Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
File:                     Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json)
Hash identifier:          rWhc/y/LR82pG95bolT3ex59vRLU43MZssvwfZgkXFw=
Subject key identifier:   40:F5:13:BF:FC:CC:3C:4E:7D:28:BB:49:9B:7E:27:D1:6A:46:54:81
Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
Certificate issuer:       /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Certificate serial:       01962FAB78EAED1CFABF5B303F4DEA064ACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: KTWjCpwyB71eHCbI5t8oPlCgNRY.roa (hash: 0CVvsvuj4PTPAFmVUGXz45hRsC7kKX+zReEGH6JV1M4=)
                          2: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: y8AV6/YQl/busHDjK+qH022dTTZGyJHfnOkHnM9ijfA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:78:ea:ed:1c:fa:bf:5b:30:3f:4d:ea:06:4a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=40f513bffccc3c4e7d28bb499b7e27d16a465481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:c0:29:2b:9d:d3:a8:e9:75:e4:fa:cf:5e:
                    5b:31:a7:90:81:36:50:87:8c:08:06:6f:67:01:97:
                    87:28:59:dd:dc:66:7d:30:5a:64:17:4c:5e:d7:04:
                    d7:de:b5:b5:a3:a6:2c:e5:8b:ef:6d:f7:9e:3c:3a:
                    06:fb:77:43:5a:5b:78:0a:4e:0d:a0:b3:1a:bd:38:
                    b3:6f:7f:4a:a3:79:b2:00:a7:90:da:0e:bb:fa:7d:
                    1e:8f:d5:ce:54:38:1d:2e:76:2b:97:c8:11:54:76:
                    61:0a:1d:32:93:e1:0c:63:6a:b3:04:1a:2f:f8:99:
                    6c:da:4c:61:09:4c:8e:d1:cf:2c:f0:19:d4:3a:25:
                    f0:d4:82:ed:58:75:7e:46:89:06:d0:eb:0c:bd:2f:
                    85:b1:02:bd:60:ad:a3:68:ef:d9:03:96:99:e9:7a:
                    5c:3f:be:9b:46:fb:d3:d2:8b:91:9b:71:25:19:5e:
                    69:31:61:f6:3a:8c:7d:3e:9d:44:46:f1:ea:8c:bc:
                    30:86:f0:0a:ac:b2:f8:c6:54:2f:ab:34:1d:94:44:
                    11:3c:60:c7:6f:d2:16:24:ed:16:63:fe:4e:43:b4:
                    02:1f:9b:dd:f6:29:9d:b4:b7:b2:fc:51:5f:a4:d9:
                    89:f6:e7:4c:75:9c:c8:67:42:39:68:53:72:d9:4f:
                    8c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F5:13:BF:FC:CC:3C:4E:7D:28:BB:49:9B:7E:27:D1:6A:46:54:81
            X509v3 Authority Key Identifier:
                keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e4:14:be:36:46:f2:78:f8:37:af:8e:d5:40:10:85:1f:cf:
         8d:28:39:59:36:0c:f5:39:7b:1a:18:25:a7:59:ef:8b:89:7d:
         14:8d:f4:64:c1:09:d0:36:72:68:6f:8e:46:5c:36:36:08:ef:
         3a:4e:17:bb:aa:19:fc:c5:6f:d3:c0:3b:64:97:03:6f:eb:b9:
         6a:fd:cb:4c:83:c3:63:f1:e1:10:63:d4:ef:82:39:da:63:18:
         9f:65:56:f6:c9:a4:c1:e0:3c:d1:17:1e:d4:97:7c:73:1d:11:
         41:29:4f:9a:fa:17:4a:ca:41:f3:c8:09:c9:c2:e3:ca:66:33:
         3d:87:98:56:5a:c0:ee:d6:b4:66:bb:f4:01:b5:79:07:14:98:
         6f:fd:6d:0a:0c:0b:f2:82:8b:e9:d8:97:11:bc:a6:13:36:fd:
         3a:77:d5:de:ee:f4:1a:f0:f6:3e:ea:79:09:65:8f:bc:7c:e6:
         73:b7:36:10:d3:8e:75:04:e7:4b:cc:75:4f:dd:90:48:5f:25:
         eb:29:24:35:8e:2a:0e:c5:40:02:e9:b0:13:95:b4:82:fb:71:
         44:4a:63:86:12:cf:c2:2e:26:99:b2:9b:a4:5b:25:2c:92:ac:
         ce:ce:c5:f4:ed:5f:ee:0c:7f:d8:ee:64:79:30:4b:55:71:cb:
         9e:32:09:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----