Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File:                     lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier:          cKwbgDRjDX9LzgsTneUB/cSHhhFsOitD6R7oSJ3Ktw8=
Subject key identifier:   73:E0:67:96:D8:4B:EA:B0:B1:AD:33:D9:F5:0B:72:9A:DB:A7:11:C9
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer:       /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial:       01962FAB832771A0A12C717455CD49D4671C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number:          14F9
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: 96CoHDqUFKRWLMKpuPNky2AThV0.roa (hash: 2dbkXGtx2Y2iGJ3uWXJRyOKWK4j+bBsW6iNp6F1vwRk=)
                          2: Zv6rhEtfx_jSCXc_S8UyXA0vo2U.roa (hash: upx9rJYDv3PHx1B1uURg+ybXETCTfjV8bsr8SvgJ3XM=)
                          3: biGYeNx8PlSGKHRmVucthKOSlnY.roa (hash: YxlSQax5Hky2oIIKAGXfmWIsjyjpaMRbBxvVdrI+BSI=)
                          4: g1Zk3nIRea2SYaHqoN92Ss1LCL8.roa (hash: aHQejC3hHy18rRg2jbGxWbnzx0KaJtZTncqKQ8jXn3M=)
                          5: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: 3vL7Ulrp0k2S8GFk2BCmYnTvXPwCJ9sjlhE5XNNv5oc=)
                          6: mmvuqSKrxCIOK5dTOpgllxAuYB8.roa (hash: cXrhSBrwqA5XppxSkBQnZWJRKIyKnPJRdZjf9M/iItg=)
                          7: rZuO-15UbHThyJRmeryxRpgLk2M.roa (hash: /ED0vNPFUaV7PRvXzqX2jHZ983s8HtxjtsJuRuMtCvI=)
                          8: ucC9i3XEX6RhZkWqb6NvZwx0--U.roa (hash: 2+uO/5ecRW47tQiINeeU4pOO33FM+U1i9JrXKMVUjI4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:83:27:71:a0:a1:2c:71:74:55:cd:49:d4:67:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=73e06796d84beab0b1ad33d9f50b729adba711c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:6a:ef:ca:b2:4b:2f:c8:c4:74:2e:ed:9a:
                    1d:73:43:fc:c4:c3:d8:9b:fd:38:51:c9:bb:c6:a7:
                    4c:83:62:2f:ca:06:63:f4:bd:5b:af:09:7a:d9:e7:
                    2e:6d:8d:de:f6:0c:83:07:1d:9e:37:b7:33:eb:8a:
                    fb:91:be:24:3e:3a:17:92:2b:44:6f:59:c1:5f:57:
                    57:1b:3e:0d:e0:da:77:13:98:dc:92:63:67:00:24:
                    d9:e0:32:3e:24:09:a1:0e:cd:7e:ee:0f:c8:89:96:
                    52:e4:04:5e:a7:42:e8:41:8a:5f:2c:08:5b:d2:92:
                    4d:1e:af:a9:ff:7b:bf:3b:cb:b3:8e:80:d7:9c:1d:
                    14:29:0d:c8:23:60:ab:8b:71:4b:be:e9:32:cd:be:
                    23:da:40:5a:cd:db:2b:6c:87:70:e5:65:60:48:35:
                    89:2e:51:d6:24:4e:11:ef:92:95:ba:cb:8c:41:9c:
                    93:dc:73:b1:7b:f1:05:0e:1e:51:e1:ab:b3:73:49:
                    c6:00:3c:4e:5e:bc:62:cf:06:b3:1d:8c:c3:54:57:
                    37:22:d4:17:dc:db:6b:ed:ee:59:1a:e4:4e:5d:fa:
                    18:d9:5c:b4:39:2f:a3:02:5e:ed:f5:41:f7:d7:a1:
                    e1:25:53:38:77:95:67:91:39:fb:49:0c:b3:c1:7d:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E0:67:96:D8:4B:EA:B0:B1:AD:33:D9:F5:0B:72:9A:DB:A7:11:C9
            X509v3 Authority Key Identifier:
                keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:85:a7:a8:31:40:af:2c:a1:75:53:bf:3a:42:ea:1b:7d:3b:
         5e:3f:49:b2:5b:c9:37:d2:08:81:6d:bc:39:2a:64:a4:b8:48:
         74:46:7b:59:8f:25:8e:cc:28:26:0b:a5:fb:c4:88:c7:41:55:
         f5:f4:da:9d:16:1e:ef:d4:e0:a0:33:52:c6:2c:d2:fb:96:a2:
         94:dd:43:66:fb:25:49:df:69:72:37:e2:c7:49:6b:97:b7:8d:
         8d:45:1d:ea:c7:a2:1c:e0:76:8d:a3:4b:0a:14:3a:c0:02:c6:
         1b:6b:f8:fc:26:54:a1:a9:a3:60:17:f8:d5:91:63:35:20:cf:
         f7:81:e7:cc:b7:5a:b6:de:02:2c:3b:e4:5a:51:d8:78:26:93:
         53:0b:ac:e7:69:46:37:e6:02:66:79:04:af:71:50:2d:1e:6e:
         ec:ae:ee:97:78:35:44:29:a8:9c:6e:be:19:21:97:6e:96:50:
         35:7b:1b:70:ef:4c:3f:f5:2c:33:63:cb:aa:e7:e9:7a:d6:b6:
         b4:b9:37:b9:96:57:42:85:d7:0d:a2:2b:cb:06:79:4a:5c:3c:
         9a:9e:d1:9b:5f:06:f1:53:25:0c:bf:03:e8:33:f7:ee:0e:3e:
         7f:33:45:b2:5f:03:c1:e5:c6:e5:86:ed:5b:f4:b7:cc:01:eb:
         75:e1:0d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----