Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File:                     RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier:          WQ5je17qFCWNWeAxlLElbZOTsPUymA0nZ+vE1dJCiHs=
Subject key identifier:   74:1D:51:0F:94:CB:63:2B:05:24:57:5E:82:91:6D:94:ED:F5:47:4E
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer:       /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial:       01962E2AE61406AD5F40F3B7500DDE568E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number:          0954
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
                          2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=)
                          3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: ba4Yb308pA8h73k51z9v0le/vGs7zgS7kjCwbDeicdM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e6:14:06:ad:5f:40:f3:b7:50:0d:de:56:8e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=741d510f94cb632b0524575e82916d94edf5474e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:ae:4b:d4:94:da:21:88:ed:df:b6:02:22:
                    88:e9:08:95:54:cc:3a:2b:78:5b:8b:ee:61:99:88:
                    8f:fe:bb:29:69:46:f5:0f:12:96:eb:a2:d2:f6:20:
                    14:15:21:15:6b:2c:c1:0d:10:7b:af:0a:c0:c2:b0:
                    73:c9:73:d4:e3:f8:82:be:55:36:ed:76:3b:45:2c:
                    23:75:86:0c:47:66:9d:13:f4:c0:be:43:a2:21:e2:
                    d1:29:6d:52:f1:64:99:9a:2d:99:e1:b6:3a:23:ae:
                    51:2a:25:ea:78:62:44:0c:44:e4:54:2f:86:4e:77:
                    96:88:7a:7b:69:99:00:b8:b1:ca:4d:59:f3:2e:9a:
                    02:e8:ea:d1:1c:07:bd:d5:73:a0:a6:8b:2c:bb:8e:
                    0d:94:a3:b9:79:4d:9d:1f:17:3a:5d:12:7a:4e:46:
                    be:01:3f:57:ff:f3:5e:eb:09:f3:36:4f:d6:39:ab:
                    1a:10:41:4f:78:f1:3f:63:89:00:5b:13:55:7a:34:
                    b8:d4:80:e4:b0:39:60:b6:fc:75:db:f1:71:00:09:
                    5a:69:91:7d:ff:38:2d:27:e0:1b:21:06:91:f3:1d:
                    fe:3e:61:15:40:51:4c:62:7a:c9:52:99:8a:ca:4f:
                    b9:4d:f9:61:04:e6:c8:61:6f:8b:ea:14:51:e8:8e:
                    bf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1D:51:0F:94:CB:63:2B:05:24:57:5E:82:91:6D:94:ED:F5:47:4E
            X509v3 Authority Key Identifier:
                keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0e:7c:03:ed:eb:e7:0d:17:28:34:13:92:3f:55:25:bb:b9:
         ce:4e:6b:2f:e1:f9:45:af:f6:d1:8d:be:19:94:13:aa:25:6e:
         44:89:d7:dd:4e:1f:0f:73:e4:00:12:d1:a9:b6:28:33:ea:b0:
         02:80:c1:8c:a5:d7:08:a6:2a:00:b8:12:3e:ad:24:47:8a:77:
         e6:74:88:28:20:c4:63:94:43:e1:48:5b:c3:38:28:b8:2a:74:
         bd:0e:fe:94:45:7b:bd:54:ac:1b:16:21:26:ac:9a:a0:87:c5:
         0d:de:d1:bb:e7:5d:f5:3e:3e:c4:27:f1:57:00:89:8a:a2:24:
         60:27:f4:7c:72:9c:bb:c0:8c:72:21:81:a3:8e:e6:6e:aa:1e:
         bf:fc:db:42:17:03:57:8b:fa:41:1b:eb:a5:12:52:d5:14:86:
         56:2b:24:de:eb:0e:e6:44:2c:15:64:4c:89:0b:9b:20:8e:52:
         df:04:26:a0:9b:e2:bc:84:f3:65:66:ec:17:73:89:e7:e6:e3:
         85:b0:68:94:09:c3:97:44:90:1f:41:9d:ad:46:8e:94:96:cd:
         2a:4b:84:03:61:a7:2d:f5:ed:19:33:4f:ee:6c:c0:3b:9d:90:
         7f:e6:f7:19:b5:f5:02:5d:36:20:27:af:99:37:4a:08:cf:dc:
         f9:c0:7d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----