Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File:                     cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier:          RFgVV3JjIs8zyTOtOO8c8KBHIALZUT00bPHCHcI9CaY=
Subject key identifier:   1A:64:B8:89:67:10:B4:DF:95:2E:3D:A9:A5:73:0E:46:F2:32:32:9A
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer:       /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial:       01962F74E2241C88C7386C7A54237A69633D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: SQhydS1Vyld3IgwAh8s8p2RiQDs.roa (hash: kTe34yKWId3G306BKOLdnp9X7okjGmRInSEoph+3YmU=)
                          2: bFkRdjlL0hn20ip0p52U66tWUIo.roa (hash: p8NzVok/1SLUDDbxbEZNBjooj07A1yaufDNHsefBkBc=)
                          3: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: Q26W88SKXtGvn3KNDDjf6RaCrFiYz5AU0T04dRzDQ+w=)
                          4: nIQMEgip1mNWJ7Ip1CpFsNhv-14.roa (hash: VrH3DSnZI21b6Kq/80BtfMStPDWRD226xCztuO3RSP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e2:24:1c:88:c7:38:6c:7a:54:23:7a:69:63:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=1a64b8896710b4df952e3da9a5730e46f232329a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:dd:ce:c3:2e:fd:12:a7:f8:e3:28:4d:f5:
                    ea:d2:ed:aa:d6:8e:6a:e6:de:db:7b:58:54:b1:6a:
                    4f:76:42:03:dc:31:d1:c9:b7:c1:e4:8d:8c:56:6d:
                    50:09:d8:35:61:8b:14:3c:d9:af:0f:26:b0:ff:f3:
                    1d:3d:c6:ec:28:00:88:5f:51:fe:8b:54:29:46:2e:
                    13:40:df:38:34:a7:bf:f8:42:9d:0b:7e:a3:ce:e5:
                    a5:f5:8a:a1:28:76:ec:5a:74:6d:0d:f8:52:c6:a2:
                    77:24:12:6b:84:7a:d3:b1:b8:a0:fb:3e:22:f7:6b:
                    cc:eb:e7:77:eb:b6:28:4e:87:79:e8:7b:3c:d9:9b:
                    81:b7:7b:72:30:53:d5:af:55:22:34:3e:57:29:56:
                    49:66:cd:c3:72:64:40:d9:97:a6:43:bf:af:b0:66:
                    80:71:be:2f:04:c3:b8:8a:cd:ec:35:5c:31:07:25:
                    0e:89:8c:6e:66:02:f0:da:2a:88:04:40:b4:6a:c1:
                    aa:bb:82:9c:c2:10:1e:9e:b6:e0:b9:4f:35:1f:ff:
                    40:62:d7:45:3f:45:66:3c:cd:9a:b1:bd:8c:ef:a4:
                    ba:b9:ad:4e:4e:99:28:35:06:ad:9e:3f:95:f7:69:
                    55:9d:94:d4:19:01:d4:fa:4d:4e:50:60:9f:43:7e:
                    85:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:64:B8:89:67:10:B4:DF:95:2E:3D:A9:A5:73:0E:46:F2:32:32:9A
            X509v3 Authority Key Identifier:
                keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:b8:41:fb:99:c4:8d:e0:a5:a9:17:12:76:c2:90:82:54:
         7c:d2:ec:6f:af:f9:d4:a2:8c:a1:3c:e5:cd:37:2c:63:79:ac:
         a8:0c:59:0b:2a:a5:c7:25:39:f4:58:bf:d8:13:d8:4c:f2:11:
         09:d7:9f:3f:2b:85:be:b7:85:f6:9f:85:59:34:ab:8d:49:67:
         94:51:d2:2d:82:b9:32:6e:c8:20:4e:7f:14:36:7a:02:24:25:
         30:30:b0:29:ba:f9:a8:b3:04:fc:67:dd:f9:f4:80:66:c9:80:
         5c:99:c9:45:c5:09:2d:09:54:06:4d:d1:c1:68:89:0d:c5:c5:
         6c:24:15:3f:cf:05:5f:24:08:45:8d:4c:ab:70:ea:22:e2:7a:
         95:0c:6c:64:b3:29:35:74:55:94:f8:d3:83:23:33:0e:b5:9b:
         2e:33:46:7f:30:9f:0e:66:08:52:7d:26:0a:54:9d:a6:8c:6d:
         e8:8d:5d:a2:3d:04:fc:e9:93:b2:fa:ba:20:27:ba:46:17:6f:
         a1:a9:6e:81:4b:32:70:3a:8a:ff:33:8b:2e:f3:d3:91:ee:46:
         e6:80:4a:df:16:6e:31:71:50:47:f3:5b:ef:39:92:40:48:6e:
         ea:a2:ff:05:4d:ed:2d:24:89:3f:c3:78:1b:32:1f:5f:7b:27:
         e0:8e:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----