Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
File:                     sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json)
Hash identifier:          kC75/WV4fdrIxNW9GVpwabtGbpEEc7hkystKv2Nmw+Y=
Subject key identifier:   D5:1E:89:88:FB:69:D8:DC:AA:B9:48:AA:00:02:EA:AF:25:C6:E5:6A
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Certificate issuer:       /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial:       01962F0749138E533A23A01F4F40474F6957
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
Manifest number:          14FD
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: BO-bzW2V5HfZnpDWCOZRREj0_aA.roa (hash: bBvM5GD33JW26g6UBHC38zwmrN/wxvFNIrA/ZVP1z3g=)
                          2: D2VP3boIbKOt_7fZmoGwBMd0j_E.roa (hash: 5B9i3Ekd388l3dq3yF+uoTeTOTbzf9g6nU3q4mHoYKI=)
                          3: KDntMwv7lfN57GwH3c-ooOZ7MV8.roa (hash: N8ZIBiU8gH7tSdeMv2oT8+5VHr8ZvOaPGXUGzn1qd6o=)
                          4: MKXE3l_kRrUK-SEa0SjlnZgrzOY.roa (hash: qB75ATBjq0bvGr3VuX9ZJkiNF1i/cky+GUiK1V7um9s=)
                          5: OMLGm3M8AukdVmECZgGAm5oBI6w.roa (hash: NhtCtzcMBYjPL2amj6HhHMrktNr+dPVzL27OzOSW9VY=)
                          6: QhEieVCa4VzXwRS2R-uT3VD69zA.roa (hash: g7EksG6Y5xUVpGTxJtSk1SiYEQY9x4uAiGIMcbCmQ/k=)
                          7: T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa (hash: ctLCD3mPPm9ORV/MIVYXQC7GReMvIOdcov6IyRw8Un0=)
                          8: VT5Wd_pqOJ9dH5ke9coXfMElArk.roa (hash: fLcCO/2FWRaPE55k8VUjCjI94f4/oSwtLUtlY9+MVT8=)
                          9: ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa (hash: 3EAQTTBdwC0en0ttbPcWmRtInqoUrBVPVbUH2J6E2Tg=)
                          10: i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa (hash: kTy26coV3ftFQPHtpIaAlqr+Ns/2fmpdvjWPntGul4A=)
                          11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: 6QTv85j8wP3IsG4MHZafit/1jTpXbE7PyZr2sPXPM9I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:49:13:8e:53:3a:23:a0:1f:4f:40:47:4f:69:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=d51e8988fb69d8dcaab948aa0002eaaf25c6e56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:26:cf:ad:d5:f9:54:77:8e:7b:c3:56:c7:
                    f4:a4:51:6a:1b:f4:34:96:a5:96:96:f7:10:d7:70:
                    64:d9:89:38:92:3a:e0:c8:49:11:56:a3:3d:b9:95:
                    4a:c1:0c:b3:97:4e:46:0b:95:05:75:45:cd:a8:61:
                    71:1e:81:76:21:f4:e5:8b:38:5e:94:5e:ce:6d:f7:
                    ad:a7:a8:62:19:39:d2:8e:e0:0d:a5:67:5a:e5:3a:
                    1c:6c:2b:be:ed:ab:82:44:cf:d1:53:29:f4:48:ad:
                    e2:4f:07:d4:f8:ad:45:46:4a:89:78:3b:20:6d:47:
                    37:42:1f:dd:e7:ca:03:f4:02:32:0d:d5:de:9a:51:
                    06:e4:f0:d9:74:f5:68:70:1a:75:96:e3:d8:dc:1e:
                    4f:95:47:30:b5:f1:7d:dc:34:82:a6:f5:7d:88:9d:
                    fd:42:92:43:da:ed:50:32:87:5b:cd:f4:88:8c:a4:
                    d7:a4:77:ae:e9:7c:2e:21:43:82:bc:b9:ec:1c:2e:
                    c6:b9:18:14:08:df:01:2b:ac:b6:45:23:93:a6:77:
                    95:24:b6:83:ab:62:e3:e7:04:00:6f:8a:48:ff:fb:
                    45:48:29:a5:e8:76:24:2e:c9:ab:c5:44:ae:c1:4b:
                    27:d0:07:37:d0:9a:5c:35:df:c8:fd:33:50:fc:05:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1E:89:88:FB:69:D8:DC:AA:B9:48:AA:00:02:EA:AF:25:C6:E5:6A
            X509v3 Authority Key Identifier:
                keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:22:04:2e:20:67:86:a9:2c:31:47:90:41:cc:b8:0f:3a:01:
         f4:c3:fa:d3:cd:52:66:24:e6:9f:9b:92:2d:ad:d5:b2:76:5b:
         7c:da:85:01:44:65:07:93:a1:5d:6b:28:08:09:5b:be:31:93:
         98:ae:e3:14:9a:61:64:72:1f:c0:d5:c7:ad:a1:32:c2:f1:eb:
         70:47:b0:a8:31:33:7f:e0:7a:fe:f9:49:3f:7a:46:f1:64:c9:
         97:f0:c8:ca:a5:45:91:c2:08:2c:c0:8a:d5:c1:cb:40:d1:d6:
         e7:ab:dc:26:c6:d5:5c:fe:49:15:4c:e8:83:0b:d9:72:b9:ee:
         c0:80:78:6c:91:a4:1f:35:32:4e:8b:e4:22:f6:89:99:8a:3c:
         5d:5c:5e:3b:eb:f0:96:74:0d:41:52:2e:b9:7a:33:aa:77:26:
         b6:ea:59:1d:96:37:0b:cd:5d:e6:01:42:f4:c0:67:5d:9d:8c:
         63:56:4e:d0:ec:a9:50:4c:3f:9b:8f:14:83:44:24:fa:9c:5e:
         05:ea:42:a5:67:d4:bd:3d:cf:d7:b7:0f:47:fc:11:0e:83:fd:
         65:69:b1:2d:82:2c:51:48:c4:78:54:96:36:96:dd:7d:ed:44:
         a1:4e:7a:cf:23:87:da:98:33:cc:18:01:81:d2:c9:8f:49:99:
         f0:d1:1e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----