Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft
File:                     pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json)
Hash identifier:          HY6xAQsaWoWA5y+bSUKRIpCWVz35nMoW30N7nJcc6j8=
Subject key identifier:   95:78:3D:C9:5C:E3:78:A1:63:88:32:FE:CF:10:7A:C0:7A:00:9D:38
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Certificate issuer:       /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial:       01962F064D6B836601888C67E4EA2D5F9D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (hash: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=)
                          2: 5WrJ_uE8kyfBBg-3rwJlJ6xmp_8.roa (hash: akdPzsnTgH7KtcZBNqPU1osdDy68HWzdp9bPm2mowoQ=)
                          3: BNK50FDIwLul7LRBqtaICEr9khw.roa (hash: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=)
                          4: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (hash: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=)
                          5: KkXUwS_4I3ayhd69cP94FHMIKt8.roa (hash: LxyBIOit8HMNZzSJZEvDwuJO4yhxg3p4QU3YOVadKu8=)
                          6: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (hash: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=)
                          7: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (hash: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=)
                          8: YUWzsfvcGYX0_uMBwsz_UtSEvoQ.roa (hash: I2+ZceVVB5u+gR2ocAD4lll8BHqWUKoQ7I2fsyabCm4=)
                          9: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (hash: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=)
                          10: dP7R-pLAHJv2fxQ8stLMnaNCaIU.roa (hash: ttCIQ6x9upS1QYi3S99yjmOdJpA4nSRRgEVZ9+6A5jo=)
                          11: gMOwF2mtPRPPpZ-NEq9tmTPMYvM.roa (hash: 9I06ya03N63sQNTiVWhF2hYWAac083jSJyEUOO+Wtd8=)
                          12: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (hash: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=)
                          13: nf8wv6xh5ICDlagRQQtQeDyX7AI.roa (hash: IeriVdC3WPiFlh9qajSZSa5F78gurX6jx9EVck9sDTQ=)
                          14: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: ZfmRmKKw0cZOYB6Y/D9EP7qNRUZT9xgFtA/8y1+EBu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4d:6b:83:66:01:88:8c:67:e4:ea:2d:5f:9d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=95783dc95ce378a1638832fecf107ac07a009d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:60:39:bf:47:a4:1b:2f:54:be:11:ae:c4:57:
                    29:92:a3:2a:ae:3d:f3:d3:49:ba:a6:78:d5:0b:73:
                    6c:4f:02:02:94:69:cf:8e:23:33:44:27:db:d3:6b:
                    16:89:82:88:50:78:3b:d0:88:3f:37:b3:52:5e:96:
                    18:f8:4d:1e:e6:f0:ca:5d:1b:47:32:2e:2c:7c:21:
                    ff:88:15:0c:c5:a0:5b:d7:fc:09:2b:55:af:34:54:
                    99:9e:5f:66:d9:41:3b:9f:64:07:f6:61:4d:da:90:
                    a7:36:3d:7d:da:53:bf:79:b5:d4:56:b5:5b:42:b6:
                    6f:09:88:f4:03:fa:f8:00:49:1a:54:29:cb:d9:0d:
                    96:17:f6:cd:e9:fb:26:a1:03:bb:cd:82:b2:d8:91:
                    71:8e:1b:fb:01:94:ac:0d:bf:04:4a:b6:78:83:3b:
                    c7:4a:62:77:bf:02:68:50:a0:ba:31:6a:d7:22:cd:
                    91:fa:9f:c9:71:6e:a0:68:52:d2:fc:7b:a6:96:55:
                    59:38:a4:69:9d:22:c5:69:31:db:b3:82:00:7b:ef:
                    bf:3c:b3:53:a4:84:a8:c0:a1:a0:d6:58:3d:91:07:
                    8e:0f:ac:9e:e1:ae:a0:64:3c:a8:b6:b8:60:83:22:
                    e4:5e:c1:ac:b9:64:52:bb:12:90:3d:8b:dc:b5:ef:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:78:3D:C9:5C:E3:78:A1:63:88:32:FE:CF:10:7A:C0:7A:00:9D:38
            X509v3 Authority Key Identifier:
                keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:99:58:e2:f9:9d:cb:21:18:26:86:bb:ab:de:ae:76:82:d8:
         ae:41:1b:05:8c:3e:8f:43:13:1c:39:2a:4b:66:16:2c:43:d9:
         86:71:70:ec:c3:87:c7:76:e1:69:6e:0a:16:d6:58:3d:7a:9c:
         84:7f:3d:7b:e9:a0:bd:6f:49:ee:aa:32:bd:68:34:a4:10:63:
         9c:b4:f6:69:0d:b9:34:27:24:e0:29:cb:ff:c7:13:79:57:79:
         99:23:be:f2:cc:63:64:5a:91:bf:49:71:08:02:99:7f:66:bc:
         5f:a8:91:6f:4d:62:ee:16:8c:a0:b4:47:41:04:78:a2:eb:99:
         5e:3a:01:df:35:83:ac:49:83:80:33:b5:87:e1:f4:63:4d:30:
         a9:f3:49:af:47:1c:86:b3:4e:4b:26:fd:87:11:36:7b:8b:af:
         da:a2:90:d1:47:c1:fb:f1:4e:b9:65:4d:ba:2f:87:04:08:83:
         f8:2f:ca:30:ae:a7:ad:37:08:48:7d:75:e7:16:e8:9c:c1:e4:
         ac:36:d4:df:6e:e9:90:4f:75:6f:0d:da:53:a3:f8:78:c0:3f:
         83:84:0e:9a:eb:5b:99:39:00:48:8e:66:dc:7d:69:5a:30:4e:
         da:5e:56:38:77:37:1e:89:a2:32:8e:79:c4:2c:2a:9a:cf:8d:
         c3:46:94:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----