Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
File:                     c46JPc00f32rX3DTUfj84d6qZdE.mft (raw, json)
Hash identifier:          Ag3VGtQX9vdoOAxHaZNDQ3jOismhslk+XI9JOgocCAQ=
Subject key identifier:   80:ED:9F:3F:EA:1F:3E:FC:BA:8E:1F:FC:4F:90:41:5D:A9:3D:70:F0
Authority key identifier: 73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
Certificate issuer:       /CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Certificate serial:       01962F3D7C99223DC05E5D08435667729AAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: 3ktEzDL0WvhnsuJm2C6DIk-mHBM.roa (hash: OJtb++yW5+MtXw5QSymaUjcZIRPMQ11YahPbPvwPK4Q=)
                          2: c46JPc00f32rX3DTUfj84d6qZdE.crl (hash: oDCPf1Wl02ojXqQ4cGzV5vY6RsL0EZ58ZJMPqq/kJSU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7c:99:22:3d:c0:5e:5d:08:43:56:67:72:9a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=80ed9f3fea1f3efcba8e1ffc4f90415da93d70f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3e:15:7a:2e:0e:b4:d4:79:c6:56:69:4a:79:
                    4b:6d:88:21:89:a0:73:41:72:c1:ca:7a:44:66:73:
                    3a:67:3a:40:77:4b:e5:54:1f:33:12:ee:74:6e:10:
                    f5:7b:1e:7f:4d:bc:e4:06:dc:7f:2f:66:8a:68:c4:
                    5e:05:1e:74:f1:71:b8:f1:f1:c8:a2:92:34:61:43:
                    a1:94:fe:12:b1:30:28:85:c7:dd:9d:4f:55:23:b3:
                    8e:9f:6e:c4:a1:bb:fb:dc:36:7d:71:a2:8b:5e:3a:
                    8f:54:72:d4:3d:57:86:5c:14:e0:cd:cb:f1:a5:16:
                    06:0c:e7:7a:6b:90:f3:ad:29:36:87:a6:16:44:d5:
                    ed:8d:27:93:69:cf:ea:5c:e3:66:0e:46:91:ad:5f:
                    07:74:15:8c:9b:33:30:4e:c9:61:04:d7:fc:94:23:
                    4d:be:17:01:e7:2d:c8:3a:a9:e4:bf:ca:30:fc:89:
                    6c:0d:ce:d3:b4:06:73:59:97:0e:f7:57:83:5d:97:
                    fc:05:fe:83:c7:44:42:f4:55:a3:d8:10:c4:b1:92:
                    e7:5b:4d:cb:58:4e:a5:d4:c8:42:e3:c5:b2:93:7e:
                    28:2a:61:1f:5c:ab:d1:b4:5e:b2:51:c5:01:16:20:
                    ae:3e:aa:66:a7:11:4d:7f:6d:a1:7f:7a:f8:ce:b3:
                    7a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:ED:9F:3F:EA:1F:3E:FC:BA:8E:1F:FC:4F:90:41:5D:A9:3D:70:F0
            X509v3 Authority Key Identifier:
                keyid:73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:40:92:86:ad:f3:95:09:d9:97:fd:20:ee:e0:89:eb:5c:fe:
         34:25:22:7c:e3:3a:07:bf:94:92:f3:75:08:83:5f:5f:10:8a:
         90:9b:80:39:8b:11:b5:7d:c9:d7:3b:da:2f:6f:05:7b:75:69:
         09:54:71:a6:1b:01:62:f1:ee:07:cb:83:84:15:eb:7d:a7:cc:
         2f:06:e5:f2:d5:af:4b:47:07:05:28:24:05:34:95:f6:59:2a:
         37:33:be:bf:7b:39:53:dc:26:7a:f5:66:46:c1:58:d5:55:70:
         e7:cf:e7:82:32:b4:c9:e2:37:4d:18:59:2e:05:c0:aa:39:f6:
         a3:bc:3c:9f:d3:c8:85:c9:9f:9e:d6:e3:c9:ad:df:8f:5b:3f:
         8f:f7:3a:94:98:27:25:21:8f:55:fe:b4:1e:a6:4b:87:74:4c:
         fe:2e:d7:a1:b1:e6:4a:9c:cf:a3:9a:45:4b:93:34:7e:d8:cb:
         e4:1e:7f:1f:d7:81:fd:e5:bb:77:58:6f:da:9b:ff:47:c6:a3:
         29:73:3a:0d:67:af:ec:27:7d:64:d2:b0:dd:b5:5b:a2:77:1b:
         b2:86:bf:db:0d:f8:52:0e:5e:e2:4c:1b:ed:2a:eb:9f:68:60:
         8e:24:7a:82:d5:4a:b5:e2:00:f2:8c:0c:11:c0:01:6b:17:10:
         09:7f:ce:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----