X509v3 Authority Key Identifier:
                keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:50:c5:2f:cc:5b:d0:af:11:4b:3a:7e:11:48:31:91:bf:a2:
         67:63:47:ce:f0:22:ca:49:cb:13:7d:65:c9:f8:0c:ea:94:9d:
         d2:5d:9d:9d:b2:d3:52:fb:18:a9:68:25:e9:fa:be:2f:11:98:
         15:e7:f3:32:98:0b:37:d9:3c:59:58:a5:a3:6c:bc:b9:67:d2:
         0b:72:e2:04:d3:69:49:f1:37:35:d4:f9:1e:fc:be:72:4b:88:
         cc:75:da:88:43:5a:09:f4:bc:f5:aa:ea:cb:60:57:0b:37:92:
         85:88:7d:9d:29:b0:90:6c:fd:d3:5b:eb:63:30:24:fc:77:46:
         53:4f:c9:28:8f:33:af:c5:ae:8a:46:a3:1d:dd:2f:b0:8b:a3:
         20:72:64:d3:a7:54:e9:eb:e0:9c:d9:d2:c8:0f:e9:c1:e0:92:
         5b:7f:63:70:1d:53:89:a0:24:8a:fa:65:fc:2d:9a:81:18:f0:
         41:d8:1e:d1:71:61:97:92:63:c5:22:50:45:07:44:42:e2:a7:
         38:1d:fe:ec:ce:74:bd:32:c4:2f:11:77:8b:cf:96:0d:1d:92:
         ab:6d:d2:78:a4:7b:19:30:21:b5:f1:a2:6f:57:36:86:53:ff:
         b2:56:c2:da:d7:88:f9:2f:32:45:7c:ed:2f:51:8d:6b:02:55:
         a5:ca:df:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----