Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File:                     mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier:          rEkSg3e9jh8rgsJ3OFxGWGEPhflKtXOatQpugfYiDnk=
Subject key identifier:   AC:2C:86:11:C9:6B:E5:4C:86:6E:A8:3F:67:7F:F6:8A:1E:BF:59:F8
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer:       /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial:       01962FAB4D7C0FC973891AFEF8449766427D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number:          105B
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: GS3n997-WSAnBFI5sxW4oYhya68.roa (hash: 9uLSgMiqXXeu2TS+gBYSbYKO48DlZM21pWe2MUShNG8=)
                          2: K1RZ-_Fg9dSZIebCMUhpe6gbgJc.roa (hash: DeEJ/lwM2EUWvyFmV2osr5NnI9rnfMu9oAVwUv2cQPg=)
                          3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: CtPc2lakneH19wFuoMsNvouSojn68QXdcPnyJExSkeg=)
                          4: tKjpgYt3F1U92FlxxtExmwv_VJA.roa (hash: PCobIxyuHsntJ/hl1UTuu1qlban1/mIdUKP0z5QY3l0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4d:7c:0f:c9:73:89:1a:fe:f8:44:97:66:42:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=ac2c8611c96be54c866ea83f677ff68a1ebf59f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:82:58:42:86:df:4c:d8:e5:7b:b6:45:94:
                    b3:ba:ae:bd:fb:3b:64:3b:8f:94:43:cb:12:56:6f:
                    a5:34:ac:ba:59:98:9f:d7:0b:84:54:47:99:b8:23:
                    48:8d:9f:77:a5:d5:48:d5:38:57:52:9c:91:49:72:
                    7e:20:96:55:8c:65:04:a7:e6:06:82:fa:6d:4c:8a:
                    ee:00:45:0c:d2:5d:68:dc:46:17:ce:cf:58:ae:eb:
                    97:42:44:72:d9:be:69:3c:1c:cd:53:53:ca:01:e5:
                    6b:45:36:10:d3:51:a4:f9:ec:94:81:a8:dd:42:36:
                    22:51:d8:ee:b1:8b:35:0a:39:00:1e:14:ef:b9:86:
                    5a:20:d9:3b:3d:b7:dd:ee:e2:11:97:58:ae:1a:3a:
                    b0:4b:0a:f3:83:09:ab:c9:47:9e:97:22:44:5a:09:
                    89:20:6f:27:e1:7f:ee:f0:f5:58:61:7c:bb:2d:a4:
                    ee:08:f3:22:94:42:1a:0b:3c:b9:ba:0d:91:cd:c9:
                    90:08:34:45:6f:0e:55:ee:3f:cf:09:99:3b:e2:07:
                    7c:0a:4f:dd:9b:4b:7f:0c:06:f9:8a:1f:27:95:cc:
                    b8:2b:3e:ab:a7:89:e8:4f:83:78:a1:5c:ce:5f:e2:
                    67:67:4a:cd:9e:f9:a2:27:d2:f7:6c:21:5c:82:b2:
                    e6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2C:86:11:C9:6B:E5:4C:86:6E:A8:3F:67:7F:F6:8A:1E:BF:59:F8
            X509v3 Authority Key Identifier:
                keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7e:83:da:87:c4:ee:f7:40:12:86:ea:63:d0:6f:49:c4:be:
         d2:9f:88:fe:8a:51:be:58:03:a5:38:86:f5:75:cc:1d:6c:32:
         d6:82:13:a7:c5:c8:51:72:cc:ba:ca:64:ce:a7:1d:a2:54:bf:
         61:3c:fd:e4:ae:bd:90:5b:38:48:ba:5e:c2:b8:bb:b0:d9:62:
         67:4c:f5:64:2d:e6:75:f7:5e:89:ca:43:bb:06:93:0a:2a:fb:
         da:93:d0:20:20:aa:63:2f:ea:32:3e:ab:46:59:7a:6a:d2:22:
         ba:7f:39:04:bf:e9:0a:e0:4f:e6:57:4c:d5:04:d1:24:88:5b:
         dd:7d:fc:f5:3e:dd:4f:c6:05:32:e4:84:38:b8:52:01:3d:ec:
         dd:ef:b4:3b:10:09:e3:9d:df:68:b7:d9:a4:47:6c:70:7c:03:
         f6:83:0d:d9:15:a9:48:51:d3:4c:57:68:a6:ec:b4:9e:70:b9:
         4c:67:44:d9:e5:8e:6f:8d:bb:98:c8:c6:e3:85:73:46:dd:b7:
         2d:ab:f9:eb:ae:e4:b7:8e:90:e0:11:e9:29:cd:95:a9:67:fa:
         ea:4f:28:57:fb:e2:a1:b5:47:4a:03:bc:21:d8:15:14:fd:4d:
         ff:9f:c4:50:c4:23:99:79:d9:65:72:f6:6a:15:a2:63:fa:58:
         2c:e1:b7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----