Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
File:                     sG9AQEkaZW_3Um0vF2EbDWisvQw.mft (raw, json)
Hash identifier:          fSnJIZqpcMjcO2AIvlAmbJKqws4ljaQH7VD6MuO4Yes=
Subject key identifier:   E0:04:85:02:9D:09:73:5E:95:3E:A3:81:04:75:BA:7E:1C:0B:04:A4
Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
Certificate issuer:       /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Certificate serial:       01962ECF89940C63694FC0C2B73525CB0703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: 3oQgBF8b0SlPmJhLRByZqFye4Kg.roa (hash: kYRYhVl9nNIlfjRJmfhpqtBDhLtp2pSGg+NrF/eLIP0=)
                          2: sG9AQEkaZW_3Um0vF2EbDWisvQw.crl (hash: Grgmdk7+wiRH+0TeM6RYxGWlLKZ8azrNak9sN5Ajgak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:89:94:0c:63:69:4f:c0:c2:b7:35:25:cb:07:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=e00485029d09735e953ea3810475ba7e1c0b04a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:b1:9e:11:63:69:eb:32:0e:66:51:d5:f1:
                    3d:e8:43:c4:1a:82:13:27:c9:53:99:39:37:7b:20:
                    72:69:d6:29:b2:7d:f0:d4:82:70:c2:d8:db:2c:49:
                    6b:39:cf:e0:20:4f:32:14:e9:02:2a:22:ef:3e:be:
                    b4:5c:30:55:4f:25:ac:78:e0:36:dd:d4:48:eb:0c:
                    0a:4b:51:95:37:cb:6a:26:f1:23:80:df:df:6f:b6:
                    cb:50:b7:56:48:36:70:fd:82:39:d6:71:96:7e:43:
                    aa:c8:d4:d6:f9:43:81:c0:7d:fe:1a:7c:23:63:f4:
                    15:16:bb:70:21:d2:e5:76:15:ac:47:76:62:2a:e7:
                    bf:72:1a:a7:84:18:18:90:5d:de:23:26:05:ad:c7:
                    7c:64:20:17:af:14:22:eb:c4:fe:23:76:63:99:08:
                    1a:a5:c4:ae:67:0f:5a:7a:e2:2d:79:e4:96:10:79:
                    d6:80:6c:6f:d6:ee:62:02:d7:8a:58:16:5d:6f:22:
                    38:86:7c:f9:ea:43:e5:54:ca:9d:b0:19:dc:c1:22:
                    37:6e:34:b3:bf:b5:6f:01:3e:b2:91:d2:a5:4f:34:
                    a2:1b:68:88:8e:5c:60:4b:e0:48:38:92:d4:7d:39:
                    c6:d0:18:29:03:98:07:88:3d:5d:60:50:03:1c:92:
                    91:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:04:85:02:9D:09:73:5E:95:3E:A3:81:04:75:BA:7E:1C:0B:04:A4
            X509v3 Authority Key Identifier:
                keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:2f:dd:d5:a5:77:d9:0d:84:0a:d3:66:1f:e3:b6:e1:5a:52:
         21:cb:f0:12:b3:45:f1:69:64:47:0e:ba:7a:6b:4d:21:76:6b:
         46:9b:f6:45:3b:c1:dd:8a:df:8d:fa:33:94:85:45:cc:d5:14:
         d6:cd:6a:d7:8e:67:78:76:d0:98:c8:99:ce:cf:95:04:bd:a8:
         e7:73:50:d2:c8:c9:ee:82:7b:61:1c:7f:2d:96:84:58:10:ff:
         d3:38:bf:d2:7d:80:7d:53:52:10:42:a5:8d:0c:36:a7:9f:1e:
         f3:6b:25:4d:9b:8e:09:11:83:84:0e:8e:f1:52:94:54:c2:6d:
         ac:2f:a6:cb:44:4f:3a:07:58:39:29:23:b8:1e:d3:03:28:fe:
         02:fa:2a:bf:d0:ad:fe:fa:e3:72:c0:e5:60:6b:72:7b:5d:35:
         7d:94:ba:fc:6c:60:f3:52:98:3c:4d:ea:2a:c6:da:21:d7:56:
         c2:11:c7:03:2d:68:44:04:fc:83:1b:2e:8d:e1:bc:3b:a4:6a:
         d5:e9:40:1a:5c:33:08:f0:fa:74:42:8a:c2:79:35:ae:0c:e8:
         3c:d6:9b:cb:eb:fa:70:3d:12:a5:24:7d:24:35:fe:b0:0f:9e:
         3f:a1:ae:40:26:85:51:f0:45:2a:0d:f1:17:f1:2c:06:fc:84:
         56:55:5b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----