Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
File:                     _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json)
Hash identifier:          iwp+Urkk5lq/DDcCAW+f9LBoqNzzbGxIjeD3/W21bAo=
Subject key identifier:   57:73:20:75:A0:E4:A5:8B:07:B2:C6:7C:3A:A5:27:92:10:0E:0F:57
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Certificate issuer:       /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial:       01962E993ACA0440F4A5BAB61BD5DD37D329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
Manifest number:          141D
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: 9dm3RFT9BYoMAAVpyE60LHFzSlc.roa (hash: uwrhQ0q4VpiHZaTRgjsMBaRGiUAzHgpiv2VyGMcmfoA=)
                          2: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: R0vTBIhgZAQ04BgwtHkZT8CZaLrXl55yNn+CzTC30ts=)
                          3: ppSxmjoWI0llsw_Y8ciw6i9Iexo.roa (hash: ephpJ4ipHMwrJD7Bz3rKfNSaDOgLcj3aX7bFbiCir/4=)
                          4: wUsbt-HTaTgAWsY_K2ZwhZempLg.roa (hash: OXuJmL2+egILFuJsJVzo1F0QRoATbyDTCvgbpKqhXMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3a:ca:04:40:f4:a5:ba:b6:1b:d5:dd:37:d3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=57732075a0e4a58b07b2c67c3aa52792100e0f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:b7:84:8e:e4:dc:8d:ac:63:39:af:39:08:
                    35:63:ab:8c:de:d7:30:d1:5a:fb:79:b0:6d:ca:39:
                    fa:89:ed:c0:b3:d6:a9:6f:f3:9f:ea:28:1a:fc:cf:
                    0d:4d:39:98:b9:b2:04:36:eb:ee:cc:e2:16:a9:8e:
                    5e:36:b2:46:cb:52:b8:fa:d4:2c:46:24:b6:3a:1f:
                    67:cf:fe:c7:93:84:99:ff:c1:aa:41:f7:d8:58:b7:
                    50:e8:cb:bb:c2:55:c6:4d:32:f0:fc:3e:76:83:a5:
                    c2:e3:2b:41:f3:17:b8:42:4c:a8:a0:fe:d1:f3:c6:
                    73:cd:02:17:8d:72:4c:de:62:d2:cc:00:08:e4:3b:
                    86:48:d1:f9:b7:25:09:f9:40:92:48:64:ba:07:81:
                    c5:72:68:4f:d7:76:4c:ad:e4:e2:85:cb:6f:ab:84:
                    18:ba:e6:3c:4c:5b:fd:f4:99:46:38:a7:24:68:34:
                    62:8a:de:ad:31:80:6b:f2:07:37:ab:cd:0d:4d:34:
                    40:ef:7b:49:74:cc:d7:0e:15:c2:1a:e4:19:e4:ac:
                    c9:4d:4a:68:a5:b9:a0:21:df:cb:02:27:a5:e4:81:
                    ee:7d:f3:03:b3:31:2b:8a:00:6f:74:ee:13:0b:a0:
                    b6:98:69:cf:50:61:ee:20:cd:46:28:1b:a0:49:7f:
                    bb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:73:20:75:A0:E4:A5:8B:07:B2:C6:7C:3A:A5:27:92:10:0E:0F:57
            X509v3 Authority Key Identifier:
                keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bb:d4:8a:8e:ea:cf:a0:a1:55:82:b7:73:00:59:cf:b6:bb:
         c3:af:cf:3b:b9:fb:95:fd:e2:e8:ae:1c:9e:49:e7:50:9b:5b:
         99:5c:a6:81:8f:c4:2f:cb:aa:65:1e:8e:f0:c5:f8:a7:9e:b1:
         1e:9a:c7:0f:3b:6f:24:cc:0e:f3:7a:29:10:b7:54:1a:8c:48:
         cb:34:ff:26:56:8a:8a:f3:fd:81:a4:f0:5b:cb:98:63:38:40:
         5d:6e:78:85:0a:be:0b:8f:3b:19:42:38:6e:12:21:98:fb:bd:
         84:38:37:5e:1f:92:a2:29:31:87:e9:7d:82:6c:00:33:4b:2c:
         e2:d9:40:07:1a:c1:b0:00:35:ae:4f:e0:8d:90:42:9a:83:ea:
         f6:e8:7c:20:75:f2:26:32:6c:31:3f:f5:87:09:63:ed:8a:d8:
         69:29:9e:63:01:d6:9c:1e:a0:99:6e:71:46:5d:12:f5:9d:b9:
         76:0d:d4:d5:d4:75:ec:10:5c:a2:03:15:aa:39:c5:13:0d:9c:
         f4:26:6b:c0:0e:12:b9:74:e1:31:8f:c4:7b:05:82:e2:56:49:
         a5:7b:a7:0b:7e:06:74:a9:f8:19:59:d5:0d:f6:ca:83:5c:7e:
         39:ad:78:03:85:51:bd:77:88:8b:37:54:0f:30:11:20:05:35:
         e6:33:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----