Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File:                     k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier:          BDuddozEyBUs24RhqEPMxXzjhM+ZE0xvY9AAq0i1gMM=
Subject key identifier:   46:DC:AF:EE:E2:DC:D4:0F:F2:DE:F2:AF:75:39:12:21:F3:D2:FE:45
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer:       /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial:       01962E61CAC5D5A12CDBFA4AF0D479644DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: NTg9OXL0K1q6oIphLyEzaDGfQCY.roa (hash: JPGRMPCgNa0qX2FCRDdYUj8vtmsY21KyuXO1oToaMRc=)
                          2: dY-Dye7h41u-2hfRoP7W4pxXIJg.roa (hash: UwiKyU3cKOo3zfN7zb9sCFXqqeVuVkYYi2igBoealCQ=)
                          3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: XIRs4CAD0k/vm24yXX8xAiWlthIZAbI1lQhSWGCC/RI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ca:c5:d5:a1:2c:db:fa:4a:f0:d4:79:64:4d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=46dcafeee2dcd40ff2def2af75391221f3d2fe45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:ee:c6:65:a4:56:c4:89:e7:51:ec:8e:d5:
                    82:3b:f6:e7:60:43:d8:b8:54:77:fe:0d:3d:fb:43:
                    c0:28:61:3f:30:17:1d:ed:cd:42:51:ca:99:c7:07:
                    4f:7e:43:00:c6:ed:ff:a4:be:fe:ba:5e:2b:4d:73:
                    5c:c3:f1:ae:02:4c:21:fe:bf:3f:52:05:75:cf:14:
                    92:72:83:b9:a8:99:9f:5a:a7:10:78:5d:03:86:51:
                    9a:12:0a:ab:c6:33:96:0f:ee:ec:01:96:37:d8:9e:
                    85:3b:14:01:b8:3d:34:fc:20:8e:59:fa:af:48:36:
                    d9:21:42:44:71:00:80:a3:1e:c5:e7:3e:ca:5f:d3:
                    42:37:73:b7:3d:28:4b:7b:db:b7:26:1f:9c:f4:76:
                    18:6c:d6:2c:81:e4:e8:bc:ba:96:1c:1a:87:d7:79:
                    9d:d1:3e:93:af:39:6c:54:8a:b1:59:f0:72:48:fe:
                    52:40:0d:bc:2f:d9:2d:bc:61:8b:e1:e1:04:54:00:
                    a6:b0:00:8b:3b:eb:5c:e3:2a:7e:05:34:f6:b3:3d:
                    d8:1b:63:cc:6f:22:9b:68:98:6f:58:4e:2e:b8:97:
                    98:76:c1:e3:dc:01:46:45:28:61:15:97:b9:7f:21:
                    c5:55:be:8e:1b:71:07:4d:df:85:a4:c6:bf:fa:44:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DC:AF:EE:E2:DC:D4:0F:F2:DE:F2:AF:75:39:12:21:F3:D2:FE:45
            X509v3 Authority Key Identifier:
                keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8c:a8:f4:b0:ae:3f:5d:b3:36:5e:3d:cf:8e:bf:9c:3e:9e:
         a4:32:f8:11:af:70:e5:65:4c:9f:37:40:ae:0f:2e:3c:c9:34:
         48:e2:d0:24:25:40:bd:ce:22:b1:a8:6b:a6:83:14:6e:23:9e:
         7b:e8:21:5a:71:4c:17:87:9a:c5:d6:0c:96:42:a0:f4:3f:59:
         91:28:d7:6a:a0:a1:dd:b1:8a:e8:29:65:c7:67:1d:98:e3:64:
         f4:1d:16:be:ff:cf:c7:d5:6c:59:38:a4:fa:87:d5:e0:4e:07:
         15:43:2c:b4:4b:f4:af:bc:dc:ff:e1:2d:41:3f:c2:fa:3b:7a:
         eb:0c:41:6c:ec:db:27:be:8c:6a:80:68:16:05:d7:66:fa:12:
         b3:62:da:37:71:6f:a0:0a:b9:f0:f5:be:4a:4f:cc:51:7d:67:
         ac:59:72:bf:63:d4:2d:d7:95:b5:53:53:50:d7:04:ca:2e:d5:
         36:bb:82:7d:e1:15:11:c4:50:a8:94:c8:dd:f0:13:7f:82:86:
         93:13:52:17:42:36:56:c3:65:b3:fe:47:ad:ad:e4:82:06:38:
         ac:53:be:21:5d:60:af:f7:27:b0:a0:30:16:86:ca:c6:d3:d4:
         ba:1f:04:92:05:92:82:0c:8f:bb:04:73:c1:3a:0c:af:9d:45:
         a0:03:9b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----