Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File:                     aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier:          KdQRg62eQdh5J3gZlkb8g1zJI2MrG+SV6wY8GxATq3M=
Subject key identifier:   46:F6:D1:C8:49:04:74:43:FD:62:B7:B5:C7:08:D6:6C:87:9F:8B:13
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer:       /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial:       01962E993B54BA87EF38185C75E842CD7C96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: 1LWuminfGd450btHCMbnnbPQ_ZE.roa (hash: TISDdBpwKFkkTeSDLc72qwKWM7K/Xn5/55e5YUo0nnQ=)
                          2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: nZD1UdybLQfhORn2AK1mmtL2GJmw5v2isLsaVQlz/d8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3b:54:ba:87:ef:38:18:5c:75:e8:42:cd:7c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=46f6d1c849047443fd62b7b5c708d66c879f8b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:69:65:2d:57:bc:31:ce:5e:90:eb:db:80:18:
                    f2:da:26:a1:49:05:5c:bb:04:08:27:2c:af:9a:87:
                    f5:a7:4a:0d:eb:c0:e8:73:ca:8c:ee:ab:ae:71:48:
                    59:fa:9a:74:1e:ac:10:19:ff:e7:78:65:db:57:40:
                    41:ee:ce:75:1b:52:2e:73:be:fd:68:13:ff:35:8a:
                    ec:21:54:69:2a:9f:26:96:c2:21:55:87:5d:d1:82:
                    7d:f0:75:04:36:6a:ae:eb:b0:3b:d6:c6:bb:36:a1:
                    c6:24:96:81:66:59:b1:8f:bf:c6:ac:dd:4c:aa:a1:
                    0a:06:f5:fb:d2:6b:1b:a8:ec:7f:dc:fe:5e:af:f6:
                    d9:9b:2f:13:99:16:15:2f:39:a7:c8:ec:a9:d5:25:
                    66:24:31:2f:2b:61:2f:52:dc:e0:39:59:ad:4a:79:
                    b6:04:41:a8:5b:dd:a8:bf:76:55:c2:46:e8:c7:24:
                    cd:58:0d:94:7a:6f:97:eb:ff:e5:50:fe:7a:b7:20:
                    75:66:a3:54:80:be:87:cb:22:68:f1:bb:7d:be:c6:
                    41:74:11:34:c1:7b:cf:b1:55:58:3b:97:f8:b8:4e:
                    1b:c0:66:21:55:af:9b:f2:0b:0b:47:f8:88:6e:2f:
                    01:ee:7c:dc:0c:98:88:44:49:90:30:e5:77:03:74:
                    4a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F6:D1:C8:49:04:74:43:FD:62:B7:B5:C7:08:D6:6C:87:9F:8B:13
            X509v3 Authority Key Identifier:
                keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7f:45:e5:35:1d:9b:d0:c9:ed:21:bd:89:0e:ce:8c:19:d1:
         9c:60:02:b7:9c:c5:cf:85:ee:59:c9:76:b2:b8:97:43:74:23:
         da:92:82:8c:e0:a2:03:8d:d6:78:22:e8:f9:a3:80:9f:c8:72:
         a4:7d:ba:0a:e6:44:2e:77:ed:89:18:51:1d:0b:61:d8:49:76:
         5b:97:3b:bf:7d:c4:7b:e4:fe:31:fb:4e:c8:a8:85:49:c7:b5:
         69:30:87:e1:66:64:ad:b0:18:94:32:9a:fd:8e:39:76:34:02:
         58:dc:88:07:41:a5:44:18:86:f0:c7:77:f3:fd:43:4f:73:5b:
         62:1e:c3:4e:4a:26:d9:fa:72:40:56:b0:a7:da:0f:53:c9:aa:
         85:ec:1b:f8:a9:75:d4:a9:cc:72:3c:33:79:bf:a1:ef:25:88:
         38:98:3e:af:b9:09:c4:67:cf:c5:df:76:8f:c9:6b:59:20:0b:
         3d:19:bb:5a:ee:48:e1:ce:59:1f:01:5c:09:a3:b6:3f:3d:78:
         3e:5d:7f:7c:08:93:65:69:0e:78:43:4b:7c:76:3d:ec:47:4c:
         4c:b2:d5:f7:99:a8:6e:ee:cb:7e:0b:f6:e1:35:66:03:06:80:
         a2:c9:28:62:65:c6:49:93:74:e4:e9:a9:9d:14:ae:3e:58:5a:
         2f:b9:42:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----