Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File:                     RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier:          wKVVjSBqJl4KZRYn/V9Ia5ic4BdYuGn1VNIUUnRFmzU=
Subject key identifier:   30:56:EC:D9:F2:C5:9E:AD:BF:78:AC:55:F4:60:E7:35:07:26:B0:96
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer:       /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial:       01962ECF9E3137EBBF7E769ECAEFAF21DE8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: 1-WaRefIqk9cTwAge18iSThry2Bk.roa (hash: u2PbRYzxV5DP0Zvmm7MZK3eMuZerbQoMidmwaTRf9M0=)
                          2: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: jJLl/Wx8b+PRef2XGKFHkJM+xdESQviOjpn57zFkKU0=)
                          3: pPhTVlJLb86soqyySL-WWM5nGpo.roa (hash: soRRZ5HHiA/a5SCZK0C4OU2YSKWcycTGQ/q5n+2Dcw8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9e:31:37:eb:bf:7e:76:9e:ca:ef:af:21:de:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=3056ecd9f2c59eadbf78ac55f460e7350726b096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:fe:e2:85:b9:cf:47:75:ba:8f:58:e5:20:
                    e4:dd:e7:7c:e3:19:bd:11:b6:72:23:a5:8d:ce:66:
                    1d:7a:4d:e3:bd:54:8d:f4:fd:07:8b:0e:0c:9d:e6:
                    20:a0:cf:6b:7c:93:a1:35:13:ab:7a:6a:38:2c:50:
                    2b:d5:93:20:42:e3:2d:66:b2:b3:23:1b:68:2a:fd:
                    04:0e:4f:ca:99:e7:f2:4b:b9:4b:59:77:5d:b6:47:
                    91:9e:c3:47:bb:ad:e8:ed:4f:ed:c9:06:e6:28:d9:
                    c5:81:b5:3f:0f:6d:ab:51:88:60:8b:f9:ec:90:a6:
                    b8:a8:d2:61:aa:b3:7c:c6:ad:6b:27:99:ba:9c:ba:
                    27:0c:06:57:1e:18:7e:6c:38:6e:d3:76:5f:b3:d3:
                    cb:79:fb:ea:a7:4a:99:84:93:77:54:75:41:a8:6e:
                    ef:d3:3a:c4:84:99:1c:b6:c7:77:74:a6:18:fc:04:
                    b4:26:08:b9:2f:05:bf:2c:4f:4b:5e:d7:ad:60:3d:
                    af:52:5c:19:80:89:cc:83:3f:ed:e0:44:7c:ae:a3:
                    ac:d5:25:b3:5f:50:92:67:af:65:1a:4d:69:a7:02:
                    1a:c6:63:1f:51:3e:05:cc:10:8a:2a:29:2c:88:c1:
                    48:a1:e7:ec:e0:5d:1e:0e:b9:4e:30:89:d7:6f:05:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:56:EC:D9:F2:C5:9E:AD:BF:78:AC:55:F4:60:E7:35:07:26:B0:96
            X509v3 Authority Key Identifier:
                keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:98:53:ad:87:0c:a7:ba:0f:f9:37:a4:68:dd:ec:b0:b5:09:
         d9:b0:80:4b:88:4d:9c:72:18:09:b5:21:48:a4:96:d9:bf:16:
         d5:80:87:c6:65:10:6f:a0:40:d5:00:4c:a1:32:1d:5e:b2:c3:
         a3:79:67:a8:bf:1f:5d:6a:46:c2:64:14:fa:44:e9:40:68:9d:
         ac:c7:8e:0b:9b:16:4b:40:f1:89:c4:d0:16:7f:73:8c:c6:50:
         4a:ec:5a:d8:4a:a4:83:b6:1e:68:e6:c0:1a:40:6f:d0:c7:97:
         6a:9b:db:02:cc:96:d3:74:9d:5c:bb:73:b4:25:1d:82:0c:d5:
         0f:dc:c3:33:20:1b:07:84:27:f9:5f:5e:d5:36:02:f2:5b:0a:
         d9:ce:64:56:88:de:18:a9:43:c2:59:89:8a:f4:9e:13:a9:90:
         f6:58:9c:52:95:c2:66:3d:11:49:1e:f4:a1:dc:29:fe:59:4b:
         9e:6f:44:15:c9:53:7e:c1:53:f0:b1:7b:28:01:bd:2b:20:c9:
         d2:9c:27:27:f1:71:80:6f:4f:3b:15:5d:71:f9:1f:a8:1c:15:
         23:3d:f9:1e:0b:53:f6:a0:26:dc:f3:18:9c:5e:91:68:4d:f8:
         74:0e:c6:7d:22:6a:50:7f:b3:55:ae:fe:21:f4:fe:d2:3f:82:
         c3:f5:6c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----