Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
File:                     RjUoxUCm1XfC0cwabuoXEks5I4Y.mft (raw, json)
Hash identifier:          y01cuwJFC0Knj5HA9xfW78Uq0/3CxsohzAhRps5BDc8=
Subject key identifier:   97:49:7E:8B:C3:2E:6F:06:86:D6:19:9D:27:9A:3F:D2:65:08:C7:86
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Certificate issuer:       /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial:       01962F74A1716AF41C6159DEEA94721A3C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: CgYapJdE3lATpkmQavkm2MlhTAs.roa (hash: leTUYkK/UbPoz5ypT99weLoqPEKtLynpZc0EJfzHDjs=)
                          2: RjUoxUCm1XfC0cwabuoXEks5I4Y.crl (hash: bnOLvZFCjDdwIx8KjfvfrE32YsrP/85M/B+h5uHpNsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a1:71:6a:f4:1c:61:59:de:ea:94:72:1a:3c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=97497e8bc32e6f0686d6199d279a3fd26508c786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:cc:63:19:44:2a:a6:02:c8:e4:78:ae:a4:ad:
                    71:60:85:78:0c:10:7c:a7:c7:59:bf:91:c6:d4:e5:
                    ae:dd:60:c2:64:6e:22:f2:87:ed:62:a6:77:1e:f3:
                    58:52:5c:25:25:7f:55:e8:90:4d:97:7b:af:5d:f1:
                    ac:af:01:d1:df:3e:36:cb:ee:c1:b8:fd:15:a7:b4:
                    04:6f:b6:d5:4b:24:3d:20:76:75:f4:c4:f7:33:c4:
                    5d:9a:da:e3:bb:6b:95:5c:d0:e1:f3:5a:4c:dc:b5:
                    a2:51:3c:36:f4:6a:82:39:21:cc:b7:32:e6:51:75:
                    32:89:da:01:8b:48:31:f9:88:e2:73:9a:e1:eb:02:
                    d0:3a:9f:6c:b9:c6:f8:4a:a2:b9:06:62:89:d2:42:
                    2e:cb:8a:c2:60:9e:6a:f2:56:90:95:cb:1a:88:98:
                    d7:af:bc:60:04:43:b3:75:eb:03:bd:bc:bb:95:c6:
                    71:a7:21:19:48:3b:c8:e9:80:90:16:ac:b5:13:b3:
                    ac:a6:9b:04:cb:bc:d7:49:f1:67:bd:cf:7c:88:24:
                    e5:5c:c0:c9:6e:c2:e8:11:02:6e:b0:0a:58:ce:57:
                    53:a6:1d:cd:9a:91:a3:7b:3e:d2:28:34:0f:f1:b5:
                    9c:1e:b9:a6:1c:ca:ec:5a:be:12:1f:3f:c8:86:d4:
                    ad:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:49:7E:8B:C3:2E:6F:06:86:D6:19:9D:27:9A:3F:D2:65:08:C7:86
            X509v3 Authority Key Identifier:
                keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:71:ce:ef:55:d3:0b:a9:b0:22:0b:50:9a:05:b9:25:4d:22:
         7f:ee:3f:0e:61:e4:7e:c1:1c:e8:a1:a4:9b:29:b9:73:5c:c2:
         61:2f:f6:28:d8:d0:90:98:20:ed:e4:2b:43:69:11:16:01:de:
         1a:7b:26:02:8d:73:55:69:fb:57:78:cd:2f:36:fa:77:b7:87:
         9d:6e:a3:d9:59:bd:e7:de:52:17:68:5c:78:e1:eb:a8:97:b6:
         89:10:bf:fe:76:54:45:18:67:84:f3:3e:30:9e:36:10:8f:84:
         01:da:ea:0e:ad:6a:32:aa:f9:aa:6d:34:b3:4f:07:aa:aa:85:
         bb:b2:02:bc:42:ff:4f:74:ae:d2:2e:38:72:40:96:79:1f:56:
         41:18:ad:95:13:5c:e3:6a:a1:40:46:33:ae:d7:90:63:82:11:
         32:81:aa:6d:fa:3a:4d:25:07:76:e5:b4:79:0e:68:68:91:79:
         72:e4:a0:f9:b1:a0:0f:b0:50:88:c3:fd:26:d3:34:e6:2b:87:
         9f:54:c1:a9:fb:f2:3b:96:2a:a0:73:72:4d:9a:c6:83:80:23:
         f1:9f:64:c1:81:12:e3:9a:77:14:35:eb:a6:02:f1:34:11:26:
         40:88:e4:22:a7:2a:a1:59:57:b7:68:e1:83:42:cb:2b:2a:3e:
         7e:b9:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----