Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File:                     rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier:          3kbUbHqg8z21w6oGnjUpQdiV8YdI9NzqzRoNYUggEUY=
Subject key identifier:   C9:C8:E1:B9:A1:A9:D2:6A:8F:51:D8:A4:AD:01:4D:B4:B6:98:A8:96
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer:       /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial:       01962F7469E0B97C3EAD9BFC3BADEE42CFE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number:          150A
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: 2FhEmcxYfTh9K3J3avRiCdDc75E.roa (hash: tOhuHX2KWyFG2B0a0se5O81lEiJFRABFP38mxTII8TU=)
                          2: ZobwuQJlyfTBHn_a7YG93r8zB-c.roa (hash: OuGiwc5e7Uh2SsaOmHGGMAe9pQSfXZsNsX2xOuLeEXY=)
                          3: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: PpH9xEjCXOJ1xmxh0ZiQR1f2/c7uM3bgJC+cb9QFtXA=)
                          4: yT5ungE9NAr5a95GJEQ0WzC2bc4.roa (hash: 3Q09eXeA/SVTTdlEZBa1ZfiKoZceB51s1iopXPbgTXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:69:e0:b9:7c:3e:ad:9b:fc:3b:ad:ee:42:cf:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=c9c8e1b9a1a9d26a8f51d8a4ad014db4b698a896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:92:3d:a2:e2:d2:ed:4b:4c:4e:7c:7b:23:
                    3f:fd:01:70:28:93:d9:d0:13:1d:70:22:9a:b3:34:
                    cc:51:f0:3c:b6:35:60:33:ac:de:a1:f2:e4:e4:87:
                    d1:2c:04:d7:c5:ae:75:59:3d:dc:33:86:a6:f4:29:
                    65:7b:3d:1a:e8:61:b2:02:29:7d:d4:4f:38:b3:2b:
                    b8:a1:82:e9:cb:2a:97:2f:01:94:ce:2d:8c:78:b8:
                    8d:3e:c5:54:70:e3:69:39:52:68:a0:10:e0:4e:4c:
                    ab:8e:6a:e1:bd:a4:7e:e2:11:52:c9:5a:2f:08:9f:
                    23:2d:b3:da:77:1a:36:ca:c9:ab:40:2e:20:29:42:
                    aa:8b:ce:74:da:d1:ae:10:17:b3:ca:a1:96:0d:a2:
                    79:e1:3f:01:cb:e8:7d:ac:bc:b6:2c:26:86:93:53:
                    8a:d2:b9:72:8c:4e:8d:dc:44:4c:fb:fd:f9:6d:c8:
                    f5:27:f9:24:93:2f:09:22:c8:bf:8d:e3:96:56:16:
                    40:cb:d4:02:9d:98:e4:4d:9b:96:a6:df:43:16:de:
                    65:6a:13:96:11:7d:92:da:0e:70:9d:82:1c:e8:f7:
                    9a:54:5c:6d:10:8c:4c:cd:c7:54:78:f9:1c:1a:56:
                    06:00:5f:54:b8:7e:45:e8:d0:e7:80:66:95:0b:49:
                    af:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C8:E1:B9:A1:A9:D2:6A:8F:51:D8:A4:AD:01:4D:B4:B6:98:A8:96
            X509v3 Authority Key Identifier:
                keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fb:2c:c4:21:32:ee:49:4c:52:6e:9b:80:26:bf:ba:94:18:
         5a:5c:71:99:2e:90:27:72:37:6d:ae:59:58:06:c8:d1:ba:05:
         ed:9c:39:99:4d:5c:4a:14:5b:80:9a:3a:ca:11:74:ec:de:6d:
         03:53:6e:3e:ca:87:d5:31:eb:6a:76:21:df:21:d4:f2:ab:07:
         34:19:3a:5e:e2:5f:75:91:56:d8:d2:54:b1:02:8c:a7:ac:7c:
         45:e4:a1:e1:e3:c7:07:cc:89:c5:64:22:5a:fd:1f:42:9d:0a:
         64:31:73:94:39:39:7e:f2:66:b7:1c:17:12:b4:56:d4:40:64:
         cd:22:b5:47:69:4a:36:ae:89:c7:85:4f:6a:cf:47:37:1a:6f:
         ee:d1:6a:80:22:05:56:e4:99:47:6e:03:c7:50:a4:c6:09:f2:
         e3:61:2f:6b:51:40:d7:8a:84:35:65:fa:81:0b:4b:c4:30:57:
         b5:f5:0f:06:3e:5c:b5:be:df:79:35:5a:f4:a6:ed:b5:4d:f5:
         73:ed:bc:c2:0b:8b:f0:ff:e8:f3:7e:64:40:19:9f:23:95:51:
         43:35:e2:8c:5d:c3:5f:bc:b1:70:74:d0:3f:f2:e2:45:32:14:
         d7:73:22:76:10:6d:6b:23:a7:2a:9d:50:c8:62:df:30:69:61:
         6c:c1:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----