Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File:                     RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier:          zi4kH+sqdyLXw2UhXFVT4OHmaybktXPlupkdCxHKyFg=
Subject key identifier:   27:35:BD:AE:F6:D0:19:06:7D:F7:13:AC:B2:58:C4:0D:50:1C:C8:27
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer:       /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial:       01962F744AE3349A618325C32FD3DA81311F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: JKZSaEq-32SHY-bAWiWwoCf7Nj0.roa (hash: yG2sh1v4s77ObqidFtWCzFl8F2FhijHzBj04Ij6JtCg=)
                          2: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: Xv3o9IiSJb9/sGU8+xgSoyPmSbtj/eOBBUJZqYJTK7g=)
                          3: j-Ifej8p6sYfHH1KeQ_QH-keweY.roa (hash: iVB6o7qwOuA1Lj9sG4cTIYUNVhckFRweng10RlAwHI4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4a:e3:34:9a:61:83:25:c3:2f:d3:da:81:31:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=2735bdaef6d019067df713acb258c40d501cc827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:dd:a0:5f:f1:31:2b:51:79:1c:a2:48:86:
                    1c:64:17:b1:f4:57:9a:bc:02:d3:78:63:98:c9:32:
                    07:4d:de:4d:df:41:2d:7d:0e:31:8c:2f:95:da:67:
                    3f:11:73:ba:8f:2d:8c:0e:a3:29:65:76:02:66:c1:
                    e3:58:2d:47:19:60:b0:d9:cc:39:a7:fd:96:20:a7:
                    87:58:e8:1b:5b:09:65:73:97:ca:d0:05:2f:9b:1c:
                    5d:c9:98:72:1d:b5:2b:e0:47:e8:ff:c3:5a:bf:73:
                    af:71:9e:70:1c:0f:4b:78:57:fd:38:40:46:0f:6b:
                    e4:f5:27:b0:df:01:00:3a:85:d0:95:8b:82:83:9e:
                    7a:2f:39:ac:da:54:64:86:d1:79:31:24:92:5d:14:
                    54:89:08:93:0e:c3:20:2a:99:1c:85:aa:91:07:7f:
                    75:19:3f:58:7b:76:e5:8e:2e:d0:ec:e6:f0:b5:ff:
                    c0:e6:14:3b:41:0b:83:01:ab:cf:18:c8:4b:86:86:
                    66:6a:cc:c7:b7:8a:50:83:93:c9:5c:d0:5b:65:fb:
                    43:60:7e:5c:6c:6c:1b:8a:bc:49:67:25:46:ea:2f:
                    62:13:83:7a:40:95:7d:7a:02:97:c0:a4:de:34:6e:
                    fd:ce:9b:39:da:c0:9b:38:18:6d:19:86:1b:5d:04:
                    a1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:35:BD:AE:F6:D0:19:06:7D:F7:13:AC:B2:58:C4:0D:50:1C:C8:27
            X509v3 Authority Key Identifier:
                keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:61:33:a0:77:e7:91:6f:97:c8:70:4c:c5:09:e8:cb:7f:ab:
         70:4d:de:b1:ce:68:83:77:a4:13:cc:83:82:3b:28:43:f8:7a:
         a0:3b:e8:24:c1:24:71:48:4c:e0:e1:9e:bc:1d:17:6f:cc:a5:
         5c:04:d8:4c:d7:2e:6d:c1:ba:e7:13:61:5c:fe:c8:98:c7:64:
         51:38:bb:53:0a:27:e8:d6:6a:34:bd:eb:43:d5:b4:05:07:f3:
         0e:48:7a:e8:27:cd:17:e6:f2:82:e1:3d:0d:e5:7a:82:9e:af:
         8c:4e:e4:f4:8b:53:26:5e:92:a0:3a:8c:56:79:b1:e5:27:0f:
         b4:eb:e9:2a:94:f0:d6:c5:5f:ad:47:6d:3d:45:b8:24:7a:7e:
         01:f8:4d:fa:63:8d:63:62:10:c2:11:18:2a:41:d1:1f:1d:7f:
         1a:3b:53:8f:b3:bf:59:ff:16:87:e1:ec:ee:5c:48:c5:30:0f:
         a9:38:dd:d4:8c:b1:3f:95:d5:96:ca:ab:fe:cf:7d:52:11:2d:
         96:01:8d:e5:39:04:9f:67:65:05:6e:dc:6d:aa:2e:6f:fd:ad:
         ae:fa:36:b5:6c:e0:66:40:8e:9e:9c:13:3b:e4:9c:99:bc:74:
         e9:2d:71:23:5d:f3:f6:cf:43:d8:0b:de:af:43:bc:b7:13:86:
         d7:bc:84:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----