Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File:                     tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier:          9E4CKkk98AfzD+JMsSNViL4WSFFv2zd86f0IuUdxF0w=
Subject key identifier:   4F:39:36:D7:41:42:2C:CF:B2:EA:07:FA:C2:0B:13:99:88:29:00:DC
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer:       /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial:       01962F072AEF6455CF42B9F26DD1E4D28EAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: 4lhTaQhjom1qkpeBd0ZsbdWiEJ4.roa (hash: XdHlLCQ2Kh6iuUQP6DmaSkVFP47PPhEh+iIit9uDq/c=)
                          2: Loamkgq2liGt_WerD0xhgg9VD4c.roa (hash: HJiMbQmWc3n1Lwl3vm8HBtMiaI2Ev5JS4MMKRu/Y4gU=)
                          3: kTZKdp3t576jj7V1laKryCYz0Og.roa (hash: HbtSMYd2T/15rtkOhZspTZMKwAPA+sik9h0BqyVd10U=)
                          4: rZB_JVvkOIqma6Wh66SCnHCJS8Q.roa (hash: UNrRcAyslLxjeDmqjrPzHbwMyZ4AtgV3GxOrJgdzxQg=)
                          5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: C8MkuckPTH9+9fLNBKWe08Pm0mpC0PIaIKAyP/XYKr4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2a:ef:64:55:cf:42:b9:f2:6d:d1:e4:d2:8e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=4f3936d741422ccfb2ea07fac20b1399882900dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:be:91:a9:6e:42:aa:7d:db:a4:55:03:66:
                    e3:09:c0:aa:00:2c:54:16:98:9f:bf:96:09:a6:26:
                    ec:31:f7:14:b6:eb:e2:03:21:35:c5:be:55:81:2b:
                    12:70:15:79:f4:55:a9:f1:e4:ef:f6:47:d2:91:8d:
                    b1:b6:4c:f6:a8:ce:88:f9:e9:3b:1e:51:12:71:8e:
                    52:d0:a3:fa:2c:fe:74:93:70:ff:44:f8:36:0e:f2:
                    4d:ef:64:b7:57:bf:35:a1:6d:f0:0f:c5:88:4e:a6:
                    61:2e:49:79:f5:46:61:f0:8b:e2:f3:ff:ab:2f:ca:
                    77:d2:1a:dd:c5:c2:f2:83:1d:b0:1a:6f:50:17:8b:
                    2a:db:18:39:57:2a:0e:b8:36:83:03:49:d9:e5:64:
                    f5:52:7e:15:71:4e:9b:b6:52:48:37:a6:da:7c:af:
                    5c:51:64:37:ab:c7:b3:d5:bf:36:32:99:26:30:c3:
                    ce:67:31:f8:40:3e:b6:72:bb:0b:88:f2:91:6c:1e:
                    1a:7b:90:19:58:07:3e:6b:f2:1c:a7:e9:37:5d:70:
                    ec:7f:6c:c8:ba:68:73:6f:5f:2d:86:9b:85:d3:18:
                    5c:9b:5d:af:b0:ac:81:e5:b1:8a:62:3b:fa:1c:43:
                    3f:fd:9c:fc:3f:10:7e:75:9a:12:85:2b:78:4f:ee:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:39:36:D7:41:42:2C:CF:B2:EA:07:FA:C2:0B:13:99:88:29:00:DC
            X509v3 Authority Key Identifier:
                keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:4a:57:1f:05:f6:9c:0e:da:9d:88:6a:ee:e6:61:fc:9d:56:
         9a:0f:38:43:6d:94:78:34:c5:e2:e1:bc:20:08:0c:77:24:a8:
         5f:42:1c:ff:73:9a:bb:09:6c:da:60:04:5f:49:42:71:b2:3b:
         20:ff:ec:90:30:61:22:43:ee:b1:9b:eb:f7:ce:0f:d8:d0:74:
         59:a4:1f:5d:76:fe:3f:7c:e9:8c:8c:b6:9a:54:98:a4:f3:e3:
         f9:83:19:43:d4:54:2e:2a:7c:c3:e1:32:bb:96:36:40:a7:7d:
         43:25:26:ca:0e:79:f4:e9:c7:61:18:51:93:e8:4e:17:07:20:
         41:0b:f8:1e:89:c8:f8:a6:96:91:2f:d3:f2:4c:53:bc:8b:8b:
         73:0d:65:a2:15:b7:44:ee:e4:6a:a6:cd:a7:e8:0d:c5:5d:e5:
         e4:6e:5c:a0:4f:1c:bf:4e:09:3b:87:c1:f3:d4:1f:90:2f:d5:
         17:6b:d7:bb:2a:42:4c:48:3e:ae:e5:35:57:fc:9a:17:e4:77:
         fe:da:fd:2e:fd:5b:0e:78:a8:22:c6:a8:57:a0:4f:62:9d:d6:
         ce:c2:d8:b5:e7:e8:fe:2f:d4:a1:c1:54:a4:59:81:9b:a1:3f:
         12:c7:dc:38:5a:ce:6f:71:99:8a:34:07:2c:54:db:eb:a6:e1:
         c0:0c:4b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----