Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
File:                     sUq6i2B0k5NHjoPDYObL110Vb4k.mft (raw, json)
Hash identifier:          BGOCz3gWqNOD7hoZV04iUXsYp9OkzjhcKkflOpiL0Tc=
Subject key identifier:   4C:E1:3A:23:98:48:56:C7:B0:C0:08:CA:A0:30:78:32:84:5C:CE:6B
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Certificate issuer:       /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial:       01962FAB7048506ABF0C1941DDA5E06A94E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: COiOJlNhkw7oyE7_CjG4wzI_Has.roa (hash: 8/lIfM84EcdzcDMM/2GUz4VN/PyuQhy9fYkjMmQOIDI=)
                          2: Lsu4SS6ThyYeppRYu6PmZ-042nc.roa (hash: uXqaykBNjJacbWPSq8V/QHVwNjfPRIGaAOgab5oa/hs=)
                          3: YELUwe4nammHucxrbZyOcSXhQAs.roa (hash: F7evvDSLJ4aaJnnTjKcdJcahJaI+uHzuDY+hV5o5tME=)
                          4: hsH-e4sppViS3iNq4F4kEU0ep0g.roa (hash: dqKnOJjGSqIH7LzL8ZBxcWScroq9fSiiauAsWgvwoYw=)
                          5: lAQuczRYGnewQpXm-9DH2Aa2FJM.roa (hash: cpxHeGSggctdEQY5QxkgjLkTiuh9nHgtIGZfv1ijkMo=)
                          6: sUq6i2B0k5NHjoPDYObL110Vb4k.crl (hash: +wSIgpyRn5zMA2iMTDfQXJVLvWMIfqMwZc2PWGw8uXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:70:48:50:6a:bf:0c:19:41:dd:a5:e0:6a:94:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=4ce13a23984856c7b0c008caa0307832845cce6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:78:5c:21:5b:e5:4d:a6:6c:5e:9b:a9:f6:
                    61:93:17:e7:74:32:10:f6:c8:87:e2:44:3d:2e:0a:
                    47:f9:6e:64:47:6c:a0:bc:e0:f7:27:9c:a1:c5:e5:
                    17:29:d5:67:53:f8:d6:8b:a5:9c:c1:1d:78:ff:d3:
                    c8:15:b1:38:f0:6c:4f:fa:60:09:fa:ed:16:87:95:
                    1e:2c:19:a4:4d:e1:57:a3:45:48:61:58:af:80:82:
                    37:31:6f:d5:0d:46:de:69:ed:fa:21:ad:72:41:f7:
                    d3:3a:70:18:79:33:34:00:e6:38:7e:56:74:e8:59:
                    5c:55:7a:0b:2b:ae:f7:b3:20:5e:70:75:84:4a:22:
                    af:4d:c1:c7:a7:47:b7:08:c4:26:54:77:f3:62:3d:
                    c6:f9:b2:e2:22:b8:2d:77:07:2d:49:45:ca:f8:c1:
                    d5:f5:8f:9c:36:1c:ab:03:39:9c:40:9b:e8:b9:be:
                    60:3c:ab:18:e8:c5:0d:0b:b4:a6:3c:c6:75:3c:23:
                    89:f7:93:ba:00:45:90:6c:99:9e:1f:84:01:4c:57:
                    08:35:59:3d:76:98:c0:b5:45:d9:b7:15:c3:39:07:
                    66:1e:71:d9:6e:13:80:f6:fc:a2:b0:f7:22:bd:6a:
                    79:8b:de:74:db:e6:96:d4:47:3d:b6:1b:ef:12:4b:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E1:3A:23:98:48:56:C7:B0:C0:08:CA:A0:30:78:32:84:5C:CE:6B
            X509v3 Authority Key Identifier:
                keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:23:79:02:b0:ba:36:18:29:09:83:85:5c:fe:65:ad:6c:78:
         70:fa:a2:d0:21:a8:45:3e:80:30:14:7a:0f:87:99:ee:3a:cf:
         da:ee:53:22:66:ea:13:7f:08:62:46:78:41:7e:eb:c7:7c:7d:
         20:eb:f1:b8:c5:51:bf:2b:31:52:ad:c3:0b:37:17:a9:dc:e4:
         b6:59:a4:f8:cb:de:09:cb:c3:5f:24:96:e3:5e:93:c2:ec:75:
         9f:02:8b:12:09:25:88:89:d6:68:d3:14:e0:61:23:cc:46:ae:
         b7:2c:0d:dc:61:11:97:b4:ab:ce:2e:bc:a8:2c:51:a0:ff:ee:
         0a:6d:b9:20:a5:67:0f:91:aa:87:52:d5:f8:75:aa:08:d5:78:
         5f:d4:f8:5d:a7:56:70:93:a3:be:db:24:0b:e4:b2:b7:b0:f1:
         88:76:e9:ea:f8:7a:76:dc:55:2d:57:9b:0b:5e:e6:6a:8d:d3:
         b8:b9:8c:fc:c0:1e:24:88:fc:0c:6f:38:1d:45:73:30:e5:e4:
         0e:b5:36:eb:a5:32:58:a1:b2:25:13:2b:88:77:8c:b7:32:b1:
         68:ba:99:5a:ad:8d:17:4b:27:ce:f2:f9:40:6a:78:a6:a9:47:
         16:22:2b:a9:bb:01:05:95:90:08:4b:1f:95:1d:31:11:44:b5:
         93:52:49:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----