Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
File:                     MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json)
Hash identifier:          7cLCPNSH5s8oJAAvHdhfGT/A/wpHja/R07TiOv2ALBs=
Subject key identifier:   4A:45:77:95:EA:0B:5C:81:58:B9:87:4D:0A:80:6D:0B:E8:5B:43:6B
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Certificate issuer:       /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial:       01962DF438711FC775EC8051DD0D26F5672B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
Manifest number:          1506
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: 08x65D62xajmjuWxGOGX--5GFZ4.roa (hash: ku01TCluM3ObD1DEPpsLr/8jGhA1O5espf/zteTKSkk=)
                          2: 1-fxNLZQMykWE3SLBLsEKwibzn3o.roa (hash: U9t8UfOKITE6D0gBLc/Dtn9zr6EfXzJkxHJL0LBQvTo=)
                          3: FzyJ-A4chBzu8lQqhpLh4dfVe9s.roa (hash: kikBFtCVFZZA5yK1FlsJJ2Y15ol/mIm/K3+f2pwmt3Q=)
                          4: JRfXlKgZScSlnAP9_s4mWUCHMzI.roa (hash: Yofq9QzaUqxyhMLfnSLcXXtmS3vz0xWVOjl3kItQ1gM=)
                          5: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: jDRmCJma5PHyCXs4ynWmApj19B3XaX90GQIHJlK+a2U=)
                          6: OOWsOYaSoAqJ3HO-R5wNTcf_irg.roa (hash: FHVKtTLfD9KJ5KSxDig6awJ13wpTnxgLs+NcZ0Q//g4=)
                          7: UI2cnhatNs5ZeysmslxEpLBSTew.roa (hash: axZPCQgEFKrONNIyjteNC+Y0RYmX6khaCS5yj1K7lFE=)
                          8: XIqtTjvuJ5glY39EaIP6KmILhoo.roa (hash: oyK+JoJZ3ZJXn7BAWGpujgyfoF5xI3Ds91YiwWdI2PE=)
                          9: b_MAVuI29oBciIh7vGGq0NJVEzc.roa (hash: hDxp3S5bhbbLqI6OACypq5MMFaQlI+7lCsYe3tJ2F9c=)
                          10: dOfaSe3fIYIhGR1xcwXjfUk3OeI.roa (hash: uz8UfxMH6M1zEnn7EFrd8TVCQANQpajV/Ux4YkN59Jk=)
                          11: ivBw7pb2lERE4O4pT70f-IjK-H8.roa (hash: 9+du4uvg6+sqYU99LVsbimMbdhpdO5ppSVPQO3/HDIY=)
                          12: mew8-eeZMjfWFrph1bkqTGd0o2o.roa (hash: ZTROpY1xzLgXXfO1lrdKWiIbYEdEw9dXrylpkOT7OWA=)
                          13: o56KW7qmKI89RBX7wwhJRJnWzxA.roa (hash: TSisfXvRUilLYjnEFcF1fY33OVEAWdRk4KyWKFaY7ZA=)
                          14: vaL0J_r43BzBTm5r8Bo75j0pTF8.roa (hash: 75FzmVXUE4MjGcr9LiSgeGxgqkVwVmsZ6mF1xXYO59Y=)
                          15: wjhfspu_G4HGizYS_OBNLClt3cU.roa (hash: bxfIFEAR3HaNo4msf1HR2PgJlfyMNGagLyOKrjbfFag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:38:71:1f:c7:75:ec:80:51:dd:0d:26:f5:67:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=4a457795ea0b5c8158b9874d0a806d0be85b436b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:dc:ac:13:1f:1b:5d:48:64:56:1b:b2:68:
                    08:cf:75:87:ec:e7:99:13:5e:8c:f0:c7:d6:89:11:
                    bc:61:0b:67:a4:55:a1:e1:a3:bb:5a:3b:b4:89:cf:
                    27:f0:c3:90:4d:5c:85:f7:e1:f6:de:0e:73:28:66:
                    77:92:0d:7b:07:f3:85:08:59:e3:89:9d:41:09:fd:
                    80:a9:aa:62:b0:95:54:e1:a7:12:6a:ee:c1:4f:a1:
                    8c:b6:a2:0f:fb:02:86:81:89:9f:eb:e3:02:31:fe:
                    e5:32:ce:62:1d:ec:26:00:ff:db:2f:51:d1:19:9b:
                    50:a9:fd:eb:3a:41:ea:72:32:30:43:53:4b:63:91:
                    c6:d5:c0:6a:3c:70:0c:79:1c:68:40:96:4e:6d:21:
                    63:0b:2a:ce:55:92:54:42:7e:9f:6c:88:44:c3:6a:
                    cf:79:b3:a9:45:1b:6d:31:92:0e:60:78:83:d4:59:
                    3a:9f:ca:01:e6:a6:4a:32:68:14:0d:e0:95:38:f3:
                    5d:cc:0f:43:85:31:e3:72:ed:77:2c:f9:c8:58:f5:
                    a8:54:9e:19:66:dc:bd:79:0a:07:c7:d5:3e:86:b7:
                    c4:ee:ee:bf:f3:46:61:4b:83:8b:7e:fa:0f:c1:a4:
                    70:4d:d3:b8:be:b9:4b:da:a6:50:79:60:30:ee:c1:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:45:77:95:EA:0B:5C:81:58:B9:87:4D:0A:80:6D:0B:E8:5B:43:6B
            X509v3 Authority Key Identifier:
                keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:1b:04:8b:de:6c:73:46:ca:e9:a1:97:49:56:f8:1f:09:24:
         ef:3a:ca:b4:06:02:08:55:cf:06:30:ea:ac:cb:0c:b4:7c:f2:
         a3:bd:35:dd:4e:91:cf:7f:56:95:5a:3b:50:f0:93:b7:87:80:
         cd:22:14:3c:c4:1b:c6:79:05:44:22:39:f8:3f:ae:24:48:fb:
         aa:89:df:fa:51:f3:62:3e:ed:c4:32:bc:24:8b:93:84:63:4b:
         e4:ad:b9:99:b2:90:e0:7c:75:16:aa:48:bd:37:7e:14:3e:11:
         3b:7f:ef:48:65:25:4f:32:ff:75:18:b2:08:93:32:09:84:03:
         1a:0b:79:8e:07:32:ce:ec:88:c3:26:f3:f8:4e:dd:4e:99:be:
         28:71:27:80:26:27:eb:bd:cb:09:03:da:15:ac:19:cf:e1:98:
         e9:56:ae:03:91:6b:d0:a5:64:9b:c0:34:4a:c2:c3:a0:a6:b9:
         bb:b8:88:bd:dc:48:f5:05:8b:7a:54:46:3f:3b:8c:91:62:68:
         a2:4e:0a:15:92:85:28:e9:fc:62:4e:fe:11:72:c3:fb:9b:78:
         02:79:49:ff:79:a6:13:ea:b8:7c:6a:f0:04:72:d1:ee:2a:4a:
         b8:0d:69:fd:cf:26:d9:df:6c:19:81:5a:0c:6a:d4:53:02:6d:
         eb:cc:ac:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----