Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
File:                     mkM22h63IW4g7ASn8DHrShtjG7M.mft (raw, json)
Hash identifier:          MGPx9ribLUisBmkevSzuUDsNV+bl0ey9GhBmlHXTjCg=
Subject key identifier:   23:95:F7:18:59:D9:6C:DF:51:B4:9A:CF:88:1C:23:EF:B9:66:0F:A8
Authority key identifier: 9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
Certificate issuer:       /CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Certificate serial:       01962E98BD181A2B82014779A0E4E196A344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: 91oUMgCP74fspZxBBljzGiQPBlI.roa (hash: Ys2eA6I4wLf+Ld2RnHYB/UxEHZh1MaBORWqhbF+NkdI=)
                          2: mkM22h63IW4g7ASn8DHrShtjG7M.crl (hash: 3HxoiUKYg6/ujOo6D7k5kGd9o0rSoD9gCqUDd1DHd2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bd:18:1a:2b:82:01:47:79:a0:e4:e1:96:a3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=2395f71859d96cdf51b49acf881c23efb9660fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:f4:cb:90:bf:6f:f2:89:fa:17:81:95:87:
                    7b:bc:01:cd:54:80:8a:e7:a0:eb:fe:9a:01:08:e2:
                    62:21:04:5b:7d:3d:a3:4e:ea:fc:2c:34:71:63:5c:
                    95:d0:bd:08:ac:a1:46:62:b0:a7:68:c0:22:9d:9b:
                    19:50:70:7e:6d:31:a8:30:aa:75:6e:fb:f2:31:35:
                    98:00:f4:a7:83:49:44:e5:ed:2b:a5:42:a8:e9:83:
                    71:2a:65:d4:6d:ce:ef:32:09:aa:7e:a2:4e:ee:12:
                    72:cb:51:32:6c:c5:d3:79:4b:7e:5a:94:56:4c:4f:
                    d1:84:5e:bc:ad:b4:f1:ec:c2:4d:48:76:20:59:47:
                    ac:6c:75:1e:33:b6:50:fe:99:58:81:5d:ce:32:87:
                    ac:66:b1:18:e5:05:fd:1d:13:88:21:8e:12:5d:34:
                    5f:dd:fe:1e:ca:e0:d2:fc:1d:a5:63:15:f1:8c:08:
                    ad:28:85:b1:66:33:78:be:25:65:98:59:f9:72:0a:
                    be:71:0b:91:8f:f0:30:9c:70:b0:98:20:c4:74:03:
                    dc:e2:14:99:6d:5f:6e:39:3d:50:57:a4:15:fd:ae:
                    d5:dc:d3:28:e8:0a:92:d7:dc:6d:c0:a2:b5:56:43:
                    8f:f2:a9:70:f8:ef:1c:f9:b9:2c:2e:16:01:0b:1d:
                    68:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:95:F7:18:59:D9:6C:DF:51:B4:9A:CF:88:1C:23:EF:B9:66:0F:A8
            X509v3 Authority Key Identifier:
                keyid:9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e8:e8:b0:aa:01:ee:1a:5a:8a:05:9c:ad:c3:5d:4b:c3:45:
         f4:70:13:73:f0:75:41:ac:10:6a:38:40:61:77:0a:4b:8c:7d:
         39:06:25:8d:fa:9c:6e:34:58:fc:3c:df:77:eb:be:74:c9:57:
         d0:a6:13:5b:c5:52:cb:f1:6c:01:1d:df:d1:b0:c4:9f:0d:da:
         35:44:ea:57:2e:f0:4d:dd:01:28:f2:d7:d7:97:aa:a2:7c:e5:
         41:aa:11:5b:15:36:96:f3:0b:3f:94:09:ca:7d:53:28:d6:ec:
         67:db:90:0f:35:99:81:e2:ef:c5:a5:b1:6b:02:a2:e0:7e:1e:
         99:53:85:d4:1f:e5:61:98:af:bb:ee:ac:e6:70:be:e4:5e:b1:
         89:75:29:e5:87:06:72:18:5e:f6:56:5b:98:54:21:a5:c2:6f:
         20:32:34:5b:6e:43:3f:77:9d:b1:6b:3d:ca:a0:d0:c1:f5:b8:
         88:ec:75:97:5e:b2:cf:90:2e:b3:fb:62:f8:50:47:da:50:cb:
         41:1b:3a:5c:97:83:22:99:58:13:57:e9:5a:86:4e:d5:12:2f:
         b3:0d:fc:b5:76:f2:c5:d3:3b:c3:d3:b2:55:47:e8:86:0c:d2:
         0f:30:21:ad:f8:38:e4:50:da:7f:df:48:db:66:65:b4:10:2b:
         5a:bc:e1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----