Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File:                     RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier:          s5rkYNDlc1Er2pn1hgnwDKhNE8plZRT2ykcBAzOYNZQ=
Subject key identifier:   42:D6:52:41:7C:F7:73:4F:1D:C6:E7:04:66:20:78:B8:5C:75:B3:18
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer:       /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial:       01962E2B3F4A486F59C6E6FBC3F797814F30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: HUIjR9WK2Lr5ogt7lVoiyA1Q06s.roa (hash: PMZpn3mSe7dzqUCZsgF/pY1r/L52E+g3ibBHFvHVhL0=)
                          2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: 8gY5jPzUaJcYU7vGMr9HhF9uxlAqMFVlkgmAKm2Sexs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3f:4a:48:6f:59:c6:e6:fb:c3:f7:97:81:4f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=42d652417cf7734f1dc6e704662078b85c75b318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:33:e2:35:b3:7d:0e:2b:56:0a:03:cd:72:
                    42:aa:87:b1:fb:ac:44:7b:00:c4:b3:e0:44:a3:b6:
                    09:c1:a6:39:a5:13:8e:60:d7:94:db:0e:ae:08:7f:
                    56:b6:b1:fd:80:98:63:fa:cc:bd:6b:7e:04:1e:bf:
                    ad:e0:07:10:e1:96:d2:04:d2:84:11:ec:8d:b3:06:
                    16:33:a8:ca:af:37:ce:0e:f7:19:56:00:f1:88:52:
                    56:40:05:97:24:67:dc:94:07:dc:89:24:5e:ad:33:
                    6b:6d:8f:71:9f:c2:3c:13:aa:d5:4f:8b:e7:af:2a:
                    47:22:ff:89:5e:b4:f9:c1:19:85:41:39:bd:f3:bc:
                    fb:36:df:8e:f0:71:fa:4c:40:a3:45:0f:0e:1a:3d:
                    0a:a5:f5:75:9c:2c:a1:76:9c:26:79:82:47:68:af:
                    48:2e:b9:38:e4:77:04:82:66:80:2c:8b:ca:00:3c:
                    83:4c:97:7b:69:f0:6e:69:16:ea:7b:dd:f5:da:2e:
                    89:49:77:9b:11:a5:13:23:64:80:83:bb:cc:5f:7f:
                    47:67:17:f5:39:5f:5f:e3:86:14:4a:76:fc:c1:32:
                    64:97:a2:31:0a:3c:6b:18:0b:c6:6d:95:74:da:81:
                    93:d7:2d:40:3a:65:bb:bf:d3:a6:da:84:55:52:a3:
                    6e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D6:52:41:7C:F7:73:4F:1D:C6:E7:04:66:20:78:B8:5C:75:B3:18
            X509v3 Authority Key Identifier:
                keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:01:90:e4:fc:91:11:2c:a8:13:2d:ef:6e:16:8b:a9:15:2c:
         8b:4e:2c:ef:14:05:ca:09:5e:48:47:52:9f:de:98:0a:24:82:
         f8:80:d7:d4:ef:66:e4:49:62:df:60:e4:9b:61:47:4d:6c:13:
         d5:ef:6b:31:c1:26:3e:01:29:1d:b0:05:72:98:e0:09:30:ed:
         d8:af:e1:29:a8:09:7f:39:b5:5c:9c:0b:b8:34:7f:60:fb:15:
         48:07:ec:0d:13:e2:c6:b2:08:70:17:89:ee:ea:7f:13:4f:08:
         d5:f4:eb:5e:5e:82:8b:05:9d:9f:78:06:17:b9:29:48:50:44:
         2c:26:90:4f:35:42:89:ec:f2:20:9e:47:6e:4c:6a:ff:a3:3e:
         99:37:27:07:ce:eb:97:40:cf:ee:4b:c5:e8:71:7a:fe:7b:d9:
         34:3a:0e:92:41:ff:f4:63:1b:b7:f2:95:73:58:a0:7f:e0:ca:
         11:52:3a:55:15:a2:00:a6:9b:a8:c6:5a:82:ab:1e:52:79:68:
         9d:ec:86:30:33:88:d7:19:7a:69:88:51:a1:64:bc:6a:8a:5d:
         80:cd:14:71:b9:b9:fc:03:8d:38:62:88:3e:13:aa:39:dc:1d:
         42:4a:8c:56:a3:50:92:22:73:ae:72:e1:e1:5f:06:1c:22:a3:
         7a:2f:9d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----