Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
File:                     IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft (raw, json)
Hash identifier:          JtLuEA9H9cbc7LZJxy5xdct+/qfIoDeqV9Qw/e5Bbtc=
Subject key identifier:   42:F2:BD:FE:29:36:23:24:19:8C:05:CD:78:C5:14:A8:E0:F5:34:F2
Authority key identifier: 21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
Certificate issuer:       /CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Certificate serial:       01962E9918DADB65BEE5FA5DFCADA67152EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: BIaGV9Zs8uGBriNQ8U7uQ0gnNfA.roa (hash: 7T5AV/yHdfgZicPaqkaiWb9Osz7vZVkyB1rTGAClRcg=)
                          2: IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl (hash: TYIkZAzkA5TShCewiDpJMCAPpi/GBUGxCxFA8k/vOZI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:18:da:db:65:be:e5:fa:5d:fc:ad:a6:71:52:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=42f2bdfe29362324198c05cd78c514a8e0f534f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:e4:a1:b4:c4:4e:0a:48:40:8e:a5:7a:b0:
                    8c:da:b8:5c:21:fb:8e:b9:3a:e5:91:db:a5:31:97:
                    4a:0b:ec:4d:fb:79:ce:8d:29:7e:ee:91:f7:da:a7:
                    44:09:5a:88:bf:36:38:19:cc:94:40:64:c1:b0:84:
                    72:a8:5b:86:4a:bf:22:88:e8:ad:43:7e:ad:e6:2c:
                    92:9c:9a:98:5b:cf:1c:78:b0:b6:19:f8:36:50:de:
                    6a:5f:f8:8e:fa:5b:2b:59:06:e0:27:78:4a:62:ec:
                    61:53:5f:c2:45:2c:2a:2f:6a:21:9d:37:8a:76:75:
                    d1:a6:d8:ab:6b:bf:30:86:b2:51:ed:e9:37:86:59:
                    b6:47:4b:8b:33:28:bc:98:35:e2:29:60:2e:4c:bc:
                    cf:c5:5c:bf:89:b1:1c:c6:00:c3:ab:9a:21:0b:57:
                    d1:69:a0:9e:8b:24:f0:94:28:f4:dc:02:b2:fb:6b:
                    97:12:81:5e:32:9a:00:b4:ef:10:10:88:60:8c:d7:
                    aa:52:6a:f3:7f:09:2a:a9:25:4a:04:90:de:1c:e6:
                    1c:65:40:19:18:3d:db:3f:18:15:4e:e6:51:a1:dd:
                    1b:8d:0e:db:ff:22:9c:c9:99:c8:7a:8d:4e:3e:72:
                    b1:ea:8c:51:36:b8:a5:ca:56:ae:48:8f:54:6a:91:
                    f6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F2:BD:FE:29:36:23:24:19:8C:05:CD:78:C5:14:A8:E0:F5:34:F2
            X509v3 Authority Key Identifier:
                keyid:21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ec:f7:e0:df:83:64:46:5d:25:0b:69:93:5d:33:57:9f:89:
         f5:96:39:83:6a:88:de:e7:82:14:d3:c6:13:7f:69:97:ad:5e:
         f1:c9:71:7a:dd:4d:35:b7:9c:a7:5e:36:cb:fe:d6:bf:1c:4a:
         86:5d:c9:0f:46:40:45:56:f1:c5:a0:1b:ba:04:c6:ee:c1:fb:
         52:15:12:42:21:5b:4c:d2:4b:78:0d:a6:d4:6e:55:c9:08:0f:
         97:c3:07:cb:0c:59:a2:0b:3e:da:11:92:f8:48:14:44:c8:16:
         2c:50:ea:e1:95:9a:97:db:ac:54:04:26:ee:41:5c:db:c5:43:
         61:4c:48:be:4b:ed:d0:8f:9d:84:42:be:66:08:04:18:0e:d1:
         7a:39:e7:ea:ab:70:e3:c4:18:b5:21:bd:66:1b:4d:61:82:dc:
         77:36:7e:af:67:f2:28:97:bc:75:cb:21:bc:c0:dc:a3:b4:7d:
         4d:4c:a4:82:e9:49:b4:d7:4d:7d:9f:1d:3d:9b:35:c3:c9:6c:
         86:49:f0:36:b3:83:ac:b6:16:48:b4:24:9b:a6:b6:5f:b8:1a:
         63:0d:08:5d:af:20:d2:5b:7c:14:fc:60:6e:90:d8:71:49:0d:
         4e:71:61:d1:2e:23:97:f1:8e:8f:c5:68:69:21:29:5a:12:f0:
         04:a3:e2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----