Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
File:                     CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json)
Hash identifier:          E9B9K098I0zc9Fjrxn9fQB0M8uhjC0gdWOcJ70RtoDM=
Subject key identifier:   2D:77:ED:C9:98:77:5B:5A:E6:0F:E1:FA:C6:F7:3D:3A:A2:ED:EF:A2
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Certificate issuer:       /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial:       01962F74CD46CFE47FA847023F90F38355BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
Manifest number:          14FC
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 3cfolha5-Y-keIgl3j-ukMRu5nQ.roa (hash: BQrU5Phy/xAtort4zjZjH8gAv4mg2agVu08FECKFlvU=)
                          2: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: jXMITuwSXw9FkscS1aHHNWCpBWn8yV8QzGQVhwTec7U=)
                          3: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=)
                          4: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=)
                          5: eeob2ee4lfFzOOMEsHvp08f6qTk.roa (hash: 0B+jfajS9x0UOg+XsVtGs3LZcCLSBc/7t9eJKjvj4DM=)
                          6: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=)
                          7: izRl0EDK4B0qzWxxkTnsFaQUD9I.roa (hash: deGltujGMo6zRw49YCgwFhp3rs4UuELASdCXPlgWHmM=)
                          8: tbMl7oFKXcbypI4zCPH3_DIQ3z4.roa (hash: woX9zsT33PUAbbfirUNyi4tkHILBBLskTh8l2Lf5sLU=)
                          9: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cd:46:cf:e4:7f:a8:47:02:3f:90:f3:83:55:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=2d77edc998775b5ae60fe1fac6f73d3aa2edefa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:2a:87:2e:4e:f3:10:4b:4d:29:2e:7a:d3:
                    a2:cc:bd:29:16:e6:df:d1:1a:26:5e:a1:1a:98:98:
                    92:af:9f:52:21:5c:b3:95:70:a7:5b:6d:55:4b:52:
                    4f:79:b5:9a:db:98:83:83:43:e1:06:4c:5a:94:2a:
                    f3:bc:90:ba:21:09:eb:21:10:99:cb:b5:95:d4:3b:
                    e1:c7:fe:af:b6:5c:cf:b0:0e:ed:5a:0c:42:6a:89:
                    d8:36:41:1a:32:d2:48:64:a1:ff:59:e9:77:bd:cb:
                    c1:9b:20:a7:85:dd:c0:98:4b:01:a7:9a:19:3b:2a:
                    a1:df:fe:70:4d:dd:d1:34:86:8b:74:f2:bd:92:96:
                    22:cf:6d:96:86:57:43:a7:53:33:c5:15:58:1a:66:
                    25:bb:07:ab:be:2e:8b:d5:ac:03:dd:e4:cd:62:40:
                    64:ab:09:6a:46:f7:b9:51:3a:8d:69:c3:01:33:76:
                    72:86:e0:69:89:6b:df:0a:47:23:77:16:75:f5:74:
                    4d:b7:c3:cd:83:fc:cd:29:28:32:7e:76:b0:9e:7d:
                    41:a7:31:98:29:5a:37:20:53:2e:43:b9:1c:4f:d7:
                    6f:be:88:15:33:62:2c:dc:0c:7e:4a:75:6a:3a:75:
                    45:23:6b:44:5a:e1:23:70:5e:d1:d7:96:ed:3b:0b:
                    1a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:77:ED:C9:98:77:5B:5A:E6:0F:E1:FA:C6:F7:3D:3A:A2:ED:EF:A2
            X509v3 Authority Key Identifier:
                keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:bf:cd:2f:67:02:f6:4b:30:0a:3a:1e:28:ce:6e:84:06:38:
         a8:71:18:0e:a1:9c:30:3b:09:96:3a:fb:ad:d2:27:35:29:9b:
         29:c8:11:3f:b4:65:d4:b9:ca:22:9e:b7:a3:3b:1e:2f:19:0b:
         3e:b5:94:bf:37:58:11:c6:2d:6d:52:52:c3:54:3a:d9:4a:1b:
         27:5b:e8:e8:f9:b8:44:fb:e4:bf:8c:04:55:cb:78:97:68:2b:
         bc:40:91:12:83:cc:47:1d:ce:d8:37:39:43:15:d9:dc:fe:5f:
         e6:34:70:99:5a:3e:ef:ff:e0:72:88:de:3d:f6:ab:b5:ef:94:
         7a:0b:84:ea:86:25:ab:95:fa:7e:99:4d:4d:83:1c:4b:38:62:
         55:84:a0:54:64:a0:d8:ee:6f:16:29:f7:45:d8:d1:19:03:a5:
         ab:27:cb:e8:e1:c3:94:27:cd:54:c4:cf:98:ba:86:fa:f4:e9:
         e9:c6:bb:fe:d0:28:47:42:a7:57:15:a5:c1:7c:55:fb:3e:cd:
         0b:84:56:21:4d:df:6c:f1:46:85:49:17:ea:29:f1:7c:9b:df:
         11:fb:89:13:ce:ab:e7:76:0e:43:02:7a:6b:f4:04:b5:83:5f:
         63:b5:54:e7:c2:09:a4:69:f8:23:36:d2:e3:04:43:c7:75:7e:
         be:b2:70:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----