Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File:                     RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier:          D/XDeMgjRVeA2d96FCNQOLzVVyIcMZYQJLLQsjPjfAE=
Subject key identifier:   28:B8:68:27:73:63:E9:1F:66:AA:6E:9D:F7:0C:EB:B4:52:F3:C0:2E
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer:       /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial:       01962F7428C88D25963039FB2772EB4C056C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: 0vFjVDYAA-6QI2qHPCdosu1GYFw.roa (hash: IQ3S8+qzPktEg1qP0FjMswDmKCTlK9fgpP4sOBqgbxM=)
                          2: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=)
                          3: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: 0bka8nSMcD/NhZC2ebPSv5WXvstscpM/8ddRBb4gT40=)
                          4: n_A6Qzt5rx35hoVU_97TwDYIfYU.roa (hash: AiRnXdqpWHaW5BVZZURmZ+ZKd/dN4DFkv2OtB71gThk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:28:c8:8d:25:96:30:39:fb:27:72:eb:4c:05:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=28b868277363e91f66aa6e9df70cebb452f3c02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:88:11:46:38:c0:a9:f1:24:6d:87:3d:06:
                    fd:b9:30:fb:f8:be:40:e4:1a:36:23:9b:13:d2:b2:
                    cb:e7:38:b6:dc:20:e4:7d:a0:e9:95:88:f0:93:94:
                    03:e5:d4:8d:73:f2:a1:89:f0:95:57:f1:97:26:02:
                    b5:46:87:98:9a:33:75:dd:f7:51:e5:eb:d2:68:12:
                    d6:51:55:ca:59:dc:e9:ea:20:56:7e:39:23:57:b8:
                    ef:49:9a:65:5e:25:36:dc:18:6b:b0:ea:45:5c:fe:
                    ed:a7:bc:ea:c9:a3:14:ff:75:aa:70:a6:a3:8d:47:
                    c6:97:57:9d:0d:22:df:3e:6a:4f:5c:7a:9f:2f:ee:
                    73:71:99:c9:f5:74:09:6d:73:d4:f0:71:4d:e5:9a:
                    d9:8b:3d:5c:7c:63:e5:43:22:1b:04:b1:8d:8f:09:
                    1d:ed:b5:be:de:94:6c:32:56:e3:21:af:70:f8:46:
                    7a:ef:d6:cc:f5:60:60:e4:e9:6d:97:5b:c9:55:84:
                    5d:ba:8a:c3:3f:1a:ba:1d:5f:ef:81:df:09:69:cd:
                    6f:ea:3a:30:43:32:b6:ff:80:13:3b:cf:eb:29:29:
                    05:2a:a4:45:b2:45:42:9b:1b:51:ac:7e:4c:69:50:
                    a6:ac:44:b4:bb:7a:43:85:91:71:2c:02:f7:67:3d:
                    79:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B8:68:27:73:63:E9:1F:66:AA:6E:9D:F7:0C:EB:B4:52:F3:C0:2E
            X509v3 Authority Key Identifier:
                keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e3:3b:68:96:aa:cb:d1:a6:2d:55:09:3f:83:56:d4:9c:a1:
         8d:85:12:40:7e:33:e5:33:33:dc:e8:72:ce:c7:e6:6b:16:cb:
         bb:db:a6:a4:68:7a:b4:4c:cd:ec:97:1f:4e:82:7c:22:e5:3b:
         8e:b6:ab:1c:f5:89:38:cb:5b:32:aa:13:6e:1a:2e:df:26:cd:
         c9:59:ce:8a:3d:a4:36:06:b3:f3:d3:a3:cd:86:1c:27:d1:46:
         c9:88:fe:58:a5:9d:3c:38:87:22:dd:11:2b:7c:1e:fc:d6:83:
         35:84:f8:a4:ee:fd:c2:74:7f:70:b4:d4:99:c7:e2:9a:65:18:
         9b:e8:55:bb:44:55:41:3c:b1:3a:a5:74:f7:41:f3:36:64:01:
         79:48:3f:42:09:ad:19:a2:44:c6:f0:e4:40:8a:d0:ec:2d:2c:
         eb:8e:6c:61:30:ed:97:35:08:ba:db:e2:db:a5:f1:ca:e8:1d:
         e2:e5:18:36:55:fb:05:55:48:8b:a5:0e:bf:b1:58:ae:48:08:
         9f:4c:f6:6b:1e:60:0d:de:69:3a:ff:67:19:60:35:03:bc:1c:
         a1:06:aa:ce:e6:b8:9a:90:e8:ab:8a:a5:10:c8:bb:90:94:9e:
         cb:27:4d:a3:7d:dd:db:08:65:c0:c6:5b:00:e6:a3:de:20:a6:
         4a:37:58:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----