Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
File:                     rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft (raw, json)
Hash identifier:          eH8YWltAuvSyx30iVstfF0rv5a3kRcqxbDI4gp7EYLc=
Subject key identifier:   77:A9:9F:48:AD:F0:1A:3F:1A:6A:02:68:F2:28:78:B6:73:3A:65:CD
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Certificate issuer:       /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial:       01962E61B023309B4A40BB2A8E7261C3A757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: 5qbm6M-eiAs3Sax8KVJ3oyYfrrQ.roa (hash: wspJkKAHBhU/iiN7eXAG5eZQY0gy2K4ZxvhHdsXT2dg=)
                          2: KDzLGK1Ms1rQ3Sinf5MNoTfrlLk.roa (hash: bPUt0It2HOIJBVKWWo3dmSTmayPGgOml6jz8Zt5aBJ8=)
                          3: PfTK_laJnQS_hWcI1miH8YmD3XU.roa (hash: YfjG5i7yzO8QQ7ZO7iDAmyK16Fyt++8WwP+MEzSCTdY=)
                          4: ltmkR62UHp9Wf_efPpxh7HmSnT4.roa (hash: E1AG/jlqYwJrU9a3m+x6UqkYK+Xlbaxzv/rFzMbFu1E=)
                          5: rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl (hash: Y2ww3Qb/MkyPtw+sj/Z4mNiQMFbgLaIVSiQjIjJnMG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b0:23:30:9b:4a:40:bb:2a:8e:72:61:c3:a7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=77a99f48adf01a3f1a6a0268f22878b6733a65cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:04:b1:9a:e0:f7:ed:08:ae:a7:ef:f9:2c:91:
                    be:40:d2:87:08:c5:35:7d:4e:52:3b:07:43:c5:44:
                    79:39:5f:8b:ac:3a:f5:d0:fb:0f:99:cd:4b:3e:08:
                    31:ea:a0:72:5a:3d:cf:e1:42:ea:25:61:04:f2:62:
                    ef:30:c8:0c:6e:52:f0:ca:5f:bb:33:6d:a2:0e:1e:
                    81:00:ec:56:c9:22:a9:83:42:11:66:10:96:b8:79:
                    aa:f8:77:19:18:02:e9:97:c9:f7:76:14:3a:4e:bf:
                    15:98:19:34:d5:c8:28:64:6a:93:df:8e:41:51:c1:
                    7f:3a:de:0a:c1:fa:f3:f7:4e:97:9c:d6:06:da:11:
                    a6:c3:64:42:9b:10:6d:b0:fb:0b:77:45:00:0d:9f:
                    c4:c7:1f:87:b6:a0:77:ff:5c:34:95:2f:52:68:38:
                    8a:da:71:40:95:da:76:29:c0:9c:de:d9:20:35:f7:
                    4c:01:91:35:e5:8d:ef:89:3f:b6:3f:82:69:fd:2c:
                    b8:1f:e0:da:9e:4d:a2:46:aa:fc:bb:07:94:36:01:
                    89:e2:52:f2:d2:c3:c9:e5:91:c4:18:91:6a:55:f9:
                    5e:4a:e4:89:31:fe:44:0e:e7:b5:96:7a:ce:1a:9b:
                    9f:a1:a8:30:b3:9d:7b:e3:3f:9d:77:35:d1:53:87:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A9:9F:48:AD:F0:1A:3F:1A:6A:02:68:F2:28:78:B6:73:3A:65:CD
            X509v3 Authority Key Identifier:
                keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ae:97:a1:e7:28:3c:e5:ec:b9:c3:f0:e8:ad:1d:16:36:0c:
         4a:98:dd:fa:bd:87:83:4d:77:ad:0b:32:b3:ac:e4:de:81:c4:
         fe:e8:08:04:68:49:4d:99:93:82:8c:8e:12:74:d6:1d:b5:b0:
         2a:08:4f:16:a2:d4:9b:42:48:c0:ce:9d:e3:d8:db:b7:93:e6:
         c1:02:3b:10:16:06:7e:02:3f:82:ed:7c:b2:86:65:ad:2a:76:
         de:bc:94:6f:3e:96:48:27:79:44:fd:f6:a9:a4:cf:81:22:aa:
         16:ca:1b:fc:81:c7:f5:91:1b:c6:e2:63:68:84:41:50:3f:3d:
         cc:64:58:9b:90:08:38:16:ac:77:fd:d3:c2:69:3c:53:fc:d7:
         42:45:47:03:a1:70:43:af:97:0c:82:52:ac:63:ea:9c:c8:f2:
         de:19:b9:5f:c3:ed:d2:e0:ee:72:d2:15:d6:ba:b9:90:17:c2:
         89:b0:73:a0:fd:30:51:35:bb:c1:de:6a:0c:7b:07:55:c9:f0:
         f6:91:08:cb:86:e4:1b:69:1d:a4:88:b6:1d:06:6b:39:8d:eb:
         d9:e2:1c:2b:e6:d1:09:a0:11:64:5b:56:33:22:77:cc:0f:9f:
         ae:a8:08:c0:70:c4:8d:ec:6a:ca:fc:56:4e:5b:e6:ae:8d:1d:
         e3:51:d9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----