Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
File:                     itkoGq_vyDda2LS35gSJlVWVIjc.mft (raw, json)
Hash identifier:          tlXeqoA50s98BClK71ti4KIyOPUiyU2RXEMuvpaZU8M=
Subject key identifier:   2F:E2:43:EE:DB:78:8D:40:00:1E:11:FF:AB:68:6D:A1:05:DA:C4:71
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Certificate issuer:       /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial:       01962E61939C3547625FAF531ED94B05C04A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: S5poUcmm58bh9LYHwgnRXNYgnoA.roa (hash: lYdAfaTYBlu17YVjsaWJtgDfvkSUWB0Kx0isvQs/8cw=)
                          2: UH7ERX2uEAwiuiu2EIP73IUUkwI.roa (hash: 71rfZI37bB6WKWLPGXn68iFKAbS6rOx+kOHCTWBrP9Q=)
                          3: cFWMX2o_ui2JzGo_3BwtmNDE6Xg.roa (hash: XCpyD2PZhsa33O69EMpxJ6xZIifq0UTk39opm80d+zI=)
                          4: itkoGq_vyDda2LS35gSJlVWVIjc.crl (hash: nw6bVlPsD+5tjAOxipD3kzoZUyGvxfG0GWex+B1hse4=)
                          5: sShD_q4ceLwxQ66Q2G4C6NLHOns.roa (hash: BiX0Ojf2DbZMT20uSZBtFAbZP4As97iO/AHVcU+bzqI=)
                          6: tk3p5E2XBBz_gCKcQbPuR2gwU6g.roa (hash: /uRgiUmwXV30g9CXl0HkFIaUTifbBZ9DvHMj/iIVKLM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:93:9c:35:47:62:5f:af:53:1e:d9:4b:05:c0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=2fe243eedb788d40001e11ffab686da105dac471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:17:34:da:9a:8a:60:ac:99:2a:4b:a9:5e:
                    e4:c4:f1:2d:15:5b:a9:e0:45:10:f4:4a:70:d5:0b:
                    a7:2a:19:7e:47:a8:be:c8:bb:97:40:6c:08:c5:6b:
                    88:75:8e:a5:9a:a9:c9:8b:a3:4e:e4:01:d2:ca:f4:
                    95:c1:f6:a5:21:39:8d:e4:91:11:0a:4a:cd:66:72:
                    cb:ea:c5:da:7d:7d:51:93:1e:f5:1d:57:9b:ee:58:
                    2f:74:35:0b:95:c7:03:70:76:fc:43:ef:be:a8:b3:
                    13:a9:f1:77:52:63:c1:e7:2d:f2:81:75:79:bb:61:
                    c3:25:f3:76:2b:d7:c3:08:95:1d:ef:1c:87:0f:05:
                    a5:91:f9:f5:fa:12:6a:fc:76:dd:1b:1b:54:a6:2b:
                    bc:0a:2b:ce:96:cc:81:5c:3c:68:2e:d0:fe:50:bb:
                    db:df:b0:83:98:6e:7a:a8:b0:2e:b4:6d:d4:b9:60:
                    0a:76:9b:4c:df:e5:b6:26:8e:19:1c:68:f8:d6:35:
                    8f:a7:5e:54:9d:1e:ca:b3:f1:4c:af:4a:1b:b2:3d:
                    84:54:b7:cc:6b:f3:28:ad:4f:6a:12:59:16:df:f6:
                    4e:2a:56:fa:72:6a:98:48:87:a7:f1:b7:02:9d:a3:
                    67:4e:3c:8f:ba:68:45:8e:9e:d2:2c:c2:a4:eb:db:
                    b2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E2:43:EE:DB:78:8D:40:00:1E:11:FF:AB:68:6D:A1:05:DA:C4:71
            X509v3 Authority Key Identifier:
                keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:af:da:4c:37:b5:1c:83:a0:db:8e:dc:a6:48:82:3b:fe:0c:
         0d:21:1d:e6:82:9f:7e:26:88:32:0b:83:bb:b4:91:8d:7e:61:
         1f:4b:7b:a2:39:0b:7d:b2:0e:09:6d:2d:d9:98:52:2e:ec:d0:
         fb:d8:4e:1c:b5:8a:94:24:02:99:2e:fa:5d:e7:67:92:ac:51:
         ad:69:1b:21:bd:4b:5c:6c:32:18:bd:09:02:5f:c1:f7:99:e9:
         11:54:d1:ca:d9:95:19:6a:8f:81:c0:e5:ff:c0:09:05:5d:77:
         19:58:ca:76:e5:ac:b2:6a:84:8e:5f:65:af:1f:e7:30:77:1e:
         96:7e:66:e6:8e:d0:72:ce:34:38:35:06:bf:9e:5f:de:8d:71:
         74:47:b2:eb:6c:52:b7:d8:f0:81:bd:59:9e:8b:3f:9f:28:cf:
         ed:e4:55:9c:88:d0:13:21:0b:89:d2:9a:e9:c5:18:60:a1:45:
         da:6a:49:0f:0a:b3:67:d7:ef:16:42:34:77:0d:f1:16:cc:9f:
         f0:8f:3a:1d:45:35:0f:bf:7a:ba:53:06:48:d5:89:6a:63:4e:
         50:64:f7:81:c5:27:a8:c6:c4:34:c3:04:eb:5e:1c:9b:11:ca:
         95:79:88:19:40:9b:7d:0b:d5:d4:dd:d3:0f:39:e0:c7:d1:2a:
         fd:ed:56:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----