Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
File:                     MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft (raw, json)
Hash identifier:          9NBJkNspWK7b5HIaS0ndWFTpjei6k6HtxAk+ChJmDF0=
Subject key identifier:   A6:80:69:B9:BC:C4:16:09:28:7B:B8:83:AD:81:FD:EB:B9:19:29:69
Authority key identifier: 30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
Certificate issuer:       /CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Certificate serial:       01962E6186774ECE45199DD9B61BA90B85B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: 9iuKUiRNNk0yJqP9x1MG2I_7d9s.roa (hash: OJC+CIaFp/mpbSmO0wI1lGEv8Ek7U6QE2MP4Wm3PDaM=)
                          2: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl (hash: UBgKipLe4p0QSaMfa1jgYcvH8zV4gyL+zO/sC9bn5Hs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:86:77:4e:ce:45:19:9d:d9:b6:1b:a9:0b:85:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=a68069b9bcc41609287bb883ad81fdebb9192969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:53:19:d4:74:21:01:95:62:40:6f:e1:96:
                    58:78:fe:60:1b:c2:2b:22:2e:39:7e:fb:4a:3f:f2:
                    aa:55:dc:87:64:28:ab:60:e2:c1:be:db:72:74:72:
                    98:6c:9c:0c:81:4d:de:35:08:13:16:35:a9:09:e8:
                    f4:6f:3d:78:69:c6:a5:33:db:fb:5e:ba:a1:e9:1e:
                    c0:9e:ef:2d:8f:97:fc:cc:57:83:38:e4:28:16:aa:
                    b8:fd:48:be:01:da:a4:ff:d6:51:d5:b3:36:96:bf:
                    c2:18:e3:c6:6b:20:92:58:e5:f7:7d:63:c2:0d:c9:
                    11:c3:aa:bd:e2:f1:cd:89:a2:d3:0b:6c:e5:a8:e9:
                    b6:ed:16:b9:36:0f:f9:2b:12:76:78:ee:fc:fa:32:
                    d1:5c:58:6d:d4:b7:7c:36:fc:5f:49:ee:c7:70:26:
                    4e:38:fc:a5:58:36:f0:12:0b:83:56:35:6e:cf:e3:
                    42:3c:26:ec:b1:bf:cb:ba:6a:8f:a7:d8:0b:c7:a7:
                    a6:b0:ba:55:0d:6b:64:3f:40:aa:5a:3d:a5:a4:1a:
                    ef:71:9d:91:c6:1e:ec:82:82:3b:1a:4a:c1:92:c6:
                    29:bf:4c:b3:68:68:31:77:7d:d7:6f:4b:f1:a4:b1:
                    9a:f4:53:35:13:16:18:3a:01:89:a2:08:85:83:62:
                    40:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:80:69:B9:BC:C4:16:09:28:7B:B8:83:AD:81:FD:EB:B9:19:29:69
            X509v3 Authority Key Identifier:
                keyid:30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3e:7d:e8:89:78:9d:dd:1c:bc:ed:c2:b7:11:0e:f9:ef:50:
         4f:85:ce:a0:75:26:f1:ff:32:23:85:bc:25:c7:bb:52:c4:05:
         e2:99:12:bf:28:6c:a1:11:c3:80:27:0b:c5:92:6e:51:18:ad:
         48:fb:ae:75:04:e6:3d:1b:e7:9c:b2:86:90:53:03:68:a4:a8:
         a9:f8:d7:73:15:bb:80:d5:50:7f:30:35:77:89:c8:c2:cb:a4:
         a9:c7:4e:b9:2b:3e:33:cf:13:66:05:6d:4c:77:3f:ac:21:4e:
         91:b4:0b:58:ee:34:fc:d2:c0:3a:c1:55:18:b0:0f:4f:59:a3:
         fb:01:c0:ff:70:f4:7c:b2:22:4a:ef:4c:5a:37:20:9c:d9:ac:
         9a:45:ad:7a:f5:d6:35:1c:c5:d4:25:d7:27:81:76:86:8b:57:
         b4:68:ee:fa:13:38:b5:9f:5d:47:20:57:1d:f2:8a:05:95:86:
         77:9c:39:3a:9f:fa:1d:9a:18:85:c5:8e:94:72:54:89:27:be:
         3a:64:b2:34:0f:8a:b2:b8:4d:98:00:a5:36:a4:ed:b5:cd:ea:
         fe:80:af:47:6a:b8:14:68:9d:e4:5d:15:0c:8d:99:ae:bd:a7:
         19:95:43:ac:73:bc:5f:eb:33:d3:47:0a:c1:de:f5:10:0c:a9:
         62:89:63:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----