Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File:                     14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier:          04IzvxwQhrXorHMOdNdP8TDe16/uAXtNm7ru5UDjgCE=
Subject key identifier:   F2:DC:85:E4:60:6F:1F:0F:58:41:E1:F3:0E:06:BE:57:47:72:1A:C5
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer:       /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial:       01962ECF9155953F86518CE1C74E6940D419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: kTsysKR07v69dxoUussPH85oHeQVuOKfLRNUidWvd44=)
                          2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=)
                          3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=)
                          4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:91:55:95:3f:86:51:8c:e1:c7:4e:69:40:d4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=f2dc85e4606f1f0f5841e1f30e06be5747721ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:e2:66:df:18:52:09:82:cd:a8:d5:6c:27:
                    b5:17:74:bd:a3:6a:4f:eb:d7:6b:a1:46:bf:d8:ae:
                    a4:cb:8d:50:68:0b:dd:e0:02:ec:ae:25:3b:9a:b6:
                    5d:8e:a8:f4:b1:83:28:96:95:d0:7b:05:f5:50:27:
                    f5:a6:18:ea:dd:5d:f8:bf:b3:1b:b9:57:3a:d6:83:
                    ad:c7:d3:b6:cf:f9:d7:8f:f1:cc:36:07:a8:39:19:
                    d2:0f:72:97:61:35:3c:3b:91:00:5b:05:f0:89:37:
                    03:44:88:57:d1:cb:44:db:9a:8f:c0:fd:3a:c0:32:
                    dc:94:55:eb:e3:5b:5b:15:18:02:ad:b8:24:57:46:
                    db:fd:cb:b8:7c:d7:ad:38:be:36:a4:4a:37:87:8f:
                    97:ab:3d:a7:93:cc:4b:ae:e1:a3:52:be:b6:52:72:
                    55:f5:c1:7c:08:cc:9c:f6:3d:3e:a5:4b:45:2d:cf:
                    3c:34:44:83:19:41:e1:71:af:c3:2a:28:fe:b0:3a:
                    0e:2e:0f:1c:d4:30:7b:97:47:2e:69:ac:26:21:3b:
                    46:dd:18:fe:8d:eb:4f:61:e4:09:84:2f:bd:27:0d:
                    c2:00:e8:2c:b7:5e:bd:3b:34:48:78:35:88:62:3b:
                    bb:60:9c:92:85:0f:35:db:b1:04:82:c1:a9:84:e1:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DC:85:E4:60:6F:1F:0F:58:41:E1:F3:0E:06:BE:57:47:72:1A:C5
            X509v3 Authority Key Identifier:
                keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:40:a0:e8:bf:0c:98:ab:63:3e:af:98:ae:a1:66:77:02:2f:
         df:ea:2e:31:f3:d1:e3:63:3d:ca:5c:2b:af:02:06:60:ff:5a:
         2c:46:63:51:0e:a1:3d:42:de:8c:f0:96:c1:fc:2f:e6:a6:31:
         e1:45:8b:f2:15:c6:38:2a:fe:e2:5b:0e:f0:22:6d:c9:98:16:
         e1:bd:15:da:1c:2c:33:1b:7a:a0:ef:ac:4c:5e:6f:7c:3d:7e:
         46:bd:e4:c8:09:4f:03:0f:ed:a3:66:7e:cb:62:8c:76:05:21:
         df:f9:a1:63:bd:66:b8:ff:6f:95:33:56:89:00:91:43:46:60:
         9f:90:36:4b:72:fc:64:21:37:9d:1f:ae:b2:8c:1d:33:11:fa:
         78:18:0e:11:93:d2:9c:f7:a6:5a:a0:b6:0a:6a:92:78:fe:19:
         83:b5:ee:b6:0c:49:ed:c0:97:8b:68:1c:c8:a0:9e:ab:a2:89:
         33:ea:da:d2:bb:00:72:e5:65:ca:60:15:f6:38:cb:31:b5:06:
         5b:b6:43:5a:44:83:bc:78:f7:6c:dd:12:60:49:f5:8a:be:ab:
         e9:52:51:4b:44:4b:a6:cd:0b:ea:ef:00:29:cf:74:84:1d:71:
         17:84:ad:c9:b0:78:6f:24:57:ad:47:79:6d:17:71:49:01:0a:
         c5:11:64:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----