Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
File:                     4MKGY5gUKldLpHsZfXF5G14jr3w.mft (raw, json)
Hash identifier:          H9CztQdBrS3tf/FUg6hkJqv1Qzi3XU8hXWNuQtg35h4=
Subject key identifier:   92:23:8E:2E:60:C9:C2:4F:A9:D2:B8:E3:16:64:74:12:70:96:36:C5
Authority key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
Certificate issuer:       /CN=e0c2866398142a574ba47b197d71791b5e23af7c
Certificate serial:       01962E9911A2693BC167183B741DC7E2DC93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: 4MKGY5gUKldLpHsZfXF5G14jr3w.crl (hash: oqe0RBJa9yj8063bQr1b7bCtAA1Zq3pvbPxliC15sh4=)
                          2: S8FepsEj5yTfhoJEKIV6MM1Ae2g.roa (hash: akrj8wyt2+2beT5os1QACCsWDw3JzGKZbUx/i8JS4K0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:11:a2:69:3b:c1:67:18:3b:74:1d:c7:e2:dc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c2866398142a574ba47b197d71791b5e23af7c
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=92238e2e60c9c24fa9d2b8e316647412709636c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:fd:d3:3d:ac:ca:3f:c8:4f:a5:37:25:46:
                    a7:54:14:65:92:9d:8a:4c:ae:ca:b5:2c:b2:9d:03:
                    03:1c:e9:50:c1:e3:f4:5b:96:75:11:d0:60:5d:67:
                    4e:46:a0:56:84:cc:2e:73:02:02:35:ce:51:bd:c5:
                    3f:6b:1f:f6:9f:b6:a9:b2:06:82:08:91:8d:ae:94:
                    a7:59:70:21:02:12:1c:28:c5:c0:89:84:ba:92:3b:
                    90:69:c1:53:6b:bc:d3:e0:09:e9:0d:ca:b9:3d:8c:
                    42:20:d1:7b:36:08:7e:61:ce:33:68:7a:28:25:d7:
                    2a:65:c4:74:b4:cb:93:90:5b:38:6b:e4:c7:70:80:
                    20:02:1e:32:a3:d1:67:bc:e7:90:b8:20:04:c2:38:
                    3e:a1:da:4b:fc:2a:b2:cd:ba:20:98:92:5c:dc:02:
                    3c:56:28:38:4e:70:f5:5c:38:1f:97:86:0c:00:2f:
                    eb:23:a0:84:74:db:47:b4:71:a6:4e:3d:ff:c1:b6:
                    bc:55:28:ba:66:33:d8:91:d9:04:2b:9b:68:58:74:
                    38:50:01:eb:03:6e:bf:6d:e7:4f:62:eb:d1:a8:aa:
                    d1:4b:ab:9f:65:f1:53:5a:b0:0f:c3:68:f7:54:92:
                    4f:f6:57:c1:a5:1b:2c:31:e9:40:3e:0f:f3:a2:bd:
                    72:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:23:8E:2E:60:C9:C2:4F:A9:D2:B8:E3:16:64:74:12:70:96:36:C5
            X509v3 Authority Key Identifier:
                keyid:E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a0:3f:fe:06:84:76:c5:d8:b0:b8:92:22:b9:19:26:56:5c:
         d9:53:e1:a1:80:6a:ed:75:dd:2d:20:9d:e1:6a:4b:55:67:29:
         e5:58:a0:7e:97:a6:8f:b8:74:47:c4:d3:2c:a3:37:ac:ce:ef:
         ff:b2:44:f9:5b:83:61:e6:96:1f:b5:30:fd:6a:5e:d4:24:4a:
         a3:c0:ec:8f:50:95:98:86:97:d8:85:a7:34:94:d5:90:40:82:
         cc:e0:d9:2d:21:b0:27:2d:ec:c8:ec:ad:4b:54:23:d9:56:18:
         99:ed:54:5b:a3:c4:ca:b9:bf:77:b8:a2:f6:57:5e:bb:aa:64:
         f3:9c:09:c3:5b:d5:f6:c2:42:11:7a:48:db:18:66:d0:8a:e7:
         5d:dc:73:f6:99:6c:c7:c7:11:2d:95:54:ee:1f:c2:94:9a:62:
         95:17:ca:65:49:72:ff:e4:1d:2c:4c:29:40:5d:23:57:8d:e2:
         ad:7e:44:a6:9b:9d:d5:45:c8:3e:65:6f:bc:12:46:d4:09:92:
         ff:46:2e:40:26:97:02:65:86:44:15:dc:43:3c:31:c8:fe:4a:
         39:56:27:bd:02:9c:e6:11:89:4b:21:32:10:dd:ce:34:e2:14:
         d0:7f:f7:12:60:75:90:e9:0e:0d:f7:ec:01:e1:f1:51:bb:f4:
         75:ab:1e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----