Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
File:                     V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json)
Hash identifier:          90gziemLPXAHTkmFT/LjSGA8QAVUVpEQaShpfT/AEuM=
Subject key identifier:   3F:4C:AE:9A:0F:A2:3F:34:66:05:CB:06:FE:D8:77:C2:F6:70:2F:D9
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Certificate issuer:       /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial:       01962F071C09058BF13263578165BC4F4174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: P5zzix80023V+YIXuudp+BdiWyDAXed3e7RwiZwT8nM=)
                          2: zaXN6WztlQ7-D4a_TlJdnPjwyY0.roa (hash: n1tJ3tHrql4pUVvKhcwVaze60JN11w69tyolec1wuf4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1c:09:05:8b:f1:32:63:57:81:65:bc:4f:41:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=3f4cae9a0fa23f346605cb06fed877c2f6702fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:bb:ea:1a:29:5e:de:5f:cf:90:e4:ff:58:
                    64:c9:e5:ef:5c:60:28:10:f8:b2:a5:89:f3:72:a3:
                    a1:c2:64:8d:40:77:d6:94:98:85:31:31:91:2e:0e:
                    f8:d9:0f:ef:6c:ea:56:34:8b:de:77:22:f7:9b:f9:
                    01:5c:71:28:9f:3d:18:4a:c9:32:f5:67:7d:5f:23:
                    67:78:8b:60:d7:e7:d4:46:92:67:28:7b:a2:9c:24:
                    bf:fb:b1:c6:03:ae:c6:a6:86:eb:94:2b:b2:1e:08:
                    14:79:6c:4b:97:09:44:a8:e7:c5:6a:ec:7a:08:71:
                    bd:4b:6f:be:f9:85:9e:64:de:57:fb:c0:fe:93:a9:
                    3d:8e:e3:d4:b3:e2:3b:a6:2d:a5:51:37:c6:1c:19:
                    8f:39:45:14:e3:06:1f:2f:91:f6:2a:58:de:ba:19:
                    84:a2:0b:86:d7:f3:ce:3d:d7:5c:a7:28:56:b4:6b:
                    ec:b8:7d:10:3e:a0:ba:25:cf:b5:35:3b:27:89:78:
                    32:4c:3e:24:51:bb:b4:d4:aa:c6:0c:34:c1:34:76:
                    ad:7e:63:98:3d:83:63:c2:eb:8d:f2:4b:4b:dc:28:
                    15:43:05:54:d3:98:b7:43:18:2b:2a:87:d2:52:4a:
                    c8:95:ee:e6:29:2d:02:ed:35:e7:1f:09:5a:98:e8:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4C:AE:9A:0F:A2:3F:34:66:05:CB:06:FE:D8:77:C2:F6:70:2F:D9
            X509v3 Authority Key Identifier:
                keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ae:12:ba:36:d5:0a:39:40:7a:3a:09:d1:0e:03:b4:5e:d2:
         b9:54:24:4b:d7:c4:d1:68:94:43:3c:48:4a:9c:ea:28:17:cd:
         02:87:9f:46:d7:71:4e:94:c3:ee:c4:1d:c7:32:99:8a:74:d9:
         c8:c0:e8:d3:91:52:0f:f1:de:4a:0a:b8:4a:62:9d:41:fd:da:
         05:1b:3a:4e:09:98:05:6b:b9:92:60:af:47:0d:10:1d:2d:a8:
         86:d0:44:55:87:47:64:6e:d8:ff:72:7c:a7:5d:fe:dc:bb:a6:
         5d:fe:67:64:5e:e8:90:f7:b6:4c:3a:af:81:52:89:44:b0:ef:
         19:27:7c:65:17:5c:9b:c1:9a:e3:7b:84:ef:de:8a:aa:0e:d1:
         b1:95:ff:22:00:51:67:35:e9:7e:07:fc:ad:ee:7b:43:55:83:
         5d:1a:2c:43:6f:4c:b1:be:10:88:1a:b5:a5:f0:7c:4a:35:6c:
         99:c5:25:9c:9e:9f:d1:40:dc:4a:2d:96:ab:03:84:db:2a:8c:
         63:e6:15:64:1e:71:b3:5e:72:60:d9:3e:ee:1e:d2:13:e5:30:
         f4:8b:a6:20:2f:cc:8b:01:09:5d:a8:3b:34:f9:71:10:be:97:
         3e:cd:93:e0:ce:3d:df:9a:1c:23:f4:78:8f:c8:85:72:46:07:
         35:a5:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----