Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
File:                     AUa0KfjElhH8_qHvoaUbnA7dtuc.mft (raw, json)
Hash identifier:          g4ZBNsCDTmH6y+MRSOJkTmsjG4g2PSKBlkkel0C8M0M=
Subject key identifier:   7B:70:2D:2C:96:CB:0B:04:81:27:3E:2B:FA:9F:2F:D2:D5:FA:6F:5E
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Certificate issuer:       /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial:       01962F3D6AA513B432B99D30911BAD300053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
Manifest number:          137D
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: 4lSW2DqUUyfLAwCJxmdcakNOOAc.roa (hash: 0bkR+y4/sbmt2mM+LAt7tzsFlo9ay8a2libMzm6BQSQ=)
                          2: A1UUEmWN8hJvE_QDz6Phuppzgos.roa (hash: 71wzKo8KkCCIqHry8cTGiYr86Ds73uxSzDKBszKZYsI=)
                          3: AUa0KfjElhH8_qHvoaUbnA7dtuc.crl (hash: Q3EMWPvBoxy0EBuZlwohlTyt1vVd9GB+VeaiYX1HnJI=)
                          4: PUvtKljRLvuOqowlndxBwGQKDl4.roa (hash: U5kHad25poEIvcwR4qtcel7KCFYyUvjuPf1N4FDV5NU=)
                          5: g4grZmuORaKS7qXdfY2Tw1BKwR8.roa (hash: J3nP1OMrsWuilznvZEcg4t0c4Ea3mup5IdWbWJUSouo=)
                          6: iciSv140fL3PtQnQ9u8uKNyjZD0.roa (hash: 3xoVorNvU/VeFcuXASi64FFVnBKDDjZqYnmoKneCFZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6a:a5:13:b4:32:b9:9d:30:91:1b:ad:30:00:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=7b702d2c96cb0b0481273e2bfa9f2fd2d5fa6f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:31:fb:d2:b0:f4:3d:cb:75:93:03:64:82:
                    c3:ba:ae:28:58:97:6f:a1:5f:ef:ac:c1:f2:ab:b1:
                    26:48:b2:35:74:30:07:d3:1d:bf:6d:b8:59:55:db:
                    71:ea:1d:81:56:2c:7d:79:8d:bf:25:10:e5:02:81:
                    69:2c:74:30:78:f2:9c:cf:56:2e:d6:61:40:50:25:
                    d4:40:4f:ed:b0:a6:83:55:c1:e7:d6:65:6b:30:b5:
                    3e:52:a7:59:83:00:32:91:7d:6e:dd:a8:42:17:29:
                    97:53:d3:b2:c2:bd:d3:a8:49:2a:1d:2e:1e:76:b5:
                    6b:bf:c7:34:8b:c9:c8:f6:5d:00:e3:c6:73:dc:b8:
                    ad:af:c4:ca:b3:37:13:c6:e0:6e:ee:6d:02:41:fd:
                    94:2b:44:c0:b0:07:d4:bf:e5:bb:b8:f7:52:3e:bb:
                    88:bc:1e:9d:cd:6f:5f:7e:bb:09:9a:7c:01:90:d2:
                    59:0d:9c:2b:16:5a:ae:7a:3f:16:fb:3a:b6:1b:5c:
                    bb:7e:5a:9a:6d:b1:3d:a1:b7:45:5d:ad:15:a2:ed:
                    5f:07:42:1d:de:92:36:b9:5f:d3:3e:da:c6:72:58:
                    a9:33:b3:e2:97:d1:ff:09:91:dc:63:76:85:52:01:
                    86:94:2d:f3:93:c4:60:72:fa:c2:6f:0e:ba:1b:f5:
                    ea:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:70:2D:2C:96:CB:0B:04:81:27:3E:2B:FA:9F:2F:D2:D5:FA:6F:5E
            X509v3 Authority Key Identifier:
                keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e1:a8:ec:5a:e3:a2:ce:ce:8e:d3:aa:c2:3f:be:28:cf:79:
         8a:37:6a:43:d1:aa:f7:61:d3:de:65:68:76:40:a9:2b:03:1d:
         73:36:2a:87:7a:07:9c:4e:83:3b:12:fa:a7:22:7c:e5:93:16:
         d2:0f:d7:21:e9:89:0b:06:af:3e:44:39:c3:db:d8:f3:19:fb:
         70:fb:32:a8:20:03:70:55:0f:66:72:43:29:7d:cb:6b:47:39:
         2b:42:64:ed:14:1b:d9:55:70:5c:05:00:40:03:73:a3:1c:56:
         9a:de:ea:f0:94:f4:7d:d8:2a:9e:d2:87:8d:83:d1:2c:58:71:
         99:e5:fd:5b:66:99:ea:f4:05:82:52:d1:91:2e:c7:10:41:11:
         0c:39:e6:22:f5:e4:ed:9f:38:51:39:f8:26:b0:5b:63:96:85:
         15:cc:b4:67:c9:36:46:5a:a3:bb:6b:c7:f0:a4:56:86:5f:03:
         a9:eb:6f:b6:2b:61:4e:ed:fb:0d:3e:45:47:f9:fb:53:33:2f:
         d0:3b:f6:be:09:3f:0e:78:16:a6:7d:ea:9b:a0:a2:55:5c:56:
         38:e9:bf:18:58:9c:5b:43:78:bf:f4:72:4f:0e:2d:e1:56:8e:
         5e:47:32:04:0a:34:0b:4b:3c:6c:1c:b9:33:87:21:84:8f:34:
         ef:66:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----