Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File:                     aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier:          mtWWy6jSecEB7lNpdzltyASu8iZg+4gQ0YLcGtPgDR8=
Subject key identifier:   50:4D:45:D1:6A:E8:E0:26:78:67:8A:08:81:7E:F2:3B:63:56:24:B4
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       01962ECFA1062DE96C75EE770AC7C2E16458
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: DTg5RkuqMK2btDx5ovFA3JalgpXtdJ4U8xfOTYgRygM=)
                          2: au3QsLFo03d8LYUAjCFPkrVh1G4.roa (hash: isOlLFXxz/6TcM6N4LdFi3q+A0FHjScvgWUQkggZJpo=)
                          3: bqsYblKj7hcMS1s1tPb3Q-dO_OY.roa (hash: C6NQjixTOIceoGsxhMeDSn6DTrvOtIxF3QPKT2AqmUU=)
                          4: fZN-mJc8fZOK-6XrfXacVqv1tuE.roa (hash: dKX6X2ROArIQd/pMehz+1TmwgekylLZCGEI0q4Su81U=)
                          5: qT9a3yWCoydql47MfRG9zQlfRRU.roa (hash: sztKYcCFWM27FMQp6a+1b3A1caK/AF/jWPueCOzMPvo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a1:06:2d:e9:6c:75:ee:77:0a:c7:c2:e1:64:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=504d45d16ae8e02678678a08817ef23b635624b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:8f:90:f2:a2:5a:9e:82:03:8d:3d:39:64:
                    d2:10:86:5b:ea:db:ca:ea:b5:62:93:95:53:64:1f:
                    d5:74:52:10:1a:cc:e9:98:1d:35:0b:7d:71:65:af:
                    27:6f:47:d5:d6:15:ed:fb:30:20:8e:53:da:e0:5e:
                    1c:ad:aa:6f:b0:23:26:83:96:c5:26:34:f3:5b:44:
                    85:3a:e1:d2:b5:45:27:f1:99:32:18:99:06:d9:cf:
                    00:99:98:1a:e0:04:b2:74:f8:1f:8d:15:b7:e0:ab:
                    4a:b3:13:ba:4d:1a:e5:3e:de:70:c7:a6:8f:4f:09:
                    bf:d3:c3:d6:d2:67:e3:98:fc:e1:af:3b:af:c8:6a:
                    15:e7:53:3d:48:78:f0:56:6e:d2:60:e7:60:b7:79:
                    ca:8c:0d:7d:bd:19:97:9d:b0:de:96:0b:70:7b:87:
                    d8:93:18:87:b0:fc:b1:de:d1:69:ef:54:1a:65:3e:
                    77:c7:f3:2e:92:59:ad:67:7e:5f:bc:59:51:42:9b:
                    aa:65:2b:9c:e3:d2:ac:6e:67:dc:27:c4:4e:38:e9:
                    8e:4d:3e:c0:0a:e2:28:d2:1a:18:74:5a:fb:a5:b9:
                    39:06:71:43:6b:21:bd:bc:0d:e1:aa:03:12:d8:9a:
                    06:cd:63:c0:0c:9e:c5:29:c8:0e:62:42:7a:8e:b7:
                    0d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4D:45:D1:6A:E8:E0:26:78:67:8A:08:81:7E:F2:3B:63:56:24:B4
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:15:fa:26:2e:dc:db:3b:78:5b:8d:7a:4e:26:36:b8:0e:8b:
         c4:76:10:ba:8e:43:de:16:4c:fa:d3:bf:c7:a6:2e:f0:d0:68:
         36:63:41:26:02:b8:cd:0c:99:41:2b:51:32:8a:7a:cb:cb:7e:
         0a:8a:7b:b3:06:b2:a6:a8:57:80:b3:e3:1d:9d:aa:8a:f6:e9:
         32:c4:10:45:ae:cf:96:7c:b1:db:0e:94:da:4a:71:2e:7e:af:
         0a:cd:dd:52:46:a4:b3:43:ca:d8:22:c1:7d:cf:55:a3:e8:c8:
         e4:61:29:77:f8:df:df:e3:10:ce:d2:78:fb:e2:37:3c:2e:bc:
         62:86:83:8d:4c:9e:c7:5e:ee:d8:af:4a:22:4c:2a:6e:42:4b:
         54:dd:da:b4:63:d7:94:5c:54:37:97:f3:91:aa:54:b3:20:8f:
         37:10:79:f9:a8:32:5c:b6:50:c0:53:1f:de:52:55:64:81:a7:
         9c:1a:27:ce:bb:ff:df:c9:68:f2:6c:ab:31:26:0f:0d:6b:a0:
         05:6c:c6:fc:bb:ce:7b:26:d9:0c:f6:0d:85:2e:98:ba:0d:8b:
         0d:18:ca:0a:da:d3:0e:34:11:da:f6:fc:a4:a7:13:49:12:1c:
         a3:2b:d6:51:de:10:6f:6a:03:7a:da:64:8e:f1:80:2d:d5:7a:
         b0:22:06:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----