Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File:                     MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier:          NOmENN9e76he8vHmXn7r0kQmKf6VAUIjS8zCWkfECOo=
Subject key identifier:   8C:CD:B9:84:0C:C9:44:82:38:30:60:71:3C:FB:CD:85:19:1E:D2:2F
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer:       /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial:       01962F070FDE31220413F5A2FA4AA7AC1B11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: C-bdkM4lL8tTpeZXpiv45nhPUuM.roa (hash: dO9wg4oa3fmXkWxOi24v6xA9xh5CDmqHbzYIcdtWFXo=)
                          2: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (hash: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=)
                          3: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: kE3etDmrUSnenXKvz6yn/nEdYWEEHwF1u412vIeiqM4=)
                          4: jBuJavuseI2B0_WgKkHYJZFvr_Q.roa (hash: tLuargg/vipoJVRdIR5x9HBU5Ji9GHfTNJavehQ1uxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0f:de:31:22:04:13:f5:a2:fa:4a:a7:ac:1b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=8ccdb9840cc94482383060713cfbcd85191ed22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:86:52:34:fe:2f:dc:5b:8f:e0:48:43:41:33:
                    67:b0:15:e2:64:56:99:4b:dd:67:52:67:51:65:5d:
                    04:a9:30:dd:e8:49:35:81:18:27:c0:9f:20:ec:34:
                    9a:34:0c:de:35:e3:9f:3b:38:c9:4e:f5:35:ab:21:
                    08:34:8f:5e:a7:dd:4d:8c:2b:3f:59:b7:c6:ce:48:
                    0f:24:8d:84:bd:5c:6f:57:64:6d:c4:1d:13:35:f1:
                    35:46:43:1d:4b:a2:40:f4:8f:f5:94:94:f6:de:e4:
                    c7:e7:07:d8:40:7d:db:a6:1d:1e:a6:88:d3:12:b3:
                    d0:8b:de:7b:6f:7d:0a:05:77:f1:fa:f6:d3:08:53:
                    bf:83:b7:bd:90:04:9b:e3:54:1f:18:20:8a:c6:4b:
                    b1:92:90:95:c0:0a:63:bf:69:12:85:d6:23:5d:9a:
                    f4:21:cf:3f:18:fa:65:02:f2:fe:93:80:39:9f:83:
                    05:f8:c4:32:d4:ba:e8:ca:ff:9f:10:18:78:c0:09:
                    6e:52:0e:6a:4c:02:5e:86:0d:40:b7:ce:7c:ac:91:
                    cd:5f:26:e5:da:ff:58:b1:3b:d0:64:da:ad:bc:ba:
                    bd:a4:7e:51:85:64:f3:73:f8:17:f0:07:2d:7a:bb:
                    8e:d9:96:74:69:98:c3:24:82:04:f0:52:b1:e1:7a:
                    11:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CD:B9:84:0C:C9:44:82:38:30:60:71:3C:FB:CD:85:19:1E:D2:2F
            X509v3 Authority Key Identifier:
                keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:49:d7:15:c3:a9:c3:e2:dd:84:50:73:f8:92:9e:9a:e4:f6:
         90:a0:c9:c3:b6:d8:ab:b9:d2:0c:c4:f8:02:7e:0b:ad:7a:52:
         f7:a1:7a:40:9a:aa:e6:e8:cb:02:b5:bd:e2:5f:fb:08:10:46:
         6e:4e:41:db:86:79:12:7c:cb:66:09:3e:af:1d:4b:b7:cd:8b:
         ea:15:27:d3:65:ee:74:d0:69:5e:32:86:fa:3f:75:f9:55:a6:
         e0:af:b9:16:77:ac:05:4a:fb:02:39:61:15:f2:66:69:12:56:
         60:cc:8a:db:20:5a:ec:d4:0e:56:a7:f9:89:3a:94:ef:3c:de:
         10:04:de:02:e2:63:b5:a5:45:0b:23:a0:0d:2d:8e:04:97:a7:
         35:6d:a9:02:b3:55:f9:16:74:8e:96:e9:35:25:62:02:88:87:
         76:5d:45:fa:f3:5f:a7:a4:0a:f9:36:6f:fb:9e:68:1f:46:7e:
         35:81:48:cd:3f:73:1a:f1:a8:38:67:e4:b7:c8:cd:2d:fd:ec:
         61:81:76:9c:f5:5b:f4:81:c5:2a:50:c9:a0:2f:fb:61:93:20:
         fe:b8:38:6d:4d:66:44:54:b2:09:63:f9:32:8d:8d:80:62:71:
         1d:d4:49:fc:1d:83:50:3a:65:4a:2d:fa:c5:cb:f5:2e:85:98:
         3f:b6:c9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----