Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File:                     rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier:          DsKgFVU6LkNUuVOj7M8lqc/LPg26G7c2WJ3n0VtlGao=
Subject key identifier:   30:0D:07:2D:18:97:59:1E:79:F8:23:E4:97:DF:8A:92:9A:98:3D:6E
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer:       /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial:       01962E2B1F5CA6BA0A1111E59795BB6245E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number:          1486
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 5wpBu9lqq6Eh5bxmApWBHSmv8rU.roa (hash: OWwgDNZvQnVhoKGxoJou3ziQhvyReIZ9m1NH7rz0BqA=)
                          2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: u9lfMzwcark0dpHXOw8W+0MFmL4ulBT+tdn13Tr6YEM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1f:5c:a6:ba:0a:11:11:e5:97:95:bb:62:45:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=300d072d1897591e79f823e497df8a929a983d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1b:49:77:d1:2a:88:65:44:c2:20:3e:fb:24:
                    43:b3:5d:f9:b8:f3:24:4b:09:76:54:7a:15:2e:0c:
                    dd:dc:10:76:21:cb:a2:cb:62:03:7f:2d:cc:78:03:
                    f1:81:86:61:34:3c:16:09:64:d6:ce:ec:30:30:09:
                    2a:03:d4:8d:1c:43:79:3d:07:45:04:d8:fa:ac:3b:
                    96:e8:33:76:98:08:8b:a5:55:b2:cc:56:ca:d5:b6:
                    dd:c9:1c:a6:73:7f:69:ee:b3:13:23:64:73:98:38:
                    9a:05:4a:48:c3:0e:e6:e7:13:2a:ea:2b:83:c4:a2:
                    33:bf:11:31:55:07:7c:eb:5c:4e:f9:a6:85:b6:1f:
                    34:67:4a:78:f6:14:46:cf:4a:df:b1:05:70:6d:eb:
                    e0:e7:5d:e4:c2:46:c4:c9:3b:f8:94:08:3f:99:a8:
                    cf:8e:e7:c1:31:8e:fc:65:90:eb:5b:f1:5a:35:85:
                    98:a0:fe:13:fe:dc:3e:2f:38:31:8c:19:aa:56:97:
                    60:34:f9:d2:8c:bc:30:81:4a:fb:62:88:7c:9d:0e:
                    17:dc:44:a7:8e:2a:9b:30:ee:1c:d0:a6:b7:c0:f8:
                    70:1e:46:9c:fe:99:5b:9b:99:ac:8e:3d:dd:00:f9:
                    44:4c:7f:8d:f6:ab:0e:91:f8:9a:27:be:3f:81:47:
                    cc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0D:07:2D:18:97:59:1E:79:F8:23:E4:97:DF:8A:92:9A:98:3D:6E
            X509v3 Authority Key Identifier:
                keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c4:2a:06:99:f1:f5:df:36:33:e8:c3:47:a4:39:26:80:05:
         71:ae:30:58:34:d9:4a:c9:f7:54:5b:83:45:ab:65:f2:3f:9c:
         b4:c6:09:a7:9c:f9:1e:8b:0e:9d:ec:81:80:43:db:66:40:95:
         79:55:dd:fb:4d:39:f8:a7:a0:f6:29:15:bc:d9:24:e3:14:fe:
         52:16:78:f4:89:95:ab:c8:33:a5:e7:50:9f:f7:ca:64:cf:86:
         27:b4:6b:5c:1f:04:1a:95:b8:9b:5b:12:65:4d:b0:5d:cc:f7:
         5a:c2:d2:c1:99:2a:2b:ee:ac:8e:10:d0:a3:2e:79:53:b9:2f:
         6c:3d:00:b3:7d:d0:4c:ab:e4:17:83:f5:26:29:9e:7e:5c:69:
         ea:b6:9a:5d:f4:69:b8:57:fc:e1:4c:98:cd:77:14:22:ac:d1:
         50:dc:e8:f6:f0:7f:8b:e1:93:80:23:1f:dc:0e:32:56:a0:31:
         55:56:03:e1:fc:a6:33:84:b0:4e:da:e5:2d:5b:11:54:36:7a:
         08:50:af:bc:76:e7:dd:23:56:ce:dc:74:34:74:fc:ce:97:f0:
         2f:81:dd:a1:08:b4:80:ad:27:ce:9a:c8:7f:b6:09:be:4f:cb:
         b8:68:01:6b:11:4a:f5:cb:10:ba:41:7d:30:f6:7a:9c:2f:30:
         76:c0:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----