Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File:                     v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier:          wI8aIChVr+GJq1dyhzQHPlZoIQOIbFxrhaVIa9McYnA=
Subject key identifier:   42:90:EE:18:9F:EB:15:96:66:E0:EF:B6:01:B7:60:10:F5:D3:CD:21
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer:       /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial:       01962E2B21CAE1FB3E5558AD087433D91105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 1-MOd61mqzzUd3k7RQR0FdOI1Nn0.roa (hash: Ney+qmboFEb3EnQIoVOu45+2AwAnlZ+xcFMz6UpUYIw=)
                          2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: m7c3ih7qsOop1onP50zvu8VpBgzysQSn+v+2T2EF1Bc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:21:ca:e1:fb:3e:55:58:ad:08:74:33:d9:11:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=4290ee189feb159666e0efb601b76010f5d3cd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:7a:48:38:02:a8:8b:c0:4b:3f:55:b0:5b:
                    d1:37:81:c3:f8:b9:d8:89:18:70:e2:bd:0c:68:f8:
                    d5:e6:06:a0:db:d2:3f:c9:21:bc:a5:a1:f0:ad:0d:
                    36:cd:2e:f3:7d:db:2b:11:1e:0f:58:c0:ad:64:b4:
                    9c:45:f7:0f:e8:b0:a2:bc:6d:58:a3:96:0f:b3:85:
                    fe:27:b6:cf:bb:86:84:32:6a:ed:7d:00:f9:e3:53:
                    a6:c0:12:e3:ed:02:59:8b:3c:97:10:50:4a:8c:3b:
                    09:ef:a1:dd:1c:b4:6e:9d:b9:30:a1:3d:17:b5:8b:
                    1a:60:9c:f1:fa:1c:67:db:5d:d2:5d:bb:60:6e:60:
                    ea:84:ac:4e:8f:83:d7:3e:b1:54:45:49:59:93:31:
                    50:ee:50:5f:bd:56:70:92:2d:37:56:89:78:75:07:
                    0d:83:16:0c:f2:47:cc:ad:59:6f:66:ef:91:82:30:
                    d6:5a:b7:1b:4c:00:4f:4e:72:1f:3e:8a:bc:8f:b1:
                    11:5f:cd:32:2c:1c:02:c7:74:bb:da:1a:72:f7:85:
                    70:d0:b3:ac:88:ce:e6:41:00:8b:92:f1:d4:83:ab:
                    72:9b:8a:cf:0d:6e:b7:e7:e0:70:e2:bf:b7:c6:d1:
                    dc:9a:25:27:7e:0a:b6:ce:a3:4a:86:cd:8d:d8:0a:
                    bf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:90:EE:18:9F:EB:15:96:66:E0:EF:B6:01:B7:60:10:F5:D3:CD:21
            X509v3 Authority Key Identifier:
                keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c2:c9:9b:70:74:99:c7:72:18:26:06:8d:2b:ce:20:09:86:
         31:25:23:6f:11:3f:e0:c2:ff:b0:af:f7:18:e6:fe:10:42:89:
         41:99:c6:54:d1:36:65:08:1e:76:4d:49:15:b1:21:ca:a8:d8:
         ca:38:71:04:bc:c3:3b:6f:fa:42:43:bc:9c:4c:98:9e:23:47:
         c9:85:5b:ca:36:3c:83:78:53:96:cb:2b:da:5b:0e:ca:6b:e1:
         e1:c0:4e:61:2d:25:a7:67:b4:14:68:8f:57:e2:a2:a3:f3:33:
         24:85:35:bb:5e:d3:79:5f:b3:2d:12:c3:92:89:da:38:0f:44:
         a7:2b:7d:cf:1e:41:b9:60:16:e4:e8:9b:a1:b8:47:a9:94:2a:
         25:87:13:78:31:50:10:54:cc:37:4c:f7:75:5b:a1:66:58:65:
         b4:a9:ca:1e:40:a8:49:80:b9:68:3c:28:71:93:88:9a:e3:14:
         40:64:af:a1:93:76:12:0b:b3:26:59:96:18:02:86:71:b7:e5:
         4b:06:a1:0a:be:55:c9:0b:69:26:ac:0b:c3:d6:05:f9:ce:dc:
         b2:8f:26:35:a4:d3:a7:7c:e7:c0:fb:9d:89:81:9d:12:82:c8:
         45:7d:e8:21:67:e7:7a:62:4c:3c:f8:a1:6b:17:8a:b3:51:03:
         46:2f:44:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----