Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File:                     ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier:          1MAAcyjcQlCNFn2MGlDoKTWHaXD6YLptG/ei9mDBKJk=
Subject key identifier:   48:0B:81:2E:CD:2E:EB:44:E3:07:9C:2A:9D:16:D8:00:42:FC:E1:72
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer:       /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial:       01962F3D4D1737330B2AD2B2E6639EB751EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: IPEBGJ/ERInZC2NsUhO0ratXgWMVHoITZvfx3oh5d4k=)
                          2: TEkUtdSJlCwJOLmZGlc_aRWHYHQ.roa (hash: 6v28t0X8IRT5vkPcD+0Ak9J7sxuHKDaxDcFCFxn0jgI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4d:17:37:33:0b:2a:d2:b2:e6:63:9e:b7:51:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=480b812ecd2eeb44e3079c2a9d16d80042fce172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:ee:03:2f:92:2a:6e:9d:24:b6:01:c8:45:
                    fc:5c:a6:17:d1:60:f7:2b:cf:44:e7:df:9b:0f:01:
                    8e:0a:a6:cc:91:9b:0c:59:e8:92:47:92:88:bf:a8:
                    7c:47:e4:2c:6a:7f:c7:d7:ce:55:87:03:be:fd:16:
                    41:46:db:79:71:fd:22:3e:f1:f6:10:09:e1:66:d4:
                    9f:9b:c8:82:6a:3a:bc:8d:af:a8:99:a2:f0:71:77:
                    91:54:e2:fa:07:91:3b:ae:a4:b6:30:bb:ee:97:50:
                    d0:e8:eb:51:14:10:6f:21:79:0b:49:1f:6f:14:b0:
                    d5:db:59:42:56:34:ef:31:4a:0a:d8:38:67:bd:f6:
                    14:91:60:89:74:48:54:cf:7b:33:83:2f:9f:06:fb:
                    96:5b:6d:da:00:c3:4f:8e:68:9f:72:33:d6:63:b6:
                    4e:00:e6:f5:4a:05:2e:c6:66:f6:0c:0e:08:59:87:
                    22:7d:dc:4d:1c:2f:a3:d3:5a:ec:b3:99:15:7e:a0:
                    7b:1c:21:1d:5f:95:a1:0f:fd:7e:c4:84:99:d6:c8:
                    b5:df:b7:8f:e2:e9:15:9c:11:c5:bc:7d:42:ef:cd:
                    5b:86:ca:37:10:b5:2b:3d:27:e8:dc:93:85:67:91:
                    34:01:8b:aa:d6:62:0b:b5:cc:7e:ce:47:9c:0c:63:
                    1d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0B:81:2E:CD:2E:EB:44:E3:07:9C:2A:9D:16:D8:00:42:FC:E1:72
            X509v3 Authority Key Identifier:
                keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6c:c1:2f:85:61:58:6e:d7:23:43:dc:21:bf:2a:88:fc:aa:
         6d:2d:fb:1a:40:94:04:f7:44:7f:34:ab:ab:c1:a9:8b:36:6a:
         73:df:33:56:52:87:4f:bb:df:e4:1e:67:73:2c:3c:31:5b:b6:
         72:af:07:c9:2a:e6:ad:64:10:70:d9:36:79:aa:17:cd:fd:11:
         b6:56:ec:f9:f0:0c:20:1b:68:8a:e0:26:fa:b4:e6:4b:0a:86:
         38:ed:91:70:9d:9f:d9:85:ac:1a:7d:21:fe:51:fd:2a:69:c2:
         19:a4:6f:b5:c6:b3:7e:9b:77:87:23:76:b2:17:8d:79:39:14:
         59:2b:ba:4a:66:59:1e:46:23:ee:85:0d:4c:6e:97:99:50:56:
         cd:46:cf:7a:72:f1:5c:6e:94:30:be:d5:8b:25:2e:a0:a3:8b:
         9a:91:d1:91:38:32:cb:2b:d4:8b:be:8c:4b:a7:86:b3:81:db:
         cb:a9:5d:8c:de:7f:37:e1:90:3b:6d:24:2a:3b:2f:50:b7:8f:
         6c:54:b4:f0:d8:ac:a1:6e:f6:ac:d4:c8:80:ea:7d:cc:bd:e5:
         39:50:5a:01:35:ab:55:df:4c:83:b2:02:a5:04:be:4c:24:73:
         78:c7:fc:c9:92:79:5f:b4:cc:02:12:74:8c:a4:a4:13:07:2d:
         2b:52:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----