Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
File:                     RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft (raw, json)
Hash identifier:          BT4wt3Ji4i1Rddn2W5QTiYv0Fdc09d422nZGrhl8PGc=
Subject key identifier:   19:8A:4A:F6:51:45:D4:CA:61:44:E9:23:8E:60:BB:0C:47:62:04:AE
Authority key identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
Certificate issuer:       /CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Certificate serial:       01962F74D4A4E0A224B5823405F944480E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: RO-2xcQ-C0WrDSJ7Eu00WY23rS4.roa (hash: Avrv1nDidaSbZAK1I64G61mkaNMT6r8igSyRsacO8hw=)
                          2: RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl (hash: 56rXsaHXZgyjzx5vcR3E+ALelh2obnnGXNufqsoCvIM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d4:a4:e0:a2:24:b5:82:34:05:f9:44:48:0e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464528d9080c665db0551d8ad8b0f71f7bb76996
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=198a4af65145d4ca6144e9238e60bb0c476204ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e8:9f:16:83:59:b2:cd:f2:16:47:e9:a5:5a:
                    16:29:aa:29:5e:24:43:e5:c9:d7:7f:07:53:55:a7:
                    b0:da:e2:19:2f:e2:d2:41:cc:63:c5:12:22:1b:b6:
                    37:74:44:08:c6:92:fe:29:b9:42:2e:3c:0c:5d:47:
                    ae:ad:1d:a9:98:96:9b:f3:db:e6:04:94:f1:0d:f3:
                    f2:4e:94:ad:00:0a:79:fc:9c:5c:dc:c3:4a:0b:77:
                    63:b6:db:c0:24:53:b4:75:6a:52:e5:91:c9:81:aa:
                    4f:da:e2:17:71:aa:b0:5b:39:4a:58:a1:86:b2:29:
                    df:30:e9:70:3b:30:50:36:48:35:65:b2:eb:35:98:
                    c8:98:74:fb:51:85:67:c6:70:b3:d5:3b:55:b3:35:
                    bb:28:f4:f1:f8:0d:00:07:7e:d9:99:7d:2c:3b:b5:
                    15:f6:e5:52:3e:54:ff:94:7c:85:31:89:fd:ff:ab:
                    48:1b:57:08:cf:dd:e3:7c:70:fe:b2:bf:e4:7f:b5:
                    03:a2:51:bd:91:3d:64:69:28:43:f5:f2:1a:fc:d0:
                    89:08:b0:94:b8:e4:27:85:cd:30:08:65:77:84:1f:
                    47:1c:1b:1b:45:50:5d:44:a0:2d:84:b6:33:f2:4c:
                    82:1b:8a:ef:0f:c7:f5:4b:35:1d:ef:bd:1d:ad:93:
                    9e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8A:4A:F6:51:45:D4:CA:61:44:E9:23:8E:60:BB:0C:47:62:04:AE
            X509v3 Authority Key Identifier:
                keyid:46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:12:54:c5:08:f9:2d:a4:7c:3f:38:0b:34:e0:b3:6c:07:d7:
         d1:3f:93:bd:56:7e:f4:59:9d:8f:dc:72:b0:fd:7a:d1:ff:3e:
         77:f6:9f:f5:55:55:d4:58:da:11:db:6c:2a:2d:84:55:75:f2:
         33:22:cb:11:39:96:d4:f0:e4:37:57:32:18:1a:c8:b0:44:20:
         c5:4b:48:45:a5:6e:3a:06:c4:30:43:47:93:df:94:e6:02:70:
         87:0b:a9:ba:ac:b1:51:50:07:54:82:fc:5d:bd:e9:59:b8:58:
         93:88:99:d8:58:dc:9a:17:a0:3a:62:a2:7c:e7:75:13:92:4b:
         6e:0e:1c:ea:d3:25:52:1f:4e:92:3e:6f:b0:99:27:fc:9c:67:
         e5:9d:83:3e:99:43:e7:66:e5:28:20:d9:9f:e6:22:24:c5:d7:
         ed:57:30:98:2a:2a:33:8e:30:0c:d3:3d:c2:c9:cd:7b:0c:1c:
         65:d6:e6:e9:ad:ee:b3:b9:7f:36:c6:b0:fa:8d:2f:16:2a:e9:
         08:e7:9e:e4:d8:2c:14:8b:9c:66:65:d1:bd:3a:dc:8f:3d:53:
         07:3b:8e:8b:f9:e2:12:fc:26:04:76:57:55:20:bd:5a:6f:1d:
         38:b0:92:07:25:a3:b5:55:c7:dc:7b:d1:b3:44:26:3c:d9:9a:
         8c:a6:70:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----