Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
File:                     MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft (raw, json)
Hash identifier:          TIdjjgCFxahYOXK01fqeZH3gTQ64DCvulGY9QCErhGU=
Subject key identifier:   E6:15:E4:D0:83:BD:9E:6E:6C:45:B4:08:1B:D1:8D:45:67:75:11:6D
Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
Certificate issuer:       /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Certificate serial:       01962FAB8732133104F90E4791CC4965F3D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: 3Ld3_xMK0PlfZFY-qBwXca5iVGM.roa (hash: CjU6hi/Jh6Zo5sGQ2UDjZfEn9Czpv8lCLYgvh/6NOKs=)
                          2: MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl (hash: zMOfpTFRzI8sw+ih3SU7ugggn33uAiSQPCZuG7Vss3A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:87:32:13:31:04:f9:0e:47:91:cc:49:65:f3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=e615e4d083bd9e6e6c45b4081bd18d456775116d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:34:0b:53:17:70:79:ad:0f:b5:15:31:60:
                    dc:14:66:c1:4a:73:95:5e:d8:14:49:27:d0:ac:f5:
                    72:07:f0:72:73:f2:b4:2d:1c:b1:4d:44:e4:22:a6:
                    9b:ea:83:37:cd:11:ff:db:b2:21:c4:27:14:b8:05:
                    4a:f6:e9:c3:aa:fc:26:3d:26:54:3e:13:cf:87:0c:
                    56:ae:33:95:5e:ac:79:6e:7a:df:38:e9:f6:73:77:
                    47:e3:72:30:80:16:54:85:7c:f5:52:01:44:b7:57:
                    72:a3:80:67:11:58:7a:4c:3b:9a:16:b3:bd:e1:28:
                    f6:cc:3b:17:a3:f4:80:0c:87:f2:d5:e4:1e:98:b4:
                    58:ba:eb:5b:7c:8a:52:ad:54:40:1d:da:15:67:93:
                    80:b4:6b:75:c4:76:b6:25:fd:03:56:9b:fe:55:de:
                    5a:97:dc:d4:0d:95:07:28:c7:01:97:07:9a:18:00:
                    66:c8:99:0f:80:10:d1:82:68:47:6a:84:76:ba:c3:
                    03:61:28:b2:a4:5a:7a:42:f3:05:c8:71:48:6d:12:
                    d6:ba:45:d0:e3:7a:c9:d9:33:a0:41:2f:be:c2:89:
                    f3:49:7e:97:f1:bd:bb:75:d2:c9:57:89:46:3f:09:
                    c6:06:be:15:f7:34:f0:72:d5:7c:0c:7b:25:ac:4d:
                    ab:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:15:E4:D0:83:BD:9E:6E:6C:45:B4:08:1B:D1:8D:45:67:75:11:6D
            X509v3 Authority Key Identifier:
                keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c9:bd:6e:8b:c9:af:70:02:81:71:7f:03:fa:8c:07:38:19:
         79:2d:2f:7d:f5:c4:83:9b:3b:ba:c6:94:43:7c:ff:e4:ad:ad:
         be:89:a4:0f:c6:df:b4:f1:32:b5:ce:fe:d8:24:42:a2:53:79:
         52:cc:9a:63:c8:26:c0:75:60:69:c9:53:2f:58:ae:a4:c4:d3:
         91:8d:3d:c9:0d:b8:d0:ea:89:90:d2:14:6d:77:e7:21:84:fe:
         37:31:9c:69:74:ed:49:67:1d:49:e8:2a:95:b3:2f:19:ee:56:
         fc:a5:f3:c3:4b:b8:04:af:ec:7f:7e:5a:e7:41:e4:a7:0a:ca:
         2c:ff:ca:9e:e6:89:51:c5:d6:82:02:26:a5:f3:7d:e2:d8:92:
         c7:c1:8c:05:27:b8:f4:49:3b:97:e2:d7:cd:9b:f6:bf:11:e2:
         7c:a1:5b:29:7d:e1:20:f2:5b:63:7f:ca:97:2c:83:12:24:0a:
         1d:4a:85:2b:42:ac:04:8b:3b:64:b2:6f:eb:6b:d3:aa:24:67:
         63:45:c2:1c:c8:22:f9:c1:1b:07:4d:8f:ad:a6:fa:d6:1f:82:
         c7:a5:35:96:e0:12:c9:01:bc:98:7c:8b:a0:32:f8:dc:65:e0:
         4d:24:d5:99:f6:e6:75:a4:4f:ef:60:3f:95:a3:27:26:e1:c0:
         87:3d:54:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----