Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File:                     lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier:          RXmdJ5JI/5C97gkrbLJC3dN6z3BvNvf4XdYmN7o0Qq0=
Subject key identifier:   E4:C1:40:94:B6:AA:8B:3F:BA:B8:EB:8B:37:CE:04:F0:E3:C8:B5:F6
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer:       /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial:       01962F06FA6F699AAE92038C5611B94FE4CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: 1-wnHFiYjnB24GxLV0meyzqsLFuM.roa (hash: LOVK3lUPwn84ZhS3ik+53n7gRvihYYPhPwXZjIMuf0A=)
                          2: WkUeJeS2VIWyHMQB6OP6WxpRtuE.roa (hash: moR9C1uw6Uz7LXM37ENpKv40O3dD16LP7ICWKr7IDI0=)
                          3: Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa (hash: dePmJdyQAMKfk9z1bRk5VV+9WiuJD5hNdYIl1QjUe2w=)
                          4: _9QXHDXD2W0fy8-Ix1_61oUgOdw.roa (hash: PBxel1cKi46iaG0YRLkS2zvm3xWWCreZ2nu/52SigQM=)
                          5: djxHGgUqKdNcqVM8z_uuH6OIUlc.roa (hash: wgIdr0CUuczPiiAnFOZrV9fosozOElD12J6XrjtfSGs=)
                          6: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: Y1gHHG8mMRbundAV02U3bVpI30zI3t+qApzIOA0Gq2c=)
                          7: vgcjTeJgjqzs04Lo8DPrBtZnGbs.roa (hash: iV57rW45EBrtatSEbslptILthc80jn2LQS91fPeJvUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fa:6f:69:9a:ae:92:03:8c:56:11:b9:4f:e4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=e4c14094b6aa8b3fbab8eb8b37ce04f0e3c8b5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:14:4c:a4:8b:d2:64:b5:81:4d:1a:07:d4:fd:
                    45:9c:65:14:50:27:7b:5e:e3:7d:73:c3:73:56:6c:
                    5c:19:ec:c4:27:c1:4f:02:e8:d5:3d:15:e4:6f:7b:
                    d1:77:94:59:19:b0:a3:2f:98:1b:13:43:b1:2f:85:
                    c6:2b:85:eb:b1:96:01:7f:ab:6c:3f:c2:dd:ac:12:
                    a3:a5:d6:fe:ae:0f:0a:83:b8:b3:cb:f1:04:25:03:
                    8f:e1:eb:23:22:ac:62:2a:a0:74:27:fd:45:14:e4:
                    20:e0:93:f9:41:ea:75:4c:20:d8:0f:6f:78:fd:d2:
                    cc:eb:af:ae:fd:09:f7:93:d5:f2:bb:b3:e4:c8:75:
                    e3:40:0c:67:19:5a:f4:89:66:d0:8b:aa:bd:03:07:
                    c7:24:eb:fd:48:37:25:1a:e3:2c:c4:a1:21:d3:12:
                    38:75:11:23:5b:96:84:01:15:0d:46:21:11:6c:8b:
                    bd:8b:75:96:4d:84:65:96:68:67:b0:1b:9d:af:82:
                    ca:02:8e:51:b7:06:d5:1e:40:5f:27:3e:dd:67:bd:
                    e4:4d:6b:61:4e:b2:2b:05:03:80:c9:0b:98:70:85:
                    a8:1d:b4:d8:ff:6c:1b:34:8b:53:21:d2:c4:4e:c1:
                    6b:72:0c:55:b1:45:b4:f7:c6:2f:34:59:c5:9f:10:
                    aa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C1:40:94:B6:AA:8B:3F:BA:B8:EB:8B:37:CE:04:F0:E3:C8:B5:F6
            X509v3 Authority Key Identifier:
                keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b5:6d:c2:6c:27:9e:00:72:ff:d6:52:a4:82:9e:61:32:3b:
         8a:f0:d1:7b:eb:5e:ed:48:3d:e2:76:a5:22:06:44:73:fe:d8:
         64:39:ae:00:99:5f:92:a2:59:2d:c6:29:dc:e4:50:32:03:1e:
         db:db:e7:f6:52:de:0b:a0:b3:5e:4f:68:96:03:14:a0:01:a5:
         8c:17:ac:e2:6d:09:f7:8c:22:f8:dc:cc:a7:7f:07:ec:a3:41:
         5e:4b:ae:c3:9b:f8:2a:1d:7c:cc:e0:f2:d6:a3:b6:6f:0a:60:
         ca:64:74:35:9d:f5:c9:57:03:13:09:69:72:77:2c:8e:02:a4:
         b2:83:cf:89:d9:4f:49:bd:54:f1:89:80:67:3a:78:bd:0d:bf:
         95:cc:65:61:af:5b:b2:64:97:89:7b:a1:5a:a4:0c:bd:4e:a5:
         db:67:75:7c:38:90:7f:b4:c8:82:ef:08:24:2f:97:89:a9:60:
         1e:ba:04:c8:da:f9:97:01:d5:4c:dc:f9:0c:84:74:01:41:69:
         68:6f:04:c6:0a:15:99:80:6b:27:34:c6:63:50:70:52:a0:1d:
         8e:0a:74:aa:bb:a7:2d:30:e8:7f:43:d0:1b:3b:66:d4:d3:63:
         a3:d8:4e:a8:af:cc:6a:87:1d:9a:aa:21:e7:8a:4e:00:2e:7d:
         e7:c8:82:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----