Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File:                     lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier:          2MnmmgAYbYaGlBB8BsBy3DZXhmoi0V4kbu+KR0EnQMo=
Subject key identifier:   DA:C4:10:A7:69:81:BE:8A:A2:2B:24:05:ED:A1:0C:62:7D:59:24:84
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer:       /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial:       01962E2AF41A63BF874EB5F2EB322B2371D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: 6M8HqKSI22ar6eaAcnn8ev1P9AQ.roa (hash: nVlGdB/dQUdpvwsW+Z7Kxz9y2rH9JWzBWwfpv9z8khM=)
                          2: PKCcLn7gw6Ub1teeDxDVaIyuinc.roa (hash: XdK6goNbx5CXhLqA/axUAjiyoFFcbKjnqngpuHtnyls=)
                          3: dN1vRCcHRSnbvQADNvtYm9Gw-TM.roa (hash: D+OiPGlBYkixwnt9NBRJj4rRA3Pw0fqCQSZtwrK+kFU=)
                          4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: 5XUTFrwaocqFKqjioSfLdMTV2ZP8liAR5u7L5xeLsqM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f4:1a:63:bf:87:4e:b5:f2:eb:32:2b:23:71:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=dac410a76981be8aa22b2405eda10c627d592484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c7:ad:5b:29:ee:ff:66:2a:ee:1a:53:90:59:
                    65:fa:8e:d1:b4:1c:bf:a4:07:a3:1d:93:bf:49:91:
                    08:e4:60:db:e9:95:3a:47:82:49:32:8a:37:ff:02:
                    02:8b:b1:18:70:f4:9a:65:69:02:75:bc:f0:01:9a:
                    6f:30:61:25:dd:44:b7:f9:61:1e:0a:f2:c3:59:d8:
                    34:f2:38:47:44:57:6c:59:2a:8b:7f:c6:19:4b:70:
                    84:ca:a3:91:94:46:7c:70:59:52:f3:aa:43:2a:c7:
                    6a:9c:16:54:4c:2f:5c:3e:f3:0f:95:d9:f4:7d:92:
                    cb:a8:ea:fc:30:8e:a3:9a:de:51:0e:40:d0:f2:e4:
                    39:87:b3:8b:34:b9:63:49:60:54:02:88:56:d9:e7:
                    bc:84:92:0f:93:25:91:71:06:32:89:f8:d9:09:2b:
                    53:bf:82:96:dd:6c:3d:77:c8:8c:da:2a:b8:d4:d8:
                    e3:8a:35:f2:18:66:5c:52:94:f6:b3:30:d6:ed:77:
                    04:07:1c:42:4c:df:c5:33:83:50:e1:0e:83:52:8f:
                    0a:aa:63:b5:31:d5:51:cb:00:20:aa:61:d8:71:ed:
                    e2:65:e7:da:55:d5:74:5f:ec:16:64:b3:d7:36:fd:
                    ad:4e:9a:f5:72:0b:e0:03:df:36:80:cd:fd:4f:eb:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C4:10:A7:69:81:BE:8A:A2:2B:24:05:ED:A1:0C:62:7D:59:24:84
            X509v3 Authority Key Identifier:
                keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f3:b4:8f:11:55:16:ed:88:50:67:07:f2:31:90:23:6f:39:
         1d:05:6e:a0:18:2c:de:aa:51:60:65:ed:ec:7e:3a:3a:6d:87:
         07:c4:f8:0e:f4:33:b4:8c:dd:a6:f7:ce:77:88:08:48:15:52:
         27:62:5e:15:dc:17:62:4b:c9:e0:61:d9:4a:68:fb:c3:14:d9:
         89:fe:92:be:6f:44:33:66:ef:88:94:25:df:36:0b:17:4c:ec:
         1f:d1:3b:c8:45:71:8f:f7:40:7f:86:80:5f:bc:3e:55:ee:b0:
         36:ff:c0:da:77:bb:b7:d0:a9:c1:a5:26:ef:8f:53:f8:a3:b7:
         f2:ff:ec:11:78:99:7a:df:33:12:4f:11:bf:e6:bd:93:71:23:
         f9:a9:bc:c0:47:ea:ce:8f:92:ea:c8:30:0f:30:7b:2c:06:ef:
         7d:58:de:f3:d4:c6:35:d9:a7:4a:d7:23:13:40:18:b1:c5:3d:
         92:aa:7f:00:dc:4f:36:56:5f:c7:a8:36:e5:18:95:aa:2f:4b:
         89:75:0c:85:cc:75:ff:c7:6c:7f:47:a8:21:52:bd:08:24:5d:
         1b:82:45:ce:45:a7:87:dd:ef:51:3a:7d:c9:57:22:89:0a:7b:
         ea:70:11:f2:a4:2a:83:6b:68:c9:9c:4e:da:12:b8:29:52:31:
         98:31:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----