Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File:                     rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier:          OvgAQX8xxbISTAFKAyJvI8uI6szcjQqzUyAKE3rokYQ=
Subject key identifier:   DC:F8:80:A3:C4:EC:00:E5:DF:BB:5C:5C:3A:C0:E1:1F:3C:39:7D:84
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer:       /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial:       01962F3D881C16471013384A6D7108FD2F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number:          14FE
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: A6WXTZEzXmIQ_NgfUonzU2PUwgA.roa (hash: woiA9rRwDxAjmj0pEa4K5XOpCIKapMbaEdUIwATG6G0=)
                          2: nna5EA2g1qX6KviopTAzfZKYgqM.roa (hash: +1+cT+lcsXs8CMprSc3uLnHvYXXY0ACjWW6HRhv0N78=)
                          3: pnVgolr6kqtefIzFBQ25v9r89oU.roa (hash: VJuUTV8i4Al97i+L0IwbQC+Q7J6nmykHVnDUwxHzy7o=)
                          4: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: +k1cdZzb0fnQX/OZyZA3MxiJGZqqupzmtmob2YjTbik=)
                          5: xNEUjA7ITLvBkxdzmbme9661TlQ.roa (hash: 1h+l7pX24LlIz83Xj6rt/K305QYrLmEd1uwS9wbn8l8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:88:1c:16:47:10:13:38:4a:6d:71:08:fd:2f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=dcf880a3c4ec00e5dfbb5c5c3ac0e11f3c397d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:24:2d:49:4f:4d:11:63:8f:13:49:7f:f7:ef:
                    65:ba:c8:86:e0:1d:ca:9d:cf:3a:74:d8:8d:89:8a:
                    ba:c5:71:09:8b:b5:4e:65:a2:92:2f:8d:71:5a:52:
                    36:f8:bb:bb:d5:b0:03:ce:dc:12:b8:f4:ca:7b:e6:
                    97:89:3a:e1:9c:da:5a:3b:40:ba:8a:a4:b1:e6:88:
                    e8:06:b8:0c:ab:5b:dc:9f:04:4f:9f:79:f9:66:30:
                    1a:a8:0c:66:64:ca:5f:0a:0d:11:e4:cb:d8:87:43:
                    e6:17:2b:2b:fa:6b:a9:82:8a:fa:bb:e9:36:58:37:
                    c0:14:b7:83:c4:3b:fd:c6:5a:06:11:ac:dc:55:7e:
                    38:82:0b:b8:69:ce:72:04:5f:74:88:e8:32:9d:aa:
                    d3:53:5b:13:a1:fa:9f:4a:d1:4a:62:66:1f:13:6e:
                    12:ab:fe:94:0b:eb:35:5a:61:b5:98:a3:13:48:4f:
                    bd:5f:ec:f1:fa:70:6f:49:26:4d:83:a8:c0:ec:b6:
                    48:fd:37:86:01:bf:5d:85:29:cb:e7:72:4f:e3:61:
                    54:a8:29:36:3f:51:91:a3:ca:30:90:8f:7c:51:b1:
                    91:ce:99:81:31:74:5e:62:45:b9:14:31:76:a8:a4:
                    5d:af:02:94:8b:cc:df:be:81:4e:93:68:b4:3d:7b:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F8:80:A3:C4:EC:00:E5:DF:BB:5C:5C:3A:C0:E1:1F:3C:39:7D:84
            X509v3 Authority Key Identifier:
                keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e9:2a:d7:9d:8e:9e:65:73:98:69:23:f5:c8:e2:81:45:ea:
         47:5a:bd:62:1d:ac:f5:c8:d9:35:b5:d8:41:fa:5a:7a:44:e5:
         62:ce:7f:1f:5a:2d:24:7b:41:34:09:61:ed:72:d6:cd:7e:c2:
         9f:91:cf:a4:c4:dd:a1:3c:a0:43:12:d3:c8:57:2c:4a:0e:c5:
         f3:76:03:fe:ce:a0:61:87:9e:7c:a5:d9:e0:bc:db:3c:d5:b1:
         be:d8:c2:9c:b3:95:4c:e7:38:b2:62:6a:39:22:f8:e7:23:e1:
         29:2f:03:aa:f3:e7:6b:dd:27:75:00:6b:d9:52:43:b7:45:5d:
         07:85:e3:b1:7a:6d:f0:16:85:05:0d:9e:98:59:e6:0c:76:81:
         63:f8:dd:3a:2d:96:de:8d:fa:5d:cd:32:94:a1:a2:11:ab:6f:
         9a:79:57:4d:3f:36:b7:f1:29:49:33:3d:4f:82:a0:40:a8:b4:
         e9:bd:03:ba:7b:dc:37:b3:3b:49:ef:33:4c:51:ca:84:19:4e:
         97:18:dc:97:2f:4a:7f:c6:be:3b:a2:64:19:71:d5:b8:b1:4a:
         84:25:c7:42:75:b6:b2:da:92:8e:ea:ce:49:36:9c:c5:64:4c:
         00:90:30:7c:e6:1c:79:51:d6:f6:8e:2c:b5:a5:5a:cf:90:64:
         69:31:7e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----