Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
File:                     mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft (raw, json)
Hash identifier:          HO2AgvEzfzZ50VZ2PrgJFTmh0br6gA31gZchyvO31Mw=
Subject key identifier:   99:0D:6C:8F:CA:74:A9:36:03:CB:6E:2C:04:0E:D8:5B:5C:78:C1:B5
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Certificate issuer:       /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial:       01962E2ABD507C965E58D22DEB02E93A84CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
Manifest number:          14BF
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: Ku7W6RCmGf1FMZYF6bxZkcHlJ3U.roa (hash: yodxfHzeCCrONRmxjgNBHi9TEwJB+PIep9C2GIrnRgo=)
                          2: mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl (hash: H0k59RNR6XeIgiPSxeeSsM+Iz+NeWf9q9VmcNfG/Xcw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bd:50:7c:96:5e:58:d2:2d:eb:02:e9:3a:84:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944078b40772b172c7046e7446204980ceae139
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=990d6c8fca74a93603cb6e2c040ed85b5c78c1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:03:81:59:b9:ee:e0:c0:92:b5:f5:0d:e0:
                    3b:f7:72:96:eb:5b:1f:3d:0f:c1:e4:d7:02:6f:35:
                    1c:a7:dc:4d:4f:81:90:73:e7:40:98:9b:ca:99:97:
                    dc:f9:c0:fb:34:a5:06:4d:7a:a4:ff:3d:06:da:6a:
                    5e:48:80:0b:58:ba:07:4a:09:e9:40:d4:21:21:ae:
                    09:da:fe:5e:05:1b:6d:9c:41:17:6f:ad:05:7e:d9:
                    80:18:75:f1:50:c0:27:0a:28:80:f7:af:d3:7c:18:
                    fd:da:da:d4:40:e3:1c:ff:6f:c8:8d:e3:62:73:24:
                    72:48:6c:8d:07:03:97:c6:da:97:41:8b:eb:13:25:
                    db:e1:55:98:8e:6f:b0:ff:fb:12:57:d8:45:3c:1f:
                    11:36:37:1c:d5:f6:a4:e8:90:0e:49:cb:a1:b7:f8:
                    48:ff:6c:5f:69:50:23:a8:cb:48:c0:bf:22:e3:a3:
                    80:ab:56:78:49:6c:0e:bf:f4:d2:57:d7:e8:84:f3:
                    8a:e8:69:cd:79:e4:da:26:a5:d5:f0:2b:9a:c9:5d:
                    79:cf:14:49:6f:54:b2:29:ab:3c:44:91:37:86:3e:
                    38:d0:1a:a2:63:1b:95:38:ce:df:c5:02:81:ad:7f:
                    44:a4:d3:0e:d8:34:15:04:ad:36:27:3a:e2:b4:9f:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0D:6C:8F:CA:74:A9:36:03:CB:6E:2C:04:0E:D8:5B:5C:78:C1:B5
            X509v3 Authority Key Identifier:
                keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:cb:97:28:9a:ce:85:7a:89:12:ed:a2:9b:0a:98:52:a8:92:
         89:14:fb:e7:fb:e7:25:a6:4d:fd:e7:44:eb:ef:09:0f:a6:84:
         59:69:0a:d9:f8:25:01:e3:d8:c0:83:72:44:c5:3b:fb:c9:78:
         ab:dd:e1:ac:0c:c7:e8:3b:3b:19:d3:1f:c6:8a:70:b8:b4:31:
         24:04:5d:37:c2:9d:66:26:f7:f3:bf:d6:e7:f2:ac:fe:7d:11:
         97:75:97:f9:6c:c6:b3:68:10:3d:be:89:9a:42:6c:69:4e:c7:
         0e:3a:7f:dd:b4:9d:b7:84:e0:44:c7:20:71:d6:5f:ee:35:8f:
         84:64:04:07:f2:dd:a2:0f:5c:cc:06:e5:08:ef:de:cd:a8:e7:
         37:1e:76:68:cb:98:6f:4e:d6:38:a0:09:c3:4f:39:8a:3d:dc:
         dd:f1:da:22:46:26:0a:35:a5:d0:c4:02:66:88:e7:8e:d6:34:
         ea:6d:2a:7c:a5:6b:1c:52:7e:6b:1f:3d:71:6d:24:70:fe:6d:
         39:39:e9:53:0f:1a:c1:b4:7d:51:f1:3f:89:b0:40:de:6c:6a:
         61:8e:68:5a:3a:ce:e8:18:bb:b3:4d:8b:6c:eb:ee:4b:e9:8c:
         be:7a:ce:8b:3a:06:60:9b:2f:85:8f:5d:63:04:c8:73:aa:db:
         01:c3:5b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----