Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
File:                     1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft (raw, json)
Hash identifier:          GUrEBba289TcK2pyATFEQbnqL7BOiQ0aJQ2En2mJhIU=
Subject key identifier:   F0:DA:7E:6C:39:77:C9:E4:7E:71:0F:6D:9D:0E:09:28:6D:F1:EB:20
Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
Certificate issuer:       /CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Certificate serial:       01962F74465E48268CBDB2C4F5293C6E4660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl (hash: gr1AzGJ4tX4MCJTDgNuGeiB27XzocMiw4XBHJ9E2gn4=)
                          2: GBHgZs5smXIHM4FYLqRTdebAY54.roa (hash: 8eoGRtWR94CvV+AUeQO0MQrawByEe9oxj8H6brsnZqU=)
                          3: ZaZt-EklqiwdQvzDUFQiPldPl5k.roa (hash: oR9yB6wHGUKGTVwJ48OCFcMFmxevjZzgWdtvhuAPlXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:46:5e:48:26:8c:bd:b2:c4:f5:29:3c:6e:46:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=f0da7e6c3977c9e47e710f6d9d0e09286df1eb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:98:2b:26:8f:52:bc:9f:59:4e:1f:6c:32:bc:
                    9a:83:16:ce:dc:03:85:cc:05:ba:9c:db:6f:7b:ee:
                    9e:98:aa:72:ce:21:7f:87:b1:0b:92:c9:42:3b:99:
                    5f:2b:2a:0b:60:16:e6:bd:85:41:ef:49:ba:0d:1d:
                    9d:43:72:d7:af:2f:f6:51:f2:01:bc:5c:af:b9:0c:
                    be:f7:e9:5a:ad:d3:70:be:8b:18:0b:9a:b3:79:87:
                    fa:eb:f2:ae:9f:6f:95:5c:99:f4:6c:d3:cd:f9:29:
                    2f:d0:9b:63:5b:84:5c:5a:06:2f:0f:c6:21:b4:35:
                    83:7d:ed:f2:d4:4b:46:2a:21:b7:c7:3e:5d:28:fd:
                    3d:39:28:eb:a8:47:97:ee:9f:f0:49:71:2f:00:69:
                    13:e1:9d:26:db:3f:19:00:55:41:28:c4:d7:23:f1:
                    76:77:fa:48:ff:98:97:f8:f5:3c:c7:de:56:24:b9:
                    47:e3:af:39:ba:0d:20:22:3a:dd:e6:d4:c3:61:02:
                    29:86:78:76:17:c2:77:7c:d5:6c:72:5b:8d:6b:b5:
                    15:2f:bb:59:2a:f0:3b:b7:92:a0:29:aa:19:fb:8a:
                    7e:ac:bd:f0:2b:13:a8:e5:57:00:0a:70:44:32:ba:
                    10:60:ff:73:80:e0:19:4c:97:f7:d1:a0:d8:4b:6f:
                    a2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DA:7E:6C:39:77:C9:E4:7E:71:0F:6D:9D:0E:09:28:6D:F1:EB:20
            X509v3 Authority Key Identifier:
                keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f2:3a:e6:1d:f6:fd:49:1c:9c:11:5e:0d:86:86:c1:1f:ca:
         42:d0:e4:2f:94:67:7d:31:d3:a7:8f:2f:c7:e3:00:a4:87:bf:
         24:3a:25:28:f2:c6:8b:31:42:55:49:89:cc:f9:80:9b:a3:8d:
         2a:3a:fc:ad:23:93:fd:99:51:cf:12:7c:fa:0e:96:b4:06:e0:
         0b:03:ac:ac:91:42:4b:2b:c5:a2:96:f1:fa:bd:17:7c:f7:f4:
         71:f0:3d:cd:7f:75:9c:b3:e3:d7:b7:aa:ed:af:ad:61:c2:a8:
         51:48:92:2e:5a:ac:49:84:ad:49:20:c6:20:c9:0c:06:a5:fd:
         5f:7c:44:54:a8:eb:67:ce:07:94:50:87:91:02:dd:82:6f:40:
         74:62:e9:0b:b9:80:f5:e2:8f:d6:b6:9d:17:40:68:c6:fb:08:
         06:ee:35:1d:27:6f:2a:8f:1c:03:3d:c3:cc:d4:77:2a:65:94:
         5e:c2:0f:77:8b:38:07:be:24:f2:32:57:0f:4b:80:e3:c7:85:
         4b:8e:19:7f:bc:2e:17:69:8d:f0:01:5e:b1:b9:13:d0:fe:f0:
         da:a8:93:5f:8a:ed:2a:0c:ce:9a:3d:3b:70:d4:61:39:77:6b:
         58:70:a0:4e:1a:db:f7:e7:c7:b0:2d:d0:c2:e6:d8:c2:b1:df:
         32:53:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----