Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
File:                     V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft (raw, json)
Hash identifier:          0FRs/bFa6WA6lHhZTllqE3PfXCn3CMB0oqCUol0DR1s=
Subject key identifier:   E1:31:72:89:40:E8:2B:35:85:98:4A:D2:86:7D:05:95:38:0C:DB:E7
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Certificate issuer:       /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial:       01962F748885BCC3780FA649134D6678D682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: EjNs4c7ExfB-Xn86trYUTIGxY9M.roa (hash: 5gdWhqxScCqY+ac2NlShb0emeLCeoscJIL/u5Z1pQss=)
                          2: FQ_8F69qJ1OIvrywFvryFirKQj8.roa (hash: q2ovk1tVG4lGYgmszBcNRyfEZ8Wo4tad3oDRiuzylzY=)
                          3: V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl (hash: clQB2BajHnPOmTF+w7f9FsCZKT6dwaiIFZLV1yLP5m4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:88:85:bc:c3:78:0f:a6:49:13:4d:66:78:d6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=e131728940e82b3585984ad2867d0595380cdbe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:18:72:67:a4:ea:52:d9:80:3b:20:e3:b9:
                    dc:64:e7:b5:76:f0:d8:fd:f8:61:fc:02:cd:7e:1f:
                    f1:f7:79:97:ff:03:bf:9d:88:0d:09:9c:54:c6:a6:
                    90:9a:b2:38:51:3f:d0:c3:e8:76:c2:fb:eb:55:72:
                    3e:c8:e1:1c:0d:a9:d6:84:1b:5a:4b:51:5b:8c:b9:
                    e8:70:7a:9e:25:41:3b:49:b0:6c:6a:56:93:8d:4e:
                    bc:60:0c:c8:95:df:37:2c:7e:45:60:5f:f6:28:e5:
                    48:89:6c:ec:d7:26:e4:fc:85:9d:7b:62:d0:00:e9:
                    e7:d9:3a:3f:d3:8f:ab:ad:02:87:21:f1:d6:df:7c:
                    91:38:80:0d:59:1c:64:42:a1:f5:c9:29:6f:d8:89:
                    3d:ad:1b:81:c6:9a:60:a1:cb:ba:d5:53:8b:55:c8:
                    e3:ee:60:b6:2a:24:4e:d8:ba:3f:22:e7:c2:35:21:
                    76:7e:01:e8:d0:26:88:ba:f5:43:68:ca:d6:bd:79:
                    01:62:9c:a4:44:64:95:31:95:9b:28:1f:91:95:07:
                    32:2e:91:3e:60:5d:5f:35:12:e5:46:3c:90:a4:55:
                    2f:6d:f6:53:96:6a:6e:5d:84:34:b5:52:36:aa:05:
                    62:bd:62:55:ac:4f:72:24:d0:8d:4f:b4:a6:31:24:
                    2b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:31:72:89:40:E8:2B:35:85:98:4A:D2:86:7D:05:95:38:0C:DB:E7
            X509v3 Authority Key Identifier:
                keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d8:22:ba:46:8f:96:f0:d2:fa:80:f4:2a:de:71:1f:28:9a:
         9e:4b:3e:04:32:9e:62:f3:a9:5f:37:88:d0:6b:d8:15:9f:5d:
         8d:b0:2c:02:31:e5:82:8e:cb:f2:16:b7:d7:10:f6:c3:91:00:
         2e:a3:1d:39:48:32:4d:0f:fc:89:d3:f6:56:85:70:87:0b:45:
         0d:3d:64:0c:a8:b0:06:63:13:37:15:12:ae:04:47:0e:93:1c:
         9e:b4:83:f4:f6:9c:97:be:80:23:9b:ab:8e:6c:a7:43:f2:04:
         c8:c6:b2:52:42:71:01:a2:65:a4:05:a9:82:e4:4a:93:60:2d:
         ed:e6:0c:cf:fc:6c:23:64:79:5d:b8:aa:b1:56:a7:2e:ef:96:
         91:27:26:9c:01:1a:ae:38:37:59:08:42:59:7b:91:38:13:b4:
         4e:e9:5a:e8:b1:18:42:80:a9:f5:40:fc:1b:8e:f0:df:ae:47:
         ef:cf:df:ca:9c:7f:2f:98:08:95:62:cc:ee:da:61:8e:03:ac:
         e0:98:8e:f9:c6:f6:6c:f0:ba:a0:1c:78:ca:a9:c6:5a:8a:97:
         51:40:9e:f5:37:2b:6f:e7:f0:9c:92:61:76:c8:fd:52:4d:5f:
         39:44:31:9c:cf:b5:03:6b:c8:66:44:bd:2c:1e:c4:ed:61:90:
         41:4d:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----