Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File:                     A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier:          PfbuiwhQ7wPOArkfJDJzS82rg/Z8tj34hhpSc4VAaCE=
Subject key identifier:   40:04:C1:0A:2C:66:33:A6:DC:46:C5:21:68:1C:EE:CD:B2:EC:E3:BB
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer:       /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial:       01962E2B2277497E64282F42A6623ED697C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 3Et5DSQTmjw5JoMUf-Wa1H5e4PY.roa (hash: FOwnE+/UGLrWULx1HSQ846yUR+XWmJ/pKo/EVwX3S1M=)
                          2: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: VNBn0kEzVDKTxGcTh3IA0nAYNai3jcZKCPy91xy1lc4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:22:77:49:7e:64:28:2f:42:a6:62:3e:d6:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=4004c10a2c6633a6dc46c521681ceecdb2ece3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:76:97:93:49:07:73:34:14:bd:43:a2:51:
                    05:50:f2:25:a5:64:20:66:b2:7e:70:6f:be:1b:56:
                    bf:17:5c:2e:a2:dd:ae:14:08:b7:d1:75:26:ab:c0:
                    eb:d9:4a:14:33:09:92:49:2f:03:bf:fa:3b:89:50:
                    b3:1c:a9:58:67:97:d2:d2:7c:0f:30:cf:4f:68:c6:
                    72:2e:bc:97:c9:ae:0a:96:84:3b:b0:07:d3:83:33:
                    2f:29:4c:b7:ca:2d:e8:d0:e9:23:a4:9d:4b:18:5e:
                    d8:39:77:d4:fc:fc:81:e4:e8:90:23:3a:4d:ac:b3:
                    73:48:42:4e:52:27:90:46:92:48:47:c5:b9:04:83:
                    c3:2e:7d:3e:27:f9:b5:99:70:eb:bf:7d:96:f1:6c:
                    c0:94:7f:a5:0b:cb:57:29:5b:e3:76:24:fe:6f:3f:
                    44:6d:4d:0e:ff:35:fc:f0:91:1c:57:4c:30:47:da:
                    eb:6f:2d:28:4e:c5:ff:6b:92:e3:20:05:a4:64:f3:
                    0d:1f:53:5e:7a:92:99:2c:0e:41:70:c4:c3:07:64:
                    d8:47:1e:34:be:d1:c2:3f:ad:3a:8e:22:0b:18:b8:
                    6b:13:8a:c8:b5:e5:86:c4:1c:d8:19:fd:24:c9:4f:
                    b8:43:98:5e:3c:78:07:db:6b:84:1e:9a:04:63:40:
                    4d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:04:C1:0A:2C:66:33:A6:DC:46:C5:21:68:1C:EE:CD:B2:EC:E3:BB
            X509v3 Authority Key Identifier:
                keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:46:d5:75:00:47:06:6a:ce:30:53:ed:0e:b7:c8:83:f9:b9:
         40:88:32:2c:0d:77:42:8b:d6:0a:81:cd:10:0a:54:00:69:59:
         38:08:b1:87:de:94:9f:58:c1:6a:da:cf:59:e3:63:0f:1b:b5:
         84:e0:49:52:47:06:43:c6:e9:47:a1:31:2b:3e:eb:39:01:54:
         fb:9e:b9:72:97:4b:71:88:44:1f:d7:4a:2e:cd:6d:f6:6c:7a:
         76:5c:dc:ee:b4:73:78:00:e2:93:85:62:ed:03:55:8b:ee:7c:
         47:85:54:3c:7d:08:a6:e7:f3:b4:b1:14:50:46:6b:55:03:f4:
         fe:3f:30:1e:06:a3:f6:c3:82:e8:e2:35:17:64:91:97:90:0f:
         7f:2b:f2:92:ec:26:a1:48:b5:d0:40:ee:d8:28:9b:50:bf:3d:
         94:f2:fc:4f:b3:02:c5:4e:77:5b:c4:96:0f:58:51:8c:de:d0:
         f9:7a:8e:77:22:98:e3:76:ff:99:ff:a3:c9:11:37:56:15:ec:
         bb:2b:61:98:8e:48:75:78:d3:c9:64:1c:cf:59:3f:b7:60:ec:
         83:af:f2:83:fd:ed:0a:22:4b:32:0a:41:ea:10:a2:38:93:25:
         d5:1a:68:5d:db:5f:5f:90:9a:13:2e:de:85:7f:6a:94:8d:33:
         ec:af:84:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----