Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
File:                     mk2qT2rA5rwQK2iECirGu1QbQPw.mft (raw, json)
Hash identifier:          C9Oca+RlJGI3QzPLsUjITY/AtPYsqFiDjF8bBBmKjVQ=
Subject key identifier:   B2:83:DF:C8:D9:44:F3:71:BE:92:30:AE:3A:FC:C1:B1:01:C6:4A:BA
Authority key identifier: 9A:4D:AA:4F:6A:C0:E6:BC:10:2B:68:84:0A:2A:C6:BB:54:1B:40:FC
Certificate issuer:       /CN=9a4daa4f6ac0e6bc102b68840a2ac6bb541b40fc
Certificate serial:       01962E98FF0F372A9A2E0A1469EE9CF5A8FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
Manifest number:          04E0
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: j0Asbb5ngsOWlyvv7kth_3yoBYM.roa (hash: O/JfF/netiv5OyRHt3hhhICYzLbMzCW+fJQdQl7HVfM=)
                          2: mk2qT2rA5rwQK2iECirGu1QbQPw.crl (hash: v9h6XM/Wimrt39UWQg0Zij7F4UPVL4ePmygE1dmEYYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ff:0f:37:2a:9a:2e:0a:14:69:ee:9c:f5:a8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a4daa4f6ac0e6bc102b68840a2ac6bb541b40fc
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=b283dfc8d944f371be9230ae3afcc1b101c64aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2f:05:17:4c:24:38:2a:73:a5:12:d6:a1:80:
                    aa:7c:be:9b:9b:15:87:3f:9d:7d:ca:90:44:3f:b2:
                    98:7c:90:44:bd:d4:95:0f:12:01:92:53:ec:4c:fa:
                    ba:ef:83:70:b1:a5:c9:27:72:9c:32:6a:8d:fe:e3:
                    b9:01:b7:d1:8e:00:02:6a:0b:1c:a0:ae:be:1a:d6:
                    ce:bb:dd:08:99:c7:c9:e9:15:f3:79:a3:b5:ed:62:
                    6e:f6:fa:ff:77:f8:58:4d:89:71:66:3c:d1:d7:b1:
                    e6:c4:fc:ea:af:2b:a1:92:96:5b:7d:e5:69:ec:54:
                    44:61:70:55:d6:a4:1e:92:d4:4f:10:e9:dc:f6:da:
                    10:87:cf:42:ce:2d:46:5a:9a:45:5c:d5:18:a1:83:
                    dc:08:c8:ca:a5:44:a7:dc:a8:18:27:45:b6:08:39:
                    fe:51:9d:7c:c8:c6:27:ff:27:9c:f6:4a:7a:9f:8d:
                    21:ee:1c:de:cf:43:df:26:2f:b5:ab:d1:4f:3f:04:
                    05:20:6d:4c:fd:29:99:1c:5a:61:df:98:41:80:b4:
                    3c:f0:b7:23:aa:6d:14:cf:f3:bb:1f:37:01:0d:66:
                    70:16:df:4d:c3:76:78:72:8d:18:e4:54:98:17:15:
                    98:d2:c4:1d:42:20:6e:c2:40:d4:26:9f:ba:90:e0:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:83:DF:C8:D9:44:F3:71:BE:92:30:AE:3A:FC:C1:B1:01:C6:4A:BA
            X509v3 Authority Key Identifier:
                keyid:9A:4D:AA:4F:6A:C0:E6:BC:10:2B:68:84:0A:2A:C6:BB:54:1B:40:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f8:10:b5:82:1e:49:78:33:73:ab:11:df:15:44:f7:7c:b7:
         5d:86:0c:e8:62:4c:13:b1:47:e9:24:a7:67:5a:50:8f:d0:24:
         80:ff:b7:f8:27:f2:d5:c5:50:a9:84:6a:f0:1a:00:0d:d7:8b:
         11:68:35:c3:e9:13:64:f4:a9:fd:5d:51:c0:f5:ae:6a:07:5e:
         27:27:ce:25:d9:68:2f:7a:27:95:0e:8f:a7:1c:ff:bb:99:06:
         64:60:02:65:9e:be:94:4b:c5:d3:fd:bf:39:60:cc:39:35:70:
         78:89:45:48:ed:b4:9f:68:11:c1:f4:bd:76:aa:a1:12:1c:2f:
         c5:1f:0e:29:f0:45:fc:0b:49:ca:e4:7a:dd:2e:fe:28:5f:85:
         c2:a3:46:ce:a3:7e:ef:9e:de:73:fe:bc:28:79:84:b0:dc:66:
         c8:62:ae:bc:a4:cf:5e:0f:16:c5:1b:a1:61:ad:bf:9a:13:ab:
         20:96:79:7b:6f:aa:dc:cc:23:04:35:39:db:71:de:2f:6e:bd:
         e8:f6:58:c2:2a:ca:d8:18:c9:ad:4e:09:b2:f4:76:26:ab:9e:
         2d:61:6d:b9:a2:73:3f:aa:b3:72:da:47:f4:9f:09:5d:b7:cf:
         6f:11:7f:54:23:1d:94:9b:58:c8:83:76:73:6c:3c:08:1d:45:
         cb:3e:4d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----