Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
File:                     RNPMWRzro4YTDzyfdCZFi4iHwus.mft (raw, json)
Hash identifier:          69oncaQnIX4CjZPySQWx8uXYKw6LrHMSgT4wN0Fh7A0=
Subject key identifier:   50:4E:B3:54:16:F6:4D:6A:47:D4:68:1D:62:C1:C9:7D:36:AD:EA:E6
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Certificate issuer:       /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial:       01962E61B6BA2046AD64A1472D4360CF8E61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
Manifest number:          0514
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: 5_5ZxyaYymDkazwik4_YUJ_u6nk.roa (hash: 0ihJyb/8cvHev60hCuqr7j7mSBpvAI6EqaNQNOqgNHg=)
                          2: RNPMWRzro4YTDzyfdCZFi4iHwus.crl (hash: kfcpgs1niTQvymuwDkbZCwZal5UCqBIK7YbiDjGXARo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b6:ba:20:46:ad:64:a1:47:2d:43:60:cf:8e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=504eb35416f64d6a47d4681d62c1c97d36adeae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:b7:f0:63:64:b3:e8:a3:dd:94:1f:59:ac:
                    a2:ed:46:18:d0:fb:15:40:9d:b5:7a:e5:e7:e9:9e:
                    e7:17:0d:98:34:ab:86:bd:8d:ad:37:91:e9:30:54:
                    b3:a0:ca:c2:0e:8c:c8:7c:92:25:e3:2f:1b:10:26:
                    8d:67:88:61:ba:ad:ce:01:c9:17:91:bf:fc:30:4e:
                    10:48:ee:b2:4b:0c:82:c3:15:43:46:47:19:73:c4:
                    4c:35:df:70:13:32:8a:6d:f8:c0:06:ba:99:b4:03:
                    e6:09:93:9e:1d:df:5e:1e:3a:3d:c6:c3:39:41:ec:
                    e0:b1:71:1d:68:3f:e7:49:c0:27:3f:51:a7:42:fc:
                    94:58:48:a4:fd:46:48:de:7a:0d:a5:e0:3b:63:99:
                    9e:5d:61:43:da:de:5d:f4:e6:bb:e4:7b:80:20:1f:
                    96:d1:5c:71:40:9b:ba:18:3e:c1:a7:3f:2f:3a:85:
                    9c:5e:35:5d:e5:9a:57:2b:dd:5b:11:68:34:c2:bd:
                    12:4b:72:42:19:d3:9d:4e:6b:29:be:f4:a5:66:86:
                    d7:ad:0f:65:84:08:24:5a:f0:1b:4f:e4:e9:74:7a:
                    c5:d2:d3:2b:cf:fb:86:83:2c:d7:43:76:77:e3:b5:
                    10:55:03:be:e8:a3:0b:0b:94:25:2c:20:41:ff:3e:
                    d8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4E:B3:54:16:F6:4D:6A:47:D4:68:1D:62:C1:C9:7D:36:AD:EA:E6
            X509v3 Authority Key Identifier:
                keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3f:8f:5a:a7:b6:3b:b9:ca:39:ee:4b:ab:94:a4:d6:8c:ac:
         5f:ce:4b:40:3a:9e:dd:38:d7:b3:77:1c:b9:40:ff:3e:18:c3:
         79:d2:8b:c2:a6:da:92:1f:20:9b:b3:6e:82:86:f7:5a:9e:f2:
         fc:58:2d:8c:c8:51:02:e3:5f:1c:67:90:dc:06:53:85:eb:ac:
         df:f4:d6:36:15:22:c5:37:c9:7d:d8:aa:ac:33:f6:6e:46:e4:
         73:be:53:3d:c9:c8:6e:ae:c8:5d:2e:f0:43:91:60:a5:2b:72:
         61:a0:e9:47:8a:8d:8b:ca:47:43:fc:f4:67:b2:30:ae:3f:ed:
         1b:97:12:38:89:bb:84:70:8a:79:3a:12:04:65:60:a3:23:67:
         c3:f6:ea:01:05:72:e7:b2:08:b7:19:4a:cc:38:0f:6b:75:a9:
         1a:65:c4:e4:95:b9:3e:b2:43:4e:bd:b0:64:9d:00:a0:bb:c5:
         75:fb:73:b4:03:9f:a5:a8:19:06:d4:c1:9e:e2:37:93:14:1b:
         05:08:f4:12:6c:89:d8:a7:3a:fa:a7:85:b8:a2:37:79:72:e3:
         50:16:67:c8:a0:6d:68:de:2b:7b:3b:56:b9:b2:92:29:5d:76:
         2e:05:fe:95:81:55:08:b1:9b:15:9a:48:37:35:06:9c:39:97:
         cf:8d:a5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----