Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File:                     g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier:          jqcxAKWssq2KsZsvXu9cODSyaDKlsKPNGwfarrG/ZtI=
Subject key identifier:   C1:09:22:6B:12:23:BC:FB:D8:B4:A1:87:66:11:05:97:8C:7C:7D:11
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer:       /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial:       01962F06C9F6E188A7C6864E4886C60B3EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=)
                          2: bTDx6BY2_bieAYAIiAFgdyKIF9k.roa (hash: qCwMntOeFKqowJO7prWM5i0O+TccBmu2GDJdiZbI22w=)
                          3: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: 3tfaFLQFE5AI+UEDKxPjnv6m7Xjmmho+JC125ATF2os=)
                          4: kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa (hash: eW1HiHgHjju0NsKcsTSvzT72THKILOyyGeew75G0SSo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c9:f6:e1:88:a7:c6:86:4e:48:86:c6:0b:3e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=c109226b1223bcfbd8b4a187661105978c7c7d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:7e:47:9e:b1:f0:e6:1f:f0:a3:d1:30:e6:
                    fa:18:27:75:2a:ed:86:20:fa:61:b6:4c:c0:9a:ad:
                    77:cb:fd:d8:ee:ca:be:de:09:0c:df:49:2f:76:15:
                    10:a3:ba:ca:9b:e7:74:b2:34:0c:2c:ae:db:47:d6:
                    96:73:92:63:43:e8:6d:c4:b2:99:77:e5:a2:90:35:
                    f8:ef:86:04:f6:f2:68:e1:2a:08:71:27:41:64:79:
                    1d:19:be:f5:ae:b8:15:07:b1:85:c8:07:4a:42:a0:
                    56:db:fc:b4:a2:f3:23:45:c3:57:4f:f2:73:58:52:
                    8c:4e:70:ce:73:44:14:05:3e:fc:ee:19:3a:84:8b:
                    16:60:50:cb:ba:37:2f:5c:59:ba:89:98:a5:6a:61:
                    38:bb:4b:54:8f:5d:cc:c8:14:41:b7:a4:c5:20:1a:
                    04:31:f4:e3:be:53:c2:58:07:47:e8:e5:d1:9e:59:
                    8c:5a:d6:02:99:79:17:41:a0:3b:24:5c:80:22:b3:
                    74:ee:5d:c0:96:bd:3b:e0:89:08:c9:7a:12:5b:70:
                    17:a0:24:4e:ff:60:ef:cb:6d:a8:08:07:4e:27:84:
                    d8:cf:0f:ba:3b:f1:76:5e:d2:b9:31:ab:ee:fa:71:
                    a1:72:51:e2:de:fe:8e:4c:77:85:3b:be:6c:ae:95:
                    39:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:09:22:6B:12:23:BC:FB:D8:B4:A1:87:66:11:05:97:8C:7C:7D:11
            X509v3 Authority Key Identifier:
                keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:a1:fe:83:32:29:db:ba:93:f3:90:2c:b8:a1:4d:69:ef:
         02:24:47:ea:7f:3a:3b:7b:de:c1:32:13:01:a7:f6:8b:a8:9e:
         a7:3d:5d:94:b4:66:ef:fd:a7:35:4c:c5:66:bb:e6:84:91:6e:
         34:bf:8f:c6:d9:2d:bc:7b:0b:3b:b6:61:89:fd:89:b7:04:67:
         6d:46:9b:38:c8:60:c5:02:a7:b7:a4:6e:63:6d:13:3e:08:73:
         bd:d1:ce:1a:94:f9:72:b5:56:a0:cf:75:9f:12:1e:e5:35:86:
         94:a1:c2:f3:a9:0b:d6:83:f5:f9:e3:43:04:19:a1:41:7f:5d:
         1d:d2:bd:48:ad:e6:5a:db:97:65:64:1d:21:0a:51:3d:c8:e1:
         29:a1:df:2b:66:f2:0d:d1:e7:24:8d:42:fa:3f:fc:93:09:c1:
         70:79:f6:46:32:fa:80:12:4f:d1:fa:b3:60:a1:e3:34:e2:5c:
         22:22:fb:99:1b:bf:df:8a:93:cc:5d:61:60:d8:2c:da:3f:bc:
         98:a7:c7:16:a6:fb:60:b2:be:05:18:36:d8:38:bb:3e:9f:7c:
         bc:dc:a3:09:61:10:61:fd:c6:a7:91:22:29:59:bc:89:68:a2:
         d0:a5:92:23:12:22:2a:c2:4b:2a:1b:2f:7a:cf:f8:32:31:3b:
         aa:30:84:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----