Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
File:                     RruCFbImbaPA9spVzHuoAOmt4qI.mft (raw, json)
Hash identifier:          0+gr7m1VgAboeWwj2OChXkaDazYYxpCTDS3mjWwhqg8=
Subject key identifier:   BE:6F:02:A3:4B:A2:12:1A:D0:C0:4A:B3:AE:7C:0B:93:A0:7F:71:3A
Authority key identifier: 46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
Certificate issuer:       /CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Certificate serial:       01962E98F23906BC92C3AFD71A3C1CA7BF1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: 9L0Co8CEy186G13kaYMinlb5Afg.roa (hash: 6p7nu1hIgCVQFvaFdpUf1fbcZ1K03G9ItG/q4By8N9A=)
                          2: E0Vqea0aWvL8BvXZCixWW4x1Xf8.roa (hash: YbPt+4+0edt07crfTPCARczh/UjImehgu5s1r3RYYLE=)
                          3: RruCFbImbaPA9spVzHuoAOmt4qI.crl (hash: G7/4wfjXe90TpPci1SEPT78tU8XX5tmKQ4AIOV8uZcI=)
                          4: o4qJydU8QHB9yf5elCeoJvNBmoA.roa (hash: 2K8rsjnSWXQjx0NDAMp9U5sFUQZR7E/jK97Yg8CSOow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f2:39:06:bc:92:c3:af:d7:1a:3c:1c:a7:bf:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=be6f02a34ba2121ad0c04ab3ae7c0b93a07f713a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:3e:6b:e9:b3:a4:29:ab:e4:d9:f8:50:a4:
                    4a:b0:57:ca:4b:92:9d:ff:1c:8f:c9:be:4b:ee:29:
                    cb:87:4a:30:93:49:43:85:93:3e:be:e1:fb:4b:72:
                    9d:6e:a4:7b:49:5e:b5:c2:00:37:d5:22:80:ed:22:
                    4e:e8:ab:e0:88:93:c0:e1:41:3d:7c:84:8a:d7:06:
                    46:eb:d8:d7:d2:b4:d5:4b:b7:61:03:f0:df:09:04:
                    51:49:f1:95:65:05:1e:08:be:12:53:2c:6b:88:ab:
                    21:a0:d0:fb:9f:21:c4:cd:6e:07:eb:55:42:75:bf:
                    59:bb:88:a1:a6:b7:21:a2:df:0d:f3:af:36:25:9d:
                    b9:98:f5:62:6a:6a:e8:03:c2:ff:a5:b0:c5:2d:48:
                    20:c0:42:8a:47:67:0e:12:33:2b:e6:0d:b2:1a:d5:
                    e7:72:c0:63:75:b8:21:40:07:39:b7:6a:08:c6:9d:
                    a5:28:d3:e6:82:12:4b:78:f7:38:a8:7c:ee:6f:fe:
                    de:fd:64:a6:a1:6a:72:61:7b:fe:84:7e:77:2e:bc:
                    b7:6e:bd:4a:fb:8f:ed:13:a3:d8:ee:a3:1f:06:5a:
                    36:c1:09:26:9c:0e:14:e3:a5:79:b3:f4:eb:20:7b:
                    e8:1c:7b:d9:c8:22:44:1e:07:af:d4:1c:1e:91:1f:
                    af:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6F:02:A3:4B:A2:12:1A:D0:C0:4A:B3:AE:7C:0B:93:A0:7F:71:3A
            X509v3 Authority Key Identifier:
                keyid:46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:df:de:67:71:f7:f1:85:53:3d:9f:b1:80:d8:36:04:48:c1:
         34:e8:f6:0e:7c:0b:82:29:76:cc:89:f5:1c:8f:fe:cd:18:10:
         07:02:fd:7b:42:f2:a0:2d:31:e0:df:cc:51:40:a3:fc:51:70:
         8f:2d:30:94:fc:f0:18:07:74:cd:8c:34:4d:d3:08:8d:9f:37:
         82:7d:a7:b2:aa:83:f2:44:d2:d8:03:a8:49:ec:1b:fa:60:77:
         5e:c3:10:1b:5f:19:ca:c4:37:a8:ae:68:50:2f:5d:0a:34:80:
         ce:61:4d:a2:51:5f:c2:c1:4a:95:cf:fa:e8:6f:e4:f8:90:28:
         f6:83:fa:35:a3:80:cb:c1:8e:69:2b:cd:49:84:ac:77:61:93:
         bb:46:ff:e5:d8:a8:75:29:91:e5:fe:06:0e:e2:3b:6c:3b:63:
         e4:de:f7:06:4d:d0:cc:31:c0:3f:f5:2b:f1:a0:ca:f8:35:46:
         0b:42:77:46:82:eb:17:7a:40:47:d6:b3:80:bc:0d:86:4f:a2:
         cf:79:b5:d0:ce:73:01:47:d7:23:8b:5f:16:94:bc:eb:8d:9c:
         60:e9:3c:0c:89:bd:3d:af:f2:6b:ea:c4:8f:b2:96:01:b8:a5:
         ff:b3:28:c7:ab:7f:ad:02:0d:d7:06:d3:4d:2d:88:a1:dc:43:
         93:80:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----