Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File:                     1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier:          eyiUx5lZK+F8QWG+g2QdhrJVuNT1Rzsl/y7bOvbjKTM=
Subject key identifier:   F1:DD:7C:71:46:B5:D4:FA:B3:BE:CB:11:A4:79:13:31:DC:61:33:D2
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer:       /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial:       01962F06DCC30EE27496E83CF86E219D3A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: rJ5CZHMMsqanjFY5ExrGPfMb6JLUu5QouYAC3fm/t3U=)
                          2: 5zxlB35EdRdJTCe7m-yZUPRlsZg.roa (hash: unU/ZcVY/VTIZQHY93UKjeMabLrjeik9JkKxVo8Mckc=)
                          3: EhPeC3UNOmpfPSQgK1eZa6cxhM0.roa (hash: Y+ISTlgHCWr+pylrvEHQiq7akKNEsEpXQTEEAN0nMmk=)
                          4: TQygN4SXBXm6kb6dwTHMvf9SU_c.roa (hash: th78B9M/h4hJt88ooUMk1f8j3+dkZq4RBDefMfAfKbA=)
                          5: ku9pGx_s_uNGA4P-l6uSYVb3Uis.roa (hash: Ec0Pa020pgxE201VKRA5WvEkhNSTtanwIM+0UgcAx7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dc:c3:0e:e2:74:96:e8:3c:f8:6e:21:9d:3a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=f1dd7c7146b5d4fab3becb11a4791331dc6133d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:ee:b4:49:4b:27:11:7c:ac:e0:0a:4e:02:
                    b6:10:04:fa:16:f7:e5:79:e3:a1:32:eb:ab:1e:ac:
                    19:ce:5c:0a:21:da:bd:2b:42:07:44:cb:5b:8e:87:
                    27:96:ff:4c:fa:0d:5e:6f:22:75:b7:17:2b:74:e8:
                    e9:02:a3:f3:3f:f5:fb:27:52:e6:19:d6:1d:24:95:
                    60:95:5e:24:aa:13:bd:83:d5:9f:b0:3b:cc:b4:89:
                    ba:2b:47:9d:14:55:ea:d2:32:fa:f1:a3:c6:56:f2:
                    11:ad:69:be:8f:ef:03:7d:55:61:d2:59:ec:eb:e8:
                    23:56:63:30:5f:af:12:5f:d2:d3:ee:0b:94:92:94:
                    50:e1:45:a4:ba:5c:11:09:e0:07:2d:48:dd:5c:fa:
                    a6:ed:17:8f:22:67:b8:ac:ca:de:58:9d:32:9a:f3:
                    95:0e:f7:c4:1f:c5:2e:de:ec:c0:a1:88:ce:05:57:
                    dd:fe:da:99:5f:4e:15:94:3d:6d:1d:96:82:02:f8:
                    50:48:c0:51:c7:35:94:ba:28:f1:ff:45:8c:51:5e:
                    5e:bc:c2:7a:50:40:3e:ed:5d:a6:e1:8b:c7:94:de:
                    92:fb:d1:6d:69:25:1b:7b:0b:05:cc:bb:83:2e:bd:
                    8f:b5:39:fd:1f:42:75:bf:67:9d:ba:7a:86:d7:e0:
                    66:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DD:7C:71:46:B5:D4:FA:B3:BE:CB:11:A4:79:13:31:DC:61:33:D2
            X509v3 Authority Key Identifier:
                keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:15:2f:a5:49:df:9d:6c:9c:e0:15:85:35:e3:c1:dd:fc:70:
         4c:53:bc:81:cb:90:7f:b4:33:6e:24:7e:9d:24:87:24:5b:b9:
         bd:78:7a:46:da:a5:e2:e3:3a:5e:56:d6:55:3b:1b:80:13:fb:
         a9:55:6a:84:5f:8d:2c:c6:1b:95:fb:e9:11:86:4e:6c:dd:28:
         12:41:3d:f9:a9:88:1c:91:cb:d4:bf:30:d9:48:b5:cb:43:7d:
         56:36:83:fe:e8:bd:1c:92:0a:d1:86:7b:0b:30:01:01:fb:98:
         28:3a:43:89:9c:a9:b3:6e:a2:ee:8b:39:80:9f:3d:4a:a7:68:
         d8:a6:49:fc:11:10:64:f5:c8:44:10:d2:61:6c:03:78:82:93:
         32:53:f7:31:41:c9:54:88:5a:48:11:be:74:0a:81:95:87:68:
         81:94:10:6f:2f:8e:48:01:50:b7:4e:96:fe:9b:83:af:13:66:
         ff:c5:a7:42:1b:cd:31:41:e0:a2:71:fc:f7:74:b4:f7:a0:85:
         bc:4a:cf:5a:18:09:8c:d9:b5:dc:d7:81:df:25:19:3c:a6:ed:
         fd:3f:d8:f5:77:14:ee:7f:a7:bb:f8:2d:6d:15:ff:61:c7:84:
         05:0c:a4:e7:82:be:6d:b2:4c:61:fb:43:16:bb:34:f4:73:a0:
         72:0f:05:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----