Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File:                     kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier:          fSKRhCHtvDoy4rWzq81IN7LiExgW8wMx6g/p+OfPsbw=
Subject key identifier:   C7:56:C0:E0:94:1E:81:6B:D9:2C:25:04:AD:D3:A4:3C:76:5E:76:2D
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer:       /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial:       01962FAB0BF646E94E5472412DB74827BAEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: SuMbqKGSv1qKom1gMOOpsF5R60A.roa (hash: HQDAgM/9d4KyNdepm39greMFmuo/Jazn0GZwtBbpXbw=)
                          2: _Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa (hash: 3ZyAz71Zk7+/HMhaF+5MnrlGpcuPtXopbpfn+/PpDpY=)
                          3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: 3jSNAt/rNm0MS/5I9ttzLGU42Y7GkaQX93v0/0SiF88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0b:f6:46:e9:4e:54:72:41:2d:b7:48:27:ba:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=c756c0e0941e816bd92c2504add3a43c765e762d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5e:b7:23:00:bd:c1:72:1e:5a:6b:f2:18:60:
                    10:a1:de:41:03:49:3a:72:55:b9:80:27:bb:98:b6:
                    f5:cc:7d:59:83:a3:57:f5:a5:51:de:91:38:a0:34:
                    08:c6:d6:aa:7b:00:be:d6:63:58:ca:a6:a4:03:97:
                    8f:80:4f:9a:3c:d9:43:c9:a2:c7:71:f4:26:23:d6:
                    f7:f9:88:d0:2d:c6:19:a1:21:36:bb:67:13:5f:09:
                    ef:98:1c:86:74:e2:dd:3e:7e:d5:cb:13:46:95:3f:
                    a1:8c:16:4c:d8:fa:f8:80:af:7c:86:03:15:26:c8:
                    10:0e:1e:82:b7:00:b9:84:97:e7:1c:6e:22:81:f0:
                    35:3d:0c:73:d0:96:76:28:86:f3:22:9e:4c:13:59:
                    36:e8:0b:77:3d:4c:a5:f9:69:7b:ea:f5:67:36:97:
                    13:b3:c9:c5:4c:2a:45:9d:e8:bd:22:e8:f4:47:c0:
                    09:72:35:30:b4:75:f0:76:20:cf:fe:ce:a2:89:6f:
                    d6:ab:be:58:a3:28:3b:30:e8:ae:17:d6:db:e4:6f:
                    ec:e6:a1:d6:58:e1:24:5e:8f:8c:f4:7b:6b:88:05:
                    55:25:85:5c:8c:17:1f:5a:ff:22:16:b9:5f:ca:88:
                    84:b7:1b:f1:ff:37:e7:94:37:8a:64:d1:f3:65:b3:
                    f1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:56:C0:E0:94:1E:81:6B:D9:2C:25:04:AD:D3:A4:3C:76:5E:76:2D
            X509v3 Authority Key Identifier:
                keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:b4:7d:f1:a0:de:15:4a:38:fa:4a:d3:b8:64:1b:da:f9:e3:
         ed:3a:2d:97:a7:72:32:52:9c:c3:35:15:2d:b8:e0:d5:d1:23:
         e3:91:dc:65:10:bb:7a:3c:97:9e:38:19:00:20:fe:8f:01:7d:
         d5:b6:a0:fb:b5:1c:0e:fe:c8:d1:69:05:c8:7d:70:b7:62:3f:
         89:2c:41:fd:e5:c6:cc:08:85:be:c0:d6:1b:e9:3f:84:8b:4f:
         b5:ad:65:a5:72:65:1f:9a:ff:bd:d9:55:61:f5:97:7e:a8:9c:
         49:68:8b:47:d0:eb:8f:3e:ed:16:4a:47:1c:ce:09:da:e9:a2:
         f3:d3:c0:f7:1b:84:10:fa:7d:f9:81:b7:4b:c2:86:ac:3f:e7:
         96:20:e8:ce:7b:06:80:e2:d4:9f:40:06:8c:8b:7c:34:84:74:
         87:85:5f:c4:2e:c9:d4:d4:0c:5b:0a:f6:44:77:1d:21:6e:24:
         c2:a3:10:65:6c:0d:b4:e5:07:6e:98:00:f0:5e:37:f5:bd:eb:
         c0:9f:d8:22:d7:77:50:62:9e:b5:58:42:8f:46:b8:a0:02:f4:
         17:56:46:12:21:47:67:7f:5e:52:6b:80:e0:cc:d5:34:f5:7a:
         50:89:87:20:64:86:c4:a8:6b:b2:20:37:d3:3e:ff:01:43:8d:
         38:3e:4c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----