Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File:                     14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier:          uwSywaBWA1F0Sgm+QMOHcZlULdLWmUgFAoF2t9imBWY=
Subject key identifier:   53:66:06:BD:30:3E:A0:33:5F:5C:91:4B:A3:3E:63:C1:63:E6:59:A8
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer:       /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial:       01962ECFB496F31BF9143E12014DF6DA2426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: 4osX8c0Da2XPdJHLlKX+dMLzEnWxLtgwkIoA/pOoqqc=)
                          2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=)
                          3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b4:96:f3:1b:f9:14:3e:12:01:4d:f6:da:24:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=536606bd303ea0335f5c914ba33e63c163e659a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:f2:71:bc:f6:f2:1b:b9:b9:20:b6:f4:87:
                    bb:fc:72:a5:32:e3:f2:4c:87:ae:94:ef:fa:3e:58:
                    fe:ed:1b:51:55:bb:4c:15:a2:5a:ff:a0:22:a9:f9:
                    d9:a6:d1:10:e5:bc:f5:af:7e:9b:86:b5:8b:15:f8:
                    64:07:db:c2:63:32:e6:82:b1:be:1f:d3:49:06:fd:
                    7a:ff:48:a8:a1:f9:60:02:35:04:4a:d3:cd:1a:24:
                    80:48:1e:10:a0:0f:c1:28:0e:3f:36:83:d8:52:96:
                    c0:74:3f:2f:9b:cb:69:51:29:e3:c3:9c:0a:03:cc:
                    64:28:e7:2b:75:4d:c8:a0:b2:34:73:09:08:bd:55:
                    2d:c6:79:83:2a:6c:99:07:1a:07:fd:bd:32:cb:02:
                    82:f8:fc:f3:ab:dd:3e:d2:2e:83:2f:54:1c:6e:c0:
                    03:31:d1:d5:77:0d:fb:e6:9a:4d:7e:a6:2e:14:bc:
                    63:97:ec:d0:96:1f:a6:a2:03:82:4a:77:ad:67:1f:
                    01:49:51:11:93:7a:ff:38:01:dd:df:e0:3d:36:e4:
                    cf:98:fd:17:ca:ef:aa:fb:fb:bd:2a:cc:f5:f8:bb:
                    0a:01:e7:26:a6:9f:61:55:10:ce:65:83:98:2a:4c:
                    b8:85:ce:7e:4f:94:c4:00:f0:5d:7e:c8:9b:3e:42:
                    7b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:66:06:BD:30:3E:A0:33:5F:5C:91:4B:A3:3E:63:C1:63:E6:59:A8
            X509v3 Authority Key Identifier:
                keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:70:48:49:50:82:7a:26:4e:ba:5b:a3:ad:df:43:0f:e7:12:
         b3:ef:42:89:e7:73:a2:41:f9:2e:9e:fb:48:31:92:5a:1f:85:
         73:e7:54:49:9d:58:6f:3c:48:a5:84:ac:48:d3:a9:bb:a4:75:
         f2:73:37:5e:af:74:e3:67:7a:64:27:50:b2:56:67:17:74:62:
         e0:5d:63:97:ae:e7:ac:1a:cb:aa:93:0c:5a:17:b2:49:8c:dc:
         bd:15:e9:0e:3d:7e:ef:f3:25:65:c1:fa:f2:71:79:10:b4:82:
         87:a3:35:c8:93:4d:07:93:f8:b1:e5:fa:64:43:32:ac:0f:e3:
         4e:b0:13:7a:3b:25:87:7d:f2:1a:a8:ab:3a:c6:a4:64:4c:ae:
         77:e6:7f:eb:60:41:37:00:f4:93:9b:5a:0e:0c:48:75:53:5a:
         08:4c:51:35:a0:3a:6a:ae:f3:a3:a2:a6:b5:c0:c4:29:75:63:
         35:36:2d:8e:2f:ee:f7:9e:44:34:6d:1e:45:c1:af:19:ce:f1:
         67:ab:56:6b:86:71:f1:f2:b7:3f:25:48:34:77:29:28:17:e5:
         15:48:13:9f:55:b8:cb:27:45:4f:f2:31:6f:5f:6d:00:52:b6:
         82:d7:00:06:08:0e:5c:83:98:e5:98:b4:c7:f0:2e:28:74:0c:
         ca:6a:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----