Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File:                     5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier:          8O9//8JbJKXFPs7hdligL0iO77s8+tJ9g5Kve4Rw5TY=
Subject key identifier:   B9:35:27:40:DB:8E:59:A9:FE:D6:91:C3:19:A5:61:AC:31:67:DB:FE
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer:       /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial:       01962E99509E0641350B1246D8B29157E368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: 1-rRkYRd227_5bnec3bYwnL5SxpY.roa (hash: R+OpLqItt4unWxgfStcunzTz6dBOZ563zxthlacRJZ4=)
                          2: 12bcoRpyhxcN6wVe5E7GqdMB6EU.roa (hash: r0dkh09UaIafY8LdKgjtDDwdtCz3QHwlzpUJT/cj3NA=)
                          3: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: dDzaHanQNCI8zZV1PcOdHvCu9oAH6fNosIFfdE3H+g8=)
                          4: 7QAi3hol-4GpeEk0vacoCeiMLE8.roa (hash: 41WAyyFZEfqE7fT5J+jGu94yYNN3Qp+eHjuNlnSVUDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:50:9e:06:41:35:0b:12:46:d8:b2:91:57:e3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=b9352740db8e59a9fed691c319a561ac3167dbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:ef:4e:39:ee:4a:f3:f3:55:55:de:8a:be:
                    8f:11:8d:b8:2d:bf:18:8c:38:ba:c3:e5:06:86:48:
                    64:8b:3a:1d:53:78:92:98:56:8b:72:7e:39:58:cb:
                    d8:51:ec:1a:af:10:2b:7f:29:a6:f6:4d:81:b9:dd:
                    b7:0d:90:58:62:00:22:7a:15:ce:b4:44:af:78:3a:
                    3e:90:02:9c:92:b7:a9:cd:7b:e8:55:13:e1:b5:f7:
                    67:0a:f1:ed:68:50:20:e9:6d:eb:84:ae:ce:ed:b3:
                    29:3e:85:69:86:7f:67:5f:de:9f:72:f7:cf:15:b2:
                    fc:75:ae:94:1d:2c:58:f5:14:c1:24:b6:a3:41:e6:
                    23:bc:56:e3:8d:7d:f1:45:5e:58:43:32:fb:e0:da:
                    00:c8:96:1c:d2:25:40:f4:31:88:f6:df:fa:b0:cf:
                    26:54:0d:ce:a7:b2:f4:42:3c:a3:18:dc:98:38:14:
                    25:b9:da:07:97:a5:95:17:21:50:81:ee:43:a8:2b:
                    ef:9c:f5:01:bb:0a:d1:95:c7:a2:b5:bb:67:93:c4:
                    69:c8:cb:68:af:e9:f4:b6:02:73:05:68:6b:57:a5:
                    23:45:65:a8:aa:66:bd:37:d3:d1:a9:8d:40:cd:ef:
                    27:e9:6c:51:aa:43:42:73:35:f0:ce:80:63:27:16:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:35:27:40:DB:8E:59:A9:FE:D6:91:C3:19:A5:61:AC:31:67:DB:FE
            X509v3 Authority Key Identifier:
                keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:66:cb:f4:6f:d4:2c:2d:51:f9:36:0f:f7:bb:90:49:13:a6:
         2d:e1:c6:dc:a7:58:82:14:6b:ed:77:67:2f:a8:e0:a1:7a:be:
         aa:bc:7a:09:25:5c:63:7d:be:39:d0:75:e5:25:eb:ec:14:79:
         e6:e1:92:43:63:7c:c5:76:51:84:f4:64:78:5f:0e:82:9e:a0:
         be:db:67:fd:58:d7:64:58:0e:52:6b:98:3c:09:f6:9d:d7:b3:
         3e:7e:4b:6b:6e:6b:68:09:67:d9:e3:31:33:00:bb:70:59:c2:
         d4:3c:ad:77:ce:b0:aa:03:cf:65:3a:24:42:56:8e:32:bb:79:
         15:ff:18:36:72:b1:0c:ae:16:29:b0:dc:a7:7b:0a:bb:50:95:
         81:51:98:f7:f1:08:34:0b:e6:15:c6:16:52:f8:4b:e9:56:0a:
         fd:25:ff:f0:7a:86:b8:ec:73:e1:c8:cf:b2:ec:1a:24:66:7a:
         c9:ab:bd:bd:1e:a8:85:d5:58:e2:fc:1c:5a:78:b3:ef:f9:b8:
         95:76:46:3d:b7:09:69:0d:0b:d5:2a:db:5e:ed:f4:15:f6:27:
         a5:8a:a8:8e:fe:b6:23:c0:a3:2d:c9:09:77:a3:75:fb:26:e0:
         03:b9:69:b8:d5:00:ef:b4:21:d8:85:4b:7a:ef:b3:aa:41:12:
         37:84:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----