Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File:                     Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier:          dYQL5ZmmUrSbUKpaLfwcV2IO57HSIwTyteiBRUfcBGc=
Subject key identifier:   95:F8:D9:D6:28:64:AB:5C:62:D0:9B:14:A8:25:B4:61:4E:BB:B9:9C
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer:       /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial:       01962E61C9BB9F4F47A2E2F8D624FEBF58AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: QNtVfkNdeG1v9DJyZBEjTrZNyBc.roa (hash: vaJZALNBXUbhDyRfKEtlNDFsggROpnhoQdeymesJ/Rw=)
                          2: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: rT5WBL5j4NJVi+rfLhbhEljugZ0hij5G0gT6ZXjwguc=)
                          3: _npBPU_qU8Q1a65hoUMHOBSefXQ.roa (hash: e8tqm7dxs7+LcvLZgwgmWSIzqUCH5DxQZJAY7CIpCfc=)
                          4: hd67_XZte5UJxG8Z9Bjjhd5C3aY.roa (hash: m5+Tgfa03sp40l5g/5GYZoTIL8T/7QDNBIaZ6t+2ge8=)
                          5: oSx_pT92ENoX9McIljhqchZm0Y8.roa (hash: jetN2hKvAM6TwnDzQ0oFFtD8VXzg/vhGoJq+vT3kY9E=)
                          6: ol0yF-2yJSflw_ZYhiJJY4fxMnU.roa (hash: uwqj4CFvKVNkmhKMglSF22ZAXWwfKXlh6tWeNXdxYbE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c9:bb:9f:4f:47:a2:e2:f8:d6:24:fe:bf:58:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=95f8d9d62864ab5c62d09b14a825b4614ebbb99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:b4:4e:1b:8d:87:b3:29:ad:79:4c:b0:7b:
                    4c:b3:9f:9d:84:85:71:5a:29:9a:6c:c7:55:3c:af:
                    0d:aa:17:54:70:e2:5c:9f:2f:79:61:05:5e:c9:d7:
                    90:4e:db:df:b1:b1:bd:34:3f:90:f6:bf:df:19:1a:
                    9f:83:5d:bc:26:9c:64:fb:93:60:c0:dc:33:c5:ad:
                    37:9e:35:e4:35:59:30:03:69:75:da:24:bd:0e:28:
                    e7:b7:b2:75:2a:81:6f:90:0a:0a:8c:ee:a4:10:02:
                    8c:05:2e:2a:d8:03:23:c0:80:41:e2:22:4d:8d:4a:
                    26:15:a3:3d:44:02:26:6b:39:78:a7:b9:69:f7:ad:
                    9f:81:79:c9:0b:4c:f2:3b:ac:96:db:2f:9f:58:ed:
                    40:a7:ed:c4:c9:f7:22:9a:9f:cf:22:db:24:cf:a5:
                    ea:f6:92:e6:fc:73:fe:16:67:14:ac:8a:f9:1d:47:
                    9f:5b:99:85:5b:f0:3c:7d:19:c4:f6:b3:20:8a:ed:
                    62:09:18:c8:e1:bb:56:f9:41:7b:8b:37:26:b2:09:
                    0b:82:23:a5:a3:6a:09:94:de:0e:04:18:e0:52:f8:
                    36:4c:a8:73:73:e3:73:21:91:19:b3:35:5f:d4:96:
                    c2:a2:9a:c4:64:ed:9b:fb:7f:a3:79:27:92:f4:8c:
                    53:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F8:D9:D6:28:64:AB:5C:62:D0:9B:14:A8:25:B4:61:4E:BB:B9:9C
            X509v3 Authority Key Identifier:
                keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:5f:b1:49:26:18:dc:c9:e0:d8:5d:d5:94:dc:e7:e9:ab:bb:
         b1:d8:46:27:3a:d1:78:5d:27:82:e6:88:10:49:ec:c1:7b:d2:
         93:cb:5c:25:d6:c7:73:a0:f0:63:a4:79:f4:78:32:dd:8d:a3:
         fd:91:d8:fc:46:95:0a:bb:a2:1d:6c:51:5a:aa:09:c4:c4:bb:
         8d:79:96:e2:79:e2:f4:69:c3:74:e7:78:ff:41:b7:ce:9e:2f:
         a2:1b:af:ba:6b:cc:6b:5b:98:1f:c4:18:a6:02:21:44:96:a0:
         0e:9f:46:0b:bf:14:44:77:85:3a:72:29:bd:49:ae:ec:95:00:
         fc:11:d5:65:01:33:36:77:e3:cf:95:ad:09:90:31:8d:d9:1f:
         fb:0e:3f:91:98:92:13:a5:20:a5:bd:be:50:1f:89:bd:be:a0:
         07:15:d6:fb:b5:1c:a9:ec:e6:f4:c8:61:0b:24:d7:6b:f6:11:
         fb:08:65:b1:34:09:07:d1:f4:c5:88:a8:08:9d:35:55:f8:9a:
         ea:b2:07:3f:21:f0:90:41:38:4c:b8:10:1c:25:d8:8e:b3:ba:
         71:f0:b0:d9:34:59:9c:db:cc:ab:b9:60:14:b0:d8:e1:92:e1:
         67:37:e8:3e:fd:a0:26:c3:31:30:a8:b7:8e:3d:56:9d:19:59:
         e1:24:4d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----