Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File:                     sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier:          NAAMtZA11ry5jXa313VgNrLt8ZjUgHtcoLR6F7Nk9Rw=
Subject key identifier:   3C:EF:8A:E5:0E:96:E9:E5:02:4C:2A:AC:A2:FB:23:42:5A:56:52:BF
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer:       /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial:       01962F74D1A27A38D070492D4668599A618F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: BA5XRS-VBm8RVVbSCJW6HST0wD0.roa (hash: b9K7NP8BwX8VNftSD4zDv00erFxrleUYzaeFhztZOO8=)
                          2: gbBXW-vxInHi16BrBBKHLf7If3g.roa (hash: fBYMDG4bZkxXYdO0y/chVffLP2RSHLaDCHJZ1DFzD3E=)
                          3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: Fd9mIiLR1tpvv36C9Qx/C71XD2sUOP5koe5k/z49Tv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d1:a2:7a:38:d0:70:49:2d:46:68:59:9a:61:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=3cef8ae50e96e9e5024c2aaca2fb23425a5652bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:19:ce:05:6a:2d:a8:e8:6b:c9:87:47:a5:
                    91:ac:aa:a8:07:12:c4:e6:59:9c:c9:3f:0c:43:f4:
                    b4:54:91:8e:95:06:67:e0:f6:aa:d8:13:1f:38:69:
                    99:bf:ff:6a:0f:5a:c7:09:a2:fd:79:b1:6f:1a:26:
                    59:3f:c5:11:b1:02:94:50:bb:47:02:c5:90:b5:a6:
                    29:3a:ec:ff:d6:3b:99:06:ad:ae:ed:bc:d6:e1:4d:
                    03:fe:85:88:a9:23:43:14:f6:96:63:d1:20:1c:90:
                    77:4c:96:c0:a4:02:6b:56:52:98:6e:5a:fc:a5:ad:
                    f3:89:24:7f:03:3d:cd:e9:eb:90:6d:c6:f1:d9:ce:
                    88:17:2f:7b:ff:71:ce:be:e8:7b:65:4d:56:77:bc:
                    2a:a3:af:b3:7c:50:60:33:a3:fc:07:d8:aa:82:46:
                    b2:ca:14:ac:99:f2:f0:b8:83:f2:8e:16:fd:3c:bf:
                    db:68:aa:66:a4:71:11:28:40:03:a8:9f:4b:81:6f:
                    71:ff:25:94:67:54:09:66:95:13:93:48:16:a1:8a:
                    0a:23:2c:dd:4b:54:07:e9:a9:bb:19:3a:ce:7d:50:
                    ef:d4:52:80:64:21:2e:b6:b4:69:79:52:9c:43:70:
                    a2:be:cd:57:d9:f9:87:c3:f0:e7:93:d5:98:a6:20:
                    46:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EF:8A:E5:0E:96:E9:E5:02:4C:2A:AC:A2:FB:23:42:5A:56:52:BF
            X509v3 Authority Key Identifier:
                keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f3:ce:62:e6:0b:c5:13:71:76:f8:0d:02:29:4b:e3:f6:79:
         cd:e9:a1:1f:cc:ac:69:1a:40:13:4f:7e:46:13:8c:82:51:d4:
         ff:a3:e2:bf:0c:6f:64:3e:46:70:df:b5:50:71:7a:c2:0e:02:
         0f:b0:ee:a1:b5:09:c6:ea:10:94:8c:3a:50:dc:4d:6a:bf:7c:
         f4:ed:34:5c:0b:81:71:f3:e4:61:60:9d:9d:63:12:38:c6:6a:
         bc:c1:4c:95:58:15:36:82:5c:6e:12:02:9b:91:07:99:83:05:
         e0:e7:1b:f1:af:ec:65:cf:c0:1a:3c:a4:83:22:12:d8:58:ff:
         4f:d8:e2:ad:a8:37:1f:ee:6b:12:74:84:e5:f1:d0:f4:04:5c:
         6a:4f:b9:e5:6c:fe:01:5c:f1:41:b1:2c:fa:47:60:7e:a1:82:
         d4:24:19:2d:82:b3:e3:fd:02:1b:c6:84:ae:93:f0:08:57:af:
         7b:d6:da:31:e1:d3:2f:ab:55:58:52:9e:40:8a:c9:54:b7:97:
         fc:da:c8:1e:aa:d5:f1:38:4d:86:7e:f5:d1:fa:67:f5:e3:02:
         23:68:b9:8e:9e:87:17:f5:ad:bf:22:dd:f9:28:e8:4e:48:7e:
         d7:d3:b7:b6:87:4e:66:95:85:34:07:15:44:c3:63:20:c2:03:
         e6:b6:f5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----