Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File:                     R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier:          QC5xbk/yKDy8xHbuIEKWnkdZk/0MrXjolJlTzzf68SY=
Subject key identifier:   B5:B8:AC:D8:DA:64:A7:9C:42:68:34:D9:38:31:5C:49:1C:62:4C:53
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer:       /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial:       01962E61F8A691FFD3F6E85EA6BD016D716B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: M_ZucCsuJb1Fkv6phLwqAkn6J0Q.roa (hash: f0NnZS14FEEVK+otZH9sTWdHvzqdq6zBgg0/lm/taxs=)
                          2: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: YC4cG/b1P5HFkxx/n0dkz3S86FywY2Ob0IbIZb4klOc=)
                          3: kNpqx0tZlqJV-cV06kVoinEAEvE.roa (hash: yXJYbGR5++qBsVQrRHL4bHSCZiui648QCWfzX8PBFak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f8:a6:91:ff:d3:f6:e8:5e:a6:bd:01:6d:71:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=b5b8acd8da64a79c426834d938315c491c624c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:b7:8f:1e:dc:79:38:1f:cb:a7:be:75:26:
                    a5:80:2d:ac:cb:59:21:61:8d:e7:1b:8a:0b:e5:fc:
                    2f:e4:c6:a0:ce:a5:fd:b3:e3:3f:c6:40:e2:a3:53:
                    37:ab:e4:5d:eb:a0:5c:0c:c9:4a:3c:62:2c:bd:56:
                    79:83:72:b5:99:f5:15:b4:f3:80:cd:7f:b8:a6:5b:
                    95:66:d1:ff:ae:ae:7e:d2:e5:b6:47:95:f8:af:df:
                    07:d1:0a:94:2a:95:27:4d:b4:5e:2c:a5:79:7d:61:
                    07:11:91:a8:89:31:2f:af:85:10:ba:9e:a5:7f:b5:
                    b8:fe:57:78:a6:e3:ed:00:c5:39:81:c1:00:0b:3f:
                    a7:33:ad:ee:ba:f0:39:94:09:0d:f2:e8:2f:5a:86:
                    64:31:bf:06:7c:c5:3e:d2:72:e4:99:77:73:42:54:
                    80:c5:b5:4d:54:3f:1b:65:5a:34:d1:9f:23:40:15:
                    7b:e6:32:dd:d3:f8:c5:b9:57:88:94:42:74:7c:1c:
                    fd:17:4f:c8:c4:5a:45:a7:b6:2b:57:d5:17:b9:d3:
                    76:6d:6c:71:8b:2d:33:11:1d:6a:eb:da:b8:a5:2d:
                    f9:16:4b:97:e8:8e:9b:3f:33:f7:c0:0c:45:2a:3b:
                    6a:46:2a:fc:8c:10:89:92:47:cf:29:5c:09:fa:9c:
                    f8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B8:AC:D8:DA:64:A7:9C:42:68:34:D9:38:31:5C:49:1C:62:4C:53
            X509v3 Authority Key Identifier:
                keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f8:ff:c6:2a:13:a3:d3:1b:55:60:da:31:02:19:9d:23:1f:
         eb:71:48:95:68:db:c9:c0:17:f2:5a:b5:6c:3b:69:eb:8c:04:
         68:ca:94:16:63:13:c6:66:3e:4e:83:a3:e2:0f:e5:46:ba:a0:
         d4:da:30:76:07:51:b1:37:83:2e:d5:fe:b7:71:c6:a8:58:84:
         38:ae:ec:06:00:9b:50:2d:c0:1d:69:ff:c9:38:8f:06:37:24:
         53:cb:b0:73:a8:a6:a5:45:37:29:81:26:e1:68:1b:e8:80:a5:
         a4:15:29:a8:e2:43:00:b6:b9:40:2e:eb:06:67:1e:88:e3:38:
         ad:9e:20:5b:69:07:16:53:70:8c:23:c6:9d:ca:1c:65:b3:17:
         e4:66:ff:37:0b:ff:08:ea:02:20:e9:8b:14:2b:b1:1a:87:a3:
         8e:93:cd:18:91:5e:9f:c1:3b:58:db:34:82:3a:50:89:68:22:
         7c:1d:00:54:0c:7e:96:62:1b:fa:ad:da:63:eb:40:36:db:75:
         4b:82:6a:8e:0a:74:1c:b8:e5:81:51:bf:69:bc:08:8d:6b:b3:
         d0:7c:86:5d:18:66:3a:8e:ea:84:39:c5:ad:9f:1e:2e:51:99:
         18:d4:dc:2f:66:ee:38:ea:f6:34:fb:f1:5b:1c:3b:70:b9:b9:
         2e:a9:18:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----