Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File:                     V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier:          lXWWT7EK1zm5BBDSi1t7vUvMWj0Z7hnRWsDwjNCpdFY=
Subject key identifier:   A0:2E:1A:A7:9E:40:6E:47:02:AA:E8:59:A9:CC:51:1C:05:DB:DB:C1
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer:       /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial:       01962FAB9E065EC183599326B8D65C05E532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: NhjTM3dOPnMsLQ7ebQq_0aK61EU.roa (hash: pDZlPFnX9elEIPNsw2D7ajm33IBeKqhaDpBvumlLRQw=)
                          2: O9m05o_UDIKemPeCfI7Sc16B69Y.roa (hash: yXqGk5sjcirZhyM4OHBNZEpEXcAXLb0N0cHRwAFg1zo=)
                          3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: bh1mNWmp01+eId+SivDltkWoyRljYftHPd8ZcbSDFo0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9e:06:5e:c1:83:59:93:26:b8:d6:5c:05:e5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=a02e1aa79e406e4702aae859a9cc511c05dbdbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:7f:fe:a8:4e:9b:bd:64:3b:44:ff:60:b4:
                    c0:b8:e4:9a:12:68:d9:7d:22:61:6d:20:92:29:52:
                    d6:6d:3a:a5:d1:44:a9:32:b3:37:05:98:e4:c6:03:
                    59:e3:7a:55:06:35:ad:01:3a:7f:68:19:89:20:e9:
                    79:f7:80:d0:7c:6d:b6:c3:ca:e1:37:c7:f1:3e:1f:
                    4e:43:61:29:20:29:b8:38:f8:f6:48:b6:b6:54:15:
                    b6:da:6b:88:36:d8:83:af:49:da:37:73:bf:47:55:
                    a5:b2:33:17:28:d1:39:a1:29:5e:87:de:b9:14:96:
                    89:38:c6:81:7e:9a:6b:17:52:7d:1d:e5:24:8c:b8:
                    68:da:80:13:5b:fd:62:b4:3d:16:60:c2:96:66:7d:
                    4b:69:15:8c:5a:9d:27:4a:0e:00:a6:14:0a:6a:27:
                    70:87:19:47:47:dd:d3:b0:21:35:b9:93:e9:80:7b:
                    be:da:ff:f8:30:89:bf:68:19:4c:95:05:9e:e3:47:
                    15:41:5f:30:81:ff:19:f0:0c:a4:99:4b:0d:58:bb:
                    9d:61:82:6b:58:32:15:5c:28:4e:7f:7a:29:2d:ce:
                    d9:e4:10:a6:e1:b2:2e:0d:19:8b:c5:11:b1:0b:f1:
                    12:54:79:04:75:bf:15:73:9e:fb:68:00:26:02:03:
                    81:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2E:1A:A7:9E:40:6E:47:02:AA:E8:59:A9:CC:51:1C:05:DB:DB:C1
            X509v3 Authority Key Identifier:
                keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c9:33:fe:8d:65:69:1e:d1:1c:5b:f9:58:85:10:cf:a9:17:
         8e:a6:cd:e0:c8:9a:ff:7e:b2:52:2d:31:1d:3b:db:b9:51:d6:
         c2:dc:3a:24:2c:62:4f:30:a6:a1:64:5b:6f:7c:7e:56:da:02:
         01:79:ed:28:17:18:d9:be:02:b5:6f:0c:84:96:ab:dc:90:12:
         a5:de:19:05:83:ec:57:89:ef:ee:76:0c:c0:5e:92:34:ac:fd:
         5c:e3:ac:c5:df:cd:bc:54:5f:8a:c8:d2:3e:a9:d7:89:40:6d:
         81:d6:4f:cb:ca:a1:ff:d7:3e:09:8c:c3:29:d0:ac:e0:cf:25:
         aa:c2:ac:ce:c7:c1:3b:7c:e3:6e:f1:d9:88:7a:3b:97:ec:c4:
         77:7c:52:2d:46:03:a6:a5:cc:38:d0:12:c1:9c:2a:c9:8f:94:
         bb:ab:aa:16:a3:e8:14:05:3f:f3:80:f6:69:be:78:79:4a:53:
         d9:54:2f:ac:4d:b1:30:20:48:c2:99:cb:e9:f8:b2:cd:1b:2c:
         cd:de:fc:f6:ef:36:7a:16:25:89:95:e6:77:02:ec:59:1f:de:
         c7:07:ee:66:a1:48:ca:de:4b:3f:81:1d:33:76:c3:2b:95:4d:
         0b:d0:03:82:eb:91:a7:76:40:e6:85:45:3a:ab:12:c3:59:10:
         1a:1e:dd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----