Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File:                     V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier:          rRQNozhTy2C4IP9WKrz5wa8ooUsULbWfUi25XEWU6+k=
Subject key identifier:   44:98:9B:5B:7D:AA:BA:37:8D:AC:0F:67:EC:4E:F3:E5:24:83:9D:E5
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer:       /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial:       01962F742B6D2B22FD3BA11D134EE35C6029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number:          0E14
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: GyhAtf15yZqMprvOSAG-mSzNZTU.roa (hash: jfVjDUAXNOWRUx2duW7NqVNPhOHvwJFkEOJDlRjLf1c=)
                          2: Jn9LNrC4wIy3yIlbSkthFN9Albs.roa (hash: 6lIOMorBJKMVKOZBPqKcGfElc6xi+Wc/c9B3Sn6wFrA=)
                          3: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: LHGAhpljw60gmr1IkYXVMoGzmhn8zT34Buw9Btk7mh8=)
                          4: Y2_bnui3NBLO8jQirmiUuAzGyRw.roa (hash: Sj4Gp5iophRPrZcWhz+iS2BZX0tuH2ZNqq3e2/zFjig=)
                          5: ntrt1qLEp7JFw_l17Dbev4liPcY.roa (hash: 5lVCUBQu1df/S1FQOKl/MyF/XxoO3ZxscsaY8Q1dPLk=)
                          6: vfMCWDXHqUhfE9pCWjy3UIK3sYE.roa (hash: cZ4cjZLkxHd/pGP9SjokJ4j+E/I+MNHdDpithj4CeCo=)
                          7: zaxDDa76odJm9ePdrwAGeOqRpTk.roa (hash: LPUFtmetdpPIYathbUV2AsqucuRhOg7pKFky/Ou4leU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2b:6d:2b:22:fd:3b:a1:1d:13:4e:e3:5c:60:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=44989b5b7daaba378dac0f67ec4ef3e524839de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:68:f3:62:f6:de:d8:fc:9c:2d:9e:e2:18:
                    f2:24:4b:3b:ef:5c:b6:3f:4e:51:df:c6:e3:16:cd:
                    9e:5f:f0:a1:19:7c:1f:4c:1f:ba:d6:4c:94:93:85:
                    c9:46:6b:49:0b:ae:14:83:5a:ce:d4:28:2f:87:c0:
                    88:3a:c8:a5:45:18:70:11:6c:f4:d5:b8:a8:86:1b:
                    de:a0:5d:34:82:91:26:49:15:13:86:bd:8c:8c:89:
                    14:04:c3:15:5e:0c:04:ad:45:a5:af:5f:74:97:e1:
                    79:f5:96:79:58:1b:05:8e:bb:f8:b1:6d:a8:29:e7:
                    ef:79:42:0d:ee:1b:16:f8:f4:b4:75:a7:e6:23:93:
                    b0:19:20:9d:b0:01:fc:0f:57:ce:bd:9d:38:0f:1d:
                    9e:b5:01:49:99:fc:5a:44:8a:72:a9:6f:07:71:09:
                    fa:e9:d1:ce:b9:4f:70:99:ee:25:87:29:ad:ef:21:
                    76:87:1a:ce:9b:25:52:59:e7:ad:5a:f5:e6:53:32:
                    db:dd:cf:95:47:8b:24:22:3c:1e:a3:79:c0:e0:4a:
                    65:73:9b:77:be:e8:1d:58:a2:76:15:f5:19:0f:34:
                    ab:25:6f:0a:80:86:70:93:b6:db:17:e4:23:da:d9:
                    04:67:7c:ee:f9:63:66:8e:67:26:d1:b9:73:3a:8f:
                    8b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:98:9B:5B:7D:AA:BA:37:8D:AC:0F:67:EC:4E:F3:E5:24:83:9D:E5
            X509v3 Authority Key Identifier:
                keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0b:63:ef:9f:8b:59:8f:8c:d6:0e:9d:25:4d:d6:71:85:a6:
         25:c1:a7:45:1d:e2:f4:2a:81:c8:1d:f8:06:d7:5a:ec:45:1b:
         38:5c:d2:75:43:a8:90:0b:67:5a:d2:0c:23:70:d9:6f:86:fb:
         ef:77:ce:52:31:3e:e7:7b:af:28:05:e0:ce:83:7d:17:a5:eb:
         0b:a4:95:1c:84:68:10:69:3e:93:99:2e:61:91:51:c2:1c:c1:
         11:c8:f0:a0:94:82:24:f8:e1:22:3f:51:8e:53:70:f0:e7:d9:
         49:6b:56:90:b2:8c:d2:9a:7e:de:8e:86:cc:86:b1:01:17:13:
         33:a5:8d:e6:a1:38:67:60:e8:75:1c:17:0d:e1:74:91:d7:23:
         18:b1:0e:8c:5b:5d:86:68:0e:cc:94:3e:a2:01:cd:10:06:e9:
         c8:74:0e:be:fe:61:b4:ad:f4:3b:3b:dc:d0:2f:14:c2:8e:59:
         37:ad:46:3a:46:f4:8e:5d:d3:6d:01:a6:97:34:b0:d5:54:ff:
         2e:ec:a2:c7:0d:5b:5a:62:3b:55:65:28:ba:57:05:83:14:bf:
         63:fa:84:61:0e:bd:de:8f:83:5b:d6:f1:7d:50:96:14:7d:41:
         06:47:48:52:57:90:1a:1c:06:1c:9b:f5:a3:0f:50:9c:b1:f3:
         0e:a9:31:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----