Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File:                     RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier:          WjGPTDTSFSMf9+gdxi9sWU+O9mrxSWr61E82e0Yi9UE=
Subject key identifier:   C5:A6:6A:1A:9F:3E:7B:7A:33:BA:58:85:93:9F:3D:43:46:C8:C7:F6
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer:       /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial:       01962F7443921F0D99CB149836922970BFCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: ExN9i5VesHU3F7YUwnAG8cmmWIY.roa (hash: ohUReGOM59d9wdFacF3liO8XNYgM9oH2+Bntxv7lM1Y=)
                          2: L3NZE3diqCfrOMqlaqYV4hdJSf4.roa (hash: vcQOyWenVbLS69il7j69IF/EsJjMjN7DJNMQo/ozyO8=)
                          3: LHiOtk6tL1CXrv20IpGcmi0303Q.roa (hash: V/XoU0KL7XbTl000bnNR3hPbksWkdzPpz1xOimffKQc=)
                          4: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: Q6a0MsySj1GTVUqvA8JvwTK+BNSudmPKva8e8sJDwbE=)
                          5: nc6Tssi0fJUCdpIrzpS6gtLsknA.roa (hash: +UGU2rdYiUMrGCv6hqB6GXiHSsxfMHPA919kyoWQjQg=)
                          6: sAtItIdVW20mI2NFNh8XtGHWZOE.roa (hash: dKze9gkE7+w/iOUYyZPsFpG7X/XK0rolO2v25V1/rGM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:43:92:1f:0d:99:cb:14:98:36:92:29:70:bf:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=c5a66a1a9f3e7b7a33ba5885939f3d4346c8c7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:88:3e:06:37:9f:e9:00:8c:b8:5e:17:9d:
                    cd:21:e0:3a:28:75:92:ad:7e:41:75:eb:fc:6f:1b:
                    d2:af:a0:22:f1:6d:0c:6f:cc:f2:62:ad:5f:c9:35:
                    14:65:ab:a5:6f:14:48:5e:4f:d0:21:70:06:ce:59:
                    73:6e:b6:e1:66:b7:96:bb:7c:4a:3e:d2:ff:2b:69:
                    b9:94:0b:24:29:6c:6e:4b:ae:cf:f3:cc:85:3f:73:
                    11:46:5e:30:59:9a:eb:f3:e1:f9:8d:5a:a4:23:74:
                    9c:6d:c0:34:1e:f1:85:2e:3a:55:2a:dd:94:7a:14:
                    dc:d2:d4:1a:ec:78:d5:66:0a:b9:58:a5:46:fe:4b:
                    7f:4a:a8:34:c5:75:f4:1c:80:62:a7:8a:bf:3f:c8:
                    11:4a:13:fb:99:5a:61:b4:bb:0f:8b:9e:02:e7:91:
                    58:a0:11:cb:de:05:76:b0:bc:e2:18:ed:e1:e5:ed:
                    cc:f1:e1:6c:fe:3c:8a:1f:4b:82:31:f3:63:2e:09:
                    d0:dc:9d:e6:12:a2:4b:4f:9d:75:a5:30:58:c9:22:
                    58:6e:58:d3:f6:f8:ab:9b:c5:60:58:22:26:c7:92:
                    fd:55:56:87:6a:c0:cc:f2:26:37:d3:75:0f:60:15:
                    ae:34:99:3f:ff:62:64:0a:ce:ce:ee:9d:e4:a7:ed:
                    aa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A6:6A:1A:9F:3E:7B:7A:33:BA:58:85:93:9F:3D:43:46:C8:C7:F6
            X509v3 Authority Key Identifier:
                keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:93:e3:3f:f1:bd:78:28:1f:ed:65:80:3b:1a:56:eb:ed:9c:
         06:17:93:4d:a6:85:57:8d:40:5b:f4:bf:34:d8:a6:28:0f:7a:
         82:c8:9c:cc:96:85:af:36:34:56:89:4d:88:1b:0c:20:a6:77:
         ed:82:75:06:9c:fe:76:49:02:29:85:07:ef:3c:fc:f8:d7:35:
         a1:97:56:57:af:a8:69:60:45:f2:88:df:54:0f:25:31:2c:0c:
         bf:5a:9a:06:69:e3:0f:d4:c5:10:d5:96:16:be:d8:4b:41:03:
         b5:dd:a4:2a:f4:16:0e:13:7b:f1:d4:09:7d:1c:38:89:66:34:
         7a:b4:3b:3b:da:6e:07:52:cd:82:2b:51:65:a3:96:69:0f:2d:
         20:0d:b8:bf:ad:54:1d:20:32:1d:c9:d3:11:7f:0f:1a:7f:bd:
         fb:83:6d:a2:9a:20:6a:70:20:89:6c:2a:d1:7d:6a:76:97:3d:
         eb:76:a1:7d:76:33:b3:98:0a:80:de:6c:fb:95:e5:47:7f:b9:
         8b:c6:3b:d1:a7:dc:f2:32:0c:83:28:14:41:be:34:44:a9:0c:
         3f:2d:3c:3c:de:88:1d:e1:1a:f1:00:3e:98:7d:5e:79:1e:7f:
         41:2a:23:65:3f:54:f4:0e:22:1e:a8:07:ed:e8:5f:42:fb:74:
         d8:84:ec:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----