Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File:                     criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier:          jKS6m8L9ncHN3Fd4Kx8L6UAoPFQr5NS+OUYMKrh9fEM=
Subject key identifier:   30:E4:62:29:BC:EA:61:6A:52:76:C7:46:89:54:9A:61:69:4A:80:D5
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer:       /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial:       01962E9949309E8927F5DCA7544737BC97F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number:          03DA
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: Pz7NU6STR9TIDQ04UMXmoKPVjro.roa (hash: Tmbo0CXGhGsx59/rnH0CK8F7805oDqYjgNQgtncuY5w=)
                          2: Tdm9ws-dkBROs9-yKySxcdk4Glo.roa (hash: wltKEf2Rf9JW3GaIHdHeRcLJ2xgd5oHLTYlIpPXt9Fk=)
                          3: X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa (hash: 71+6pvaVgubnoimXHapiHVX8PmDdJZkmh44ntj9Ryfg=)
                          4: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: P2g0X1WjiACRiRqQVB3lqg9cdZqSuPgqq4lhYjhs4Kc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:49:30:9e:89:27:f5:dc:a7:54:47:37:bc:97:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=30e46229bcea616a5276c74689549a61694a80d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cb:1e:15:94:b1:7e:a6:22:95:90:7a:ff:23:
                    39:87:1d:d6:ce:cc:4e:61:4c:cf:4e:ab:72:43:f6:
                    2b:c3:7c:92:90:a0:4d:9c:02:74:77:e8:eb:6a:b8:
                    d9:dd:6b:cb:8c:c9:1d:11:2b:2f:12:b0:e3:32:6c:
                    49:03:b8:9a:aa:a4:4a:21:a0:82:b2:30:88:a5:44:
                    dd:e7:e8:48:48:14:64:bf:7b:25:59:34:a3:41:59:
                    e1:84:17:87:ee:65:70:21:cd:c5:4a:9b:93:8e:d1:
                    9d:77:85:a2:a9:4c:b4:bd:e7:a6:e8:d5:1c:a7:e3:
                    f1:35:38:f4:a1:12:e9:2e:92:41:66:90:56:98:1a:
                    fc:fc:1a:d3:77:16:2e:5f:ae:3b:51:58:e7:ae:40:
                    41:93:6f:07:66:ac:2a:0a:a0:0e:0c:d1:c9:71:da:
                    4d:bc:ed:a9:9f:42:aa:23:12:c5:9f:ca:0a:36:05:
                    bc:1a:9f:09:b0:e4:ea:49:dc:6d:0d:be:26:d0:cb:
                    cd:80:9e:74:c0:5c:43:c7:e9:8f:86:b8:aa:02:a8:
                    a4:e5:71:8b:39:c8:8d:f9:9b:0f:87:16:ac:8f:fe:
                    0b:ca:2e:78:95:96:67:5f:0e:45:30:f9:b3:6e:15:
                    3a:0f:1f:4a:57:6e:29:67:87:f2:d1:c4:51:8d:fb:
                    b2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E4:62:29:BC:EA:61:6A:52:76:C7:46:89:54:9A:61:69:4A:80:D5
            X509v3 Authority Key Identifier:
                keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:92:24:cd:a5:c7:cc:12:a8:9c:b2:c2:00:99:b3:3c:ce:02:
         80:b7:23:32:ec:0a:e6:ac:ed:c1:4a:93:06:41:96:60:7f:ea:
         97:ad:35:ef:5f:a0:eb:ed:91:a7:15:83:17:84:35:0a:e7:61:
         02:50:49:55:27:ee:15:87:bf:4d:ee:4e:03:e7:e2:b2:e6:01:
         9e:85:a4:16:29:4d:ac:e9:da:47:64:da:09:65:25:6c:73:82:
         65:fc:25:40:8a:66:54:37:f2:85:00:bc:b8:85:d9:67:02:bd:
         2e:a0:46:bf:9d:98:00:a2:48:95:4f:62:1f:dc:eb:b5:35:ef:
         1f:78:0a:92:70:60:af:ce:de:79:11:d7:45:aa:17:c6:49:1b:
         39:bb:9f:0f:25:58:ef:c8:56:36:e0:1b:be:5e:ad:b6:eb:35:
         50:3d:ac:03:0c:39:2c:9f:f8:85:7e:18:0d:98:b2:61:2d:df:
         cf:04:56:6f:ad:f2:5d:07:07:d0:20:3b:69:b4:ba:20:fc:7f:
         3c:4e:fc:4c:8f:bb:fa:dc:11:9d:7c:86:d1:59:a0:63:6d:49:
         e7:3f:8b:dd:05:05:0b:f8:ab:f3:9b:67:44:3e:4c:4b:8b:3e:
         78:f9:15:40:31:fe:11:24:83:e7:6a:bb:f7:3c:d2:12:7d:b3:
         2f:8a:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----