Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
File:                     pMtQ54o6MeM3XPKquGXoRf8umcE.mft (raw, json)
Hash identifier:          jlI2EIrDz5WTjYgxdCL5NMgGSZ6NOmiLjv3ErXb+2CU=
Subject key identifier:   15:C1:94:6C:29:A6:CD:56:83:5C:B4:20:B4:DC:9E:67:BC:C0:26:31
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Certificate issuer:       /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial:       01962F3DB00DDB50A6AF322D282A83990EE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: MKwXFQdhtuQYKRcVzorzsVxuXIw.roa (hash: GZ2oDGi2xK0WgPjyKpmqLx5efaJizRvGxJTHG502Kqs=)
                          2: QHGBtoYy-yUNGT2R6UBemRAxD5s.roa (hash: 3YJpkLEFxs1XCvKlcy0WQw5fAkmH7oTliDxTaEnJgz0=)
                          3: hwXn82QbEbf-SULTcBIDnH5UIZU.roa (hash: 08kQDvBZvCyHX595Crm1xVl4v8KtIgUsNRfQUr9hTAQ=)
                          4: pMtQ54o6MeM3XPKquGXoRf8umcE.crl (hash: 7fn6FJYz/BAV2oaYciuSHwQSNTU5rq3AEaUTPrhGEEw=)
                          5: soZqy3HUC6xiStBTbgTdR73Vw2c.roa (hash: 0/K+cWWK8CwD0JZ/wMwAQQYw/af8O4bhKs39qQrbVB4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b0:0d:db:50:a6:af:32:2d:28:2a:83:99:0e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=15c1946c29a6cd56835cb420b4dc9e67bcc02631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:c1:9f:f8:46:d2:6b:35:fe:e1:e9:94:a9:
                    51:2c:ec:20:af:a8:07:94:cd:67:37:7c:72:6e:8d:
                    65:4c:48:0b:67:8b:c8:69:2b:ff:35:29:db:e5:fb:
                    ab:7d:14:e7:88:3d:9f:cc:c4:ab:ad:7c:bd:a8:f1:
                    3b:2a:60:7e:c8:7e:43:65:d2:04:9e:46:f6:a2:ce:
                    bb:34:04:df:0f:37:a3:a2:4e:ea:86:08:04:e6:3f:
                    2f:60:d4:22:5a:88:bf:c8:10:c0:8b:62:18:40:54:
                    b0:b6:cb:49:35:4e:71:66:ff:b3:8e:61:ea:88:91:
                    e3:74:62:68:ad:6a:0c:65:b4:c6:e1:2f:b9:93:be:
                    f8:55:c2:6c:4c:ea:1f:6d:42:57:73:5f:87:b0:84:
                    8d:d9:d1:f9:61:f5:9d:8c:18:06:b3:b1:f3:99:c6:
                    74:76:af:a1:c3:42:c3:54:fa:94:71:aa:b5:09:50:
                    a5:25:99:25:46:10:12:cb:94:ff:6e:a7:74:6f:72:
                    3a:b0:42:a7:3f:7c:d4:8b:76:e2:3c:89:cd:2a:56:
                    5e:d3:59:c5:61:20:82:4f:9d:c1:50:f5:3c:d4:e8:
                    19:be:17:55:95:5b:c0:58:08:e0:f8:31:65:6a:3b:
                    5f:9a:28:a5:cb:7a:b5:f8:b9:cc:93:1b:ff:ef:2f:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C1:94:6C:29:A6:CD:56:83:5C:B4:20:B4:DC:9E:67:BC:C0:26:31
            X509v3 Authority Key Identifier:
                keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c0:32:ab:07:50:3d:18:3e:88:2c:5b:f9:b2:8b:79:77:f0:
         4a:0d:a3:a3:76:58:26:87:d3:23:87:4a:0f:65:e2:92:20:06:
         d3:64:70:b8:1d:cf:13:34:0e:9a:63:9f:fa:c0:f9:f7:6e:2a:
         8e:02:17:fe:63:52:1e:a1:19:f3:e5:90:48:8a:cd:0c:0c:f0:
         a1:77:74:88:48:88:f4:8b:bf:07:0e:3d:4b:93:4f:65:f3:6d:
         47:82:51:5e:bb:de:68:f2:18:c2:d7:ae:0b:4f:97:df:3f:98:
         2b:05:c0:ea:12:e5:c6:86:93:a7:e4:e5:b4:be:74:f0:60:8a:
         91:9c:a8:5a:52:e2:ec:24:0f:0b:b6:28:33:61:20:b9:e2:8f:
         37:a6:90:d0:53:e2:de:d5:46:98:b1:40:eb:bc:54:7a:b4:74:
         b6:fb:86:68:95:de:ce:ec:3f:af:4c:f4:34:b9:73:b3:28:54:
         69:69:09:ab:c5:da:6b:6d:e2:9c:f0:88:8d:ab:2f:f5:0a:76:
         5f:a5:92:a0:d9:cf:dd:ee:02:64:1c:d4:38:d5:dd:af:98:4a:
         c2:ae:9b:ca:5b:dc:da:de:57:23:20:b8:79:94:cd:12:82:fc:
         bf:a0:52:fc:20:48:52:4c:80:7b:25:46:1c:b5:90:e2:77:70:
         fc:09:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----