Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File:                     RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier:          oW85NCBeYokQyLVhDa9NfnsBMlssVNTbv9qeZf9pQ9k=
Subject key identifier:   6F:E7:6F:D1:2D:1B:45:3C:4F:AC:59:0F:AF:BA:C9:25:13:14:3D:07
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer:       /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial:       01962E618D51D9753360BAB3688355B0FDDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: IW2UK+PVTNT/MdE5NM2Bk/9rWkEojj83BBVBO3VeD6c=)
                          2: kbK5FbYWiIzhyfd6X1FvOM4LM_M.roa (hash: DqjgdH8s8QL3DkbtV73wzVgdXOipMU6gUg//vr7va8U=)
                          3: mDUiFexcT2mv6c5O8qGbFAH9b3Y.roa (hash: pPWVkb6MaBCnVH/KCkJGhD1ngVL39J0MeLmVUJGfUTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8d:51:d9:75:33:60:ba:b3:68:83:55:b0:fd:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=6fe76fd12d1b453c4fac590fafbac92513143d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:49:da:f5:5d:89:34:5e:02:b5:e6:8a:a7:
                    18:94:cb:06:85:a1:c2:fc:0b:e8:98:79:3f:d2:f9:
                    94:eb:90:a0:6d:31:ff:b3:84:7f:de:bb:ca:ca:b5:
                    93:bb:15:6e:a8:b2:cf:ef:a7:54:32:89:95:e5:6f:
                    9d:18:35:f6:aa:9c:01:4a:c2:0d:60:e9:0b:cd:82:
                    94:26:83:a9:ac:ba:40:ed:70:fb:15:93:9c:af:35:
                    86:87:ce:44:95:8d:f5:c5:ca:f9:3a:0b:7a:13:2e:
                    fe:68:97:fe:dc:81:30:39:3e:cb:40:7f:78:3a:5b:
                    c5:a5:7c:34:04:92:d8:18:15:32:50:5d:37:94:20:
                    45:4b:8f:eb:50:ed:c7:95:fd:3e:f7:4f:87:8a:0c:
                    e0:12:ef:b2:de:3a:b4:fc:fd:2f:5a:45:11:66:df:
                    ae:b4:61:4b:7f:e7:b1:bb:10:b4:e3:e0:1b:03:22:
                    21:bd:af:23:a9:53:a5:2f:10:5e:ae:88:8b:7d:a1:
                    89:c5:e4:2a:8e:22:a2:5b:67:74:25:6d:75:fd:da:
                    d5:23:06:b3:9d:45:24:1b:da:16:0b:75:ce:2b:ee:
                    1c:b9:6b:fe:cc:0b:62:5f:f3:d6:7b:0c:ed:71:7c:
                    f6:d7:83:3f:62:89:e4:4d:6a:3a:b3:56:9c:aa:d7:
                    b6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E7:6F:D1:2D:1B:45:3C:4F:AC:59:0F:AF:BA:C9:25:13:14:3D:07
            X509v3 Authority Key Identifier:
                keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9c:dd:53:72:26:92:f8:10:45:63:0d:8e:0c:a9:ae:5d:66:
         6f:cb:8a:7c:a5:47:a4:ff:de:dd:52:1e:f8:8b:6d:bb:03:0a:
         d4:d0:fa:94:95:f3:a7:0f:ae:38:37:1f:2f:ee:9d:54:a3:7e:
         45:ec:93:f7:6b:96:f7:73:fc:f4:59:95:52:13:2b:f6:ee:e5:
         f9:3f:8a:88:dd:55:88:03:4f:6f:15:9d:ea:af:c0:4a:0d:33:
         91:af:c6:2c:08:0d:14:71:43:77:5c:63:dd:ec:e9:20:59:03:
         09:96:04:b2:a3:22:67:c1:79:f5:b6:06:14:d3:04:31:ee:e0:
         6a:4e:c6:af:4d:23:23:ae:2a:0a:a2:3c:a3:c3:fb:01:31:75:
         1f:14:52:fc:80:6d:35:a4:74:79:5e:0b:92:c7:a8:a6:69:60:
         d6:f1:31:42:49:6b:0b:6f:66:57:bf:1b:4c:35:bd:3d:06:bd:
         39:19:15:85:0b:31:6c:61:89:22:66:84:a3:e0:43:c2:4d:b8:
         84:5f:15:f5:6e:25:e5:69:f4:40:02:4c:28:a2:cc:43:b7:ae:
         11:e4:1f:1a:76:c6:80:da:2b:1c:dd:c3:6e:f8:41:90:cd:e6:
         52:df:ac:f9:9e:2c:a8:9c:4d:01:f7:d3:11:46:bb:0e:b3:97:
         bf:89:b8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----