Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
File:                     S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json)
Hash identifier:          Gd8aTk4xGVJdh3YK7dZg4Uv0Fo1cMZ9Z98v3HPHv2dw=
Subject key identifier:   92:0E:D0:DE:8D:5C:91:EC:A9:E0:F3:35:39:B5:89:50:DC:2F:AD:B4
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Certificate issuer:       /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial:       01962F3DC3C54138C33D6BF4A05E9F9A3340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: 11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (hash: I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=)
                          2: EVFSBas9Aq_MdNVwUd8bGuaA3Ws.roa (hash: BhtgRPsHAejHOiiDvH3HRPbC4SYTxdKvHTv4FGSpdUs=)
                          3: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (hash: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=)
                          4: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (hash: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=)
                          5: MJIbLhSmNC8a874fA2nbq57HEtg.roa (hash: WaRYM9CvEVYhUP+ZoiflR5McAGOB5Og+0p9cf3/LEak=)
                          6: P1A1BXCqCADzQosrk4MwUKPYxTk.roa (hash: LXH4t2ODNhUtfiB03lL7Y51z/AGbNaW0Y11NO+KNqsc=)
                          7: QHWMs-MZjDSwChSISEL6Gl0q8mw.roa (hash: MTwg/6CPgLRHHoER9F5LK/UDna9Vp7Lok94EKexAIUI=)
                          8: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: Mf9bwhRKQRY/q9RYrTt4PjVhAY9b/+FxxBJRtDuiEi4=)
                          9: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (hash: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=)
                          10: foffFzsX_C0XZVackxzc9TT3Ql0.roa (hash: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c3:c5:41:38:c3:3d:6b:f4:a0:5e:9f:9a:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=920ed0de8d5c91eca9e0f33539b58950dc2fadb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:35:86:41:93:b6:fe:0b:dd:21:42:51:76:
                    c8:f5:34:b9:2b:8a:3a:f4:53:fc:c5:fa:3e:ff:b5:
                    ae:fb:71:88:5c:6d:71:0a:4c:e6:75:99:78:d0:c9:
                    9b:e8:7d:f9:a5:bd:60:db:a7:68:c4:a4:c6:e7:0c:
                    a1:ff:e4:fa:b9:57:06:bf:3d:49:8e:b9:50:ce:3e:
                    8a:25:3d:94:91:ed:2b:29:32:57:1c:1d:40:4e:35:
                    be:fe:a1:65:b1:5b:32:01:cd:c7:b8:25:da:a8:c6:
                    c0:c1:a9:78:a7:76:b0:17:34:69:30:65:3b:54:c6:
                    03:60:5e:61:1b:d5:8f:57:44:89:0f:27:95:d6:e7:
                    54:ad:9c:a2:38:7f:cd:85:de:2d:7e:68:1c:ac:4d:
                    05:75:16:76:44:08:79:82:de:27:f7:52:aa:bc:f7:
                    77:ad:f1:c1:fa:68:42:85:de:97:ad:4a:5a:80:a3:
                    0f:43:14:18:f9:58:55:fd:5f:13:58:13:32:c1:92:
                    3d:1f:0f:fe:13:4f:7e:7b:1e:d0:3d:3c:85:a2:d5:
                    bd:e7:a2:2e:ca:80:15:b0:25:c5:13:01:6f:49:31:
                    4e:03:59:8a:a7:b3:a4:aa:8a:b9:87:09:d1:a8:21:
                    5d:a8:c4:04:31:fd:07:d9:70:df:37:2a:3c:69:5d:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0E:D0:DE:8D:5C:91:EC:A9:E0:F3:35:39:B5:89:50:DC:2F:AD:B4
            X509v3 Authority Key Identifier:
                keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3d:4b:c6:2f:85:14:6b:e7:b2:54:34:3f:cd:d9:5d:50:50:
         de:e6:c1:de:54:39:88:01:7d:a9:b3:9c:e2:6b:bf:72:31:ca:
         4c:f4:2a:b7:af:4d:4e:90:54:85:04:07:a7:e0:bd:43:dc:30:
         8c:52:4d:04:04:b5:e7:3a:b6:67:ae:19:93:c3:5c:61:98:b0:
         47:ee:d5:b5:86:56:1f:f2:f4:4e:3c:e7:ae:b0:fd:d9:08:01:
         8f:46:8a:a3:28:67:2e:40:b7:de:d5:b7:9b:a3:9d:fb:32:7f:
         35:30:1a:16:3e:19:17:ed:14:39:1f:3c:cd:c5:91:22:3f:fe:
         1a:30:c1:33:10:72:66:9a:ba:4f:2f:9b:f9:d7:a1:08:66:5d:
         28:0c:b5:b3:69:7f:18:33:8f:6e:dc:06:28:a7:f7:39:57:3e:
         cb:10:38:60:5a:2c:50:61:32:73:eb:d9:a9:4b:d8:4a:dd:a4:
         15:44:32:e7:49:12:bb:b7:d3:59:21:7f:eb:3c:70:e3:a5:6f:
         58:cc:5b:2e:78:d9:9d:35:12:ce:8b:5f:0e:62:30:a0:61:63:
         6a:28:e4:ac:b3:a0:53:20:6d:a0:02:85:36:dd:d5:9f:a7:67:
         9b:a2:a8:0b:89:12:72:2f:71:ad:c6:03:5a:a8:37:b5:5f:60:
         e4:8e:44:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----