Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          qhnycHKoc1Xq3P4jMhwD2idduRbW3p6NQV65HAx7xE0=
Subject key identifier:   49:27:0C:0C:FF:E6:01:08:DB:7C:17:0A:47:32:58:17:B4:99:6B:E9
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       01962F744B3AF6093FFA2F29A77D5FA2D571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: 1TalR7Afli-hXkmIqf9328FI3Fk.roa (hash: CZU1GRNs7a/ZLVQIh1+1KE9CTeVWWUwOxmLShJ7hoBQ=)
                          2: 1rOZrsi2VH15nsMPM1hcZLORVXs.roa (hash: iSIJhNQhJCt3984hIwFcXBjIv6TT10z6x01UJ9CZjZw=)
                          3: SF3VU5SVWzi0_2Xar-2YOdcK-gc.roa (hash: AuIY2iLIo2qAdBJbw78kdAZId1WsZdROE7KvRyYurC8=)
                          4: m0Rt5yA8GGtQzeIweywdCKZ3vPk.roa (hash: 1a8qCx4A/hh4MAoCIXUYRzaVBoJjd0SdneNnyPupOv8=)
                          5: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: hleJ8hE+9GqZC8QB4eQwYEZd1pQIaz2D8srCEJ2IBdM=)
                          6: qEuf4JoFbNqWgmvGk1XHQxSlk4w.roa (hash: FprxjmSrJVIdrJmDZ/hiSKkUv6KnjJr3J8MVoY0gd6M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4b:3a:f6:09:3f:fa:2f:29:a7:7d:5f:a2:d5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=49270c0cffe60108db7c170a47325817b4996be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a4:e1:7e:c6:ca:ab:61:f7:cf:0c:16:d7:36:
                    24:73:c3:e8:a2:35:4e:02:74:df:7a:c2:9d:04:84:
                    73:c3:77:97:84:4f:1e:27:f2:3c:2a:9f:9b:d5:cc:
                    cc:42:f5:88:b7:69:18:20:92:1e:4c:68:ca:8d:69:
                    6f:2a:ef:98:05:ef:62:2e:54:6f:2a:d8:a1:9c:43:
                    1f:c8:fa:fa:8f:25:6a:d7:35:5a:b3:2f:8d:e6:6d:
                    28:4d:2e:22:5f:fc:b6:35:88:40:d4:36:48:a1:4b:
                    83:f7:14:4b:ae:31:48:28:43:db:5d:25:62:1e:d1:
                    58:dd:17:6f:11:fc:06:37:21:4c:f9:8e:9d:9f:ce:
                    74:e3:84:e9:38:01:12:95:04:16:0e:e7:75:05:f5:
                    bb:ab:5a:19:44:97:02:1d:b7:a4:b1:42:1d:18:78:
                    bd:62:0b:42:1b:2a:f7:b8:50:94:1d:8d:37:01:e7:
                    9b:b6:ed:4c:de:4a:78:6e:0a:76:fb:4d:b0:6d:bb:
                    ee:73:0d:88:0f:19:fe:a4:fc:f4:6a:ad:dd:71:ac:
                    94:f2:88:c8:c1:e9:f1:55:35:f5:43:07:96:6b:2e:
                    49:5d:f9:25:25:e8:9c:4d:75:44:0e:24:9d:8a:12:
                    62:94:14:a9:b4:3b:8f:c7:94:96:d1:c3:84:c2:c1:
                    33:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:27:0C:0C:FF:E6:01:08:DB:7C:17:0A:47:32:58:17:B4:99:6B:E9
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0d:4e:a3:d8:4e:e6:32:2f:9e:48:87:f7:3b:fe:98:c4:b1:
         ad:58:01:45:33:99:08:3f:27:da:8d:4e:53:aa:1b:0d:0b:0c:
         2b:cf:8a:0c:4d:11:ac:86:af:7f:b9:ee:b8:b6:04:4d:c2:6e:
         55:55:14:e5:91:67:31:d9:2f:94:17:8e:88:0f:31:43:6e:9c:
         4b:18:04:01:c8:60:c0:f6:47:8d:e6:56:56:b2:3c:bd:34:9f:
         f9:e9:e5:5b:0e:7c:6e:27:f7:91:21:0a:79:22:57:f3:8d:25:
         e7:8e:ee:15:8a:78:80:35:6c:fe:0c:1a:bf:ae:f1:23:7d:6d:
         d2:5b:ad:17:34:ff:49:56:75:6d:1f:67:46:51:5b:c8:d0:dd:
         58:74:01:de:9d:a0:f0:b3:b5:8b:1e:e7:8f:2c:21:c8:fc:8b:
         a4:75:d6:5a:a1:0e:a1:fd:d4:c4:b4:e2:e5:fd:e1:72:16:78:
         f2:d0:8d:c7:95:f0:7c:f6:ab:ec:f4:e6:92:c8:05:e2:51:c8:
         66:7c:39:f6:1c:2b:26:fe:17:06:d2:0a:b0:40:1b:5e:dc:35:
         56:78:23:b1:a0:4c:82:70:c0:4a:67:a5:f1:8e:ed:ef:28:85:
         f7:ec:e3:e9:fb:63:b4:95:6c:73:1a:81:5d:c0:99:19:3c:df:
         50:e9:14:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----