Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
File:                     RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json)
Hash identifier:          MT7elCyDu+atMz4WLA8M+n/JwU8CF4euQFQno2JMuqo=
Subject key identifier:   3F:68:44:CD:C8:5E:66:7E:8F:E0:28:37:1A:26:0A:3B:43:A4:0D:F8
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Certificate issuer:       /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial:       01962F0740369B270264B5741525557DC885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: 3vuXYmLO804YeH7WzpNylqDzYzk.roa (hash: pZmQFxF+w/pjKco0VNoAljDoLP/ZSq7cNuWVMp1z4Eo=)
                          2: BzIUJhUJbKG8FJ3ZDsR0CAFvEys.roa (hash: Wo3BYY5cyZkRMqsE1puPM7lM2g8GnmQ0M7pog+XPkLo=)
                          3: Nb7Hg7akRGgFLg0o7rP2XiE5XvU.roa (hash: EbHLf1CAMq8uu0t9HdCeXITVauMDBAY269oNlJVY/XU=)
                          4: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: +AxNKBAdCQDaijXwcD9qtvI/vClyAlxl0qibZS897/w=)
                          5: iVv9ozH_svAyWCz87404M3b3dOg.roa (hash: B5ikMCrUQ9bNfvmS1tqxZLEZ9Uh8pGPtdisM2zHNixE=)
                          6: mTvSgsKtYgRt8pu16sczwcA1b5Q.roa (hash: HA7KgQxth/bMhlTtQkd1v9hx7TIOnotP3RRusUYr7/4=)
                          7: oxFojUhDbgbvQWJLE662AtGMYd8.roa (hash: D4p1qN18Lpr9kDtEzYCALPnApaaR+jAbpSvJT1J28Nk=)
                          8: rSBf7m4QN8B8IdOa1QZkuz2yGzo.roa (hash: HK04u30OvyiqU+SoQ1bUDIZ6GpYsXVoMPcjWlJuPm+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:40:36:9b:27:02:64:b5:74:15:25:55:7d:c8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=3f6844cdc85e667e8fe028371a260a3b43a40df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:af:bd:09:12:64:07:4e:42:dd:0b:54:7e:
                    51:e1:61:4e:e9:b7:6a:96:f1:4c:fd:4c:f6:e9:c7:
                    a6:d5:fe:fe:47:ae:44:2c:12:93:67:a1:16:ae:89:
                    14:12:8e:a5:ee:96:fe:da:81:13:ca:75:05:75:23:
                    38:c2:2e:a0:58:a3:bc:ff:38:a0:c6:f4:36:e2:2a:
                    d4:72:5d:6a:cf:9a:5e:b9:23:c6:b8:94:1e:74:08:
                    69:27:3d:0e:cd:3c:f9:6d:8a:a2:8f:1d:dd:62:2d:
                    16:88:54:2b:a7:b7:0a:37:84:8d:eb:ee:c4:26:76:
                    a0:86:30:50:af:83:79:85:c4:a9:a3:5b:d2:59:1b:
                    27:0d:a8:76:82:de:4d:b4:c2:94:4e:7e:91:44:53:
                    f5:1c:77:da:20:d1:1d:5f:eb:b3:fa:d1:69:f0:46:
                    78:59:13:3d:06:83:26:d8:06:8e:7f:7f:08:36:1e:
                    79:1e:67:2b:3f:f4:85:9e:25:21:28:53:36:51:60:
                    78:70:f4:9a:3e:4e:48:29:7b:7c:91:58:55:27:7f:
                    87:43:6d:2d:4d:c0:58:e1:69:ec:3e:d6:29:31:6f:
                    c4:3c:b4:75:cb:64:15:1c:54:90:7a:82:37:e6:e6:
                    07:ee:67:d9:2c:92:2e:fd:2d:26:e5:ae:72:b8:1a:
                    7e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:68:44:CD:C8:5E:66:7E:8F:E0:28:37:1A:26:0A:3B:43:A4:0D:F8
            X509v3 Authority Key Identifier:
                keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:5d:c7:5f:08:91:cf:11:22:44:46:34:94:b2:a7:77:04:75:
         73:6d:63:9e:ef:1c:ed:eb:ed:41:5b:12:75:1d:22:b9:16:f0:
         5b:00:42:0c:42:8f:58:4e:9b:84:31:62:e3:f2:0e:5a:be:19:
         69:9c:e7:bb:25:f8:2a:d9:70:3f:23:ee:19:2f:29:19:5c:73:
         8c:45:52:f5:b9:9e:77:dd:97:9a:cd:32:c7:c5:1f:5c:b4:ca:
         f2:ee:a8:22:3b:bd:ee:dc:ca:d2:3e:90:1a:32:b8:10:c2:88:
         34:cc:2a:e4:12:59:f7:78:09:a4:82:7c:23:3f:20:64:52:17:
         22:9d:84:6a:ee:bb:a7:b6:a7:8a:6f:4d:e7:39:59:d3:72:ad:
         09:de:79:5c:e6:1c:f9:43:ba:b5:b9:96:d3:77:79:0a:fe:e3:
         76:94:79:8b:50:de:31:94:d9:50:7a:b2:9b:62:22:e9:ed:3f:
         e2:b1:6a:e0:6e:58:f7:10:2c:f5:f9:bd:74:7c:8a:a1:45:de:
         83:b1:7f:6e:81:d3:a7:95:7f:a1:87:e7:44:b4:5f:45:76:67:
         0e:b7:32:1f:bf:a2:3c:31:14:33:cf:65:41:5a:05:3d:76:62:
         b5:49:ee:1d:b9:53:1d:75:89:91:1a:70:72:05:42:22:56:0d:
         a2:23:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----