Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File:                     mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier:          lQnYyL21hFTcrayOltSxsf6fuo64KSqxqyFHnFi35YQ=
Subject key identifier:   62:ED:7D:04:3F:33:9B:01:3A:3B:E9:16:DF:5E:87:86:A3:45:74:1F
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer:       /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial:       01962F3D7E34E90C5172AD9108D7A766674B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa (hash: OwOwX0XTVGFVpqs+QebopX8jgHz3h7KxGANJ/Crp1oA=)
                          2: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: PGwb6xz2iPMkXnvjZkbGLagiZ8QkpIeGuMI3E1nfzHA=)
                          3: vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa (hash: 2C3QYWkPGEbQmt4ETFEFUqH1R92qUMl/4nE7fTPMPhA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7e:34:e9:0c:51:72:ad:91:08:d7:a7:66:67:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=62ed7d043f339b013a3be916df5e8786a345741f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:e8:c0:52:5d:0f:bd:69:b3:86:6a:ae:c2:
                    f6:33:78:31:f0:d3:80:59:cd:b1:95:8d:c0:73:44:
                    72:f7:76:3c:94:5a:24:a1:2b:64:01:ab:03:d1:24:
                    cb:8c:7b:61:9d:59:71:6e:52:ac:e3:66:73:70:2c:
                    18:69:00:d3:f6:9f:38:1a:90:d5:51:97:3f:05:8a:
                    c0:20:56:8a:af:1b:50:d7:f5:a1:7e:5d:95:1b:92:
                    b3:f3:0a:ad:d2:1d:d4:85:37:23:b5:2e:e8:96:3f:
                    da:23:1d:34:1f:85:97:e3:aa:83:6e:9f:da:04:9c:
                    c3:e0:02:19:17:c8:ce:91:4d:70:92:68:b2:bd:8c:
                    92:fe:29:73:b4:6e:f8:56:5f:f3:8e:91:b5:0c:34:
                    72:99:b6:eb:cd:bd:73:0d:21:f9:50:7c:1e:18:5d:
                    19:e4:3b:22:1d:39:b7:bd:a1:77:76:38:74:bf:5c:
                    d6:b2:be:2b:47:52:f9:85:fe:9e:52:cb:83:b5:5e:
                    71:ca:13:d9:7d:d9:26:1d:1c:0a:b8:af:83:88:e6:
                    4c:dd:46:72:bf:69:c8:d2:b9:c8:05:27:24:d2:56:
                    8d:ac:ab:0e:cd:c5:ae:5c:66:cf:d5:91:77:f6:22:
                    fc:65:4b:a7:5c:b8:cf:bb:b8:1e:f4:41:2d:a2:d1:
                    50:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:ED:7D:04:3F:33:9B:01:3A:3B:E9:16:DF:5E:87:86:A3:45:74:1F
            X509v3 Authority Key Identifier:
                keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ef:5f:a3:6c:53:16:b9:01:cf:b9:ee:83:93:28:6c:3a:ac:
         75:c1:bb:49:f7:2f:e2:dd:bd:95:11:2f:c0:db:fc:47:17:7e:
         21:dd:5b:30:87:21:b0:32:b1:3e:8d:b4:80:49:74:a5:c4:cf:
         71:34:a3:b7:33:e7:36:32:16:f7:22:84:f0:44:6e:e1:23:ad:
         d7:69:34:48:d4:aa:dd:12:da:5c:62:b3:65:f2:41:3c:1d:51:
         93:16:f2:33:a8:8b:3a:e3:78:64:e3:3d:62:e9:0c:6e:6e:43:
         22:5a:eb:63:bb:47:b1:16:a4:d9:fc:c2:d5:e5:a1:2f:17:0d:
         4e:93:39:02:00:a2:1c:66:ba:99:27:b6:ce:99:8e:7e:8a:5c:
         b0:ee:f3:ac:e2:e9:2e:5f:dc:e0:e3:d1:a4:d9:50:c4:8d:fa:
         0e:eb:4c:dc:3e:d4:14:00:46:39:fd:7d:34:c7:0f:82:fb:c3:
         fb:9a:de:10:19:04:29:1c:72:52:84:0c:89:51:b6:8a:72:d0:
         14:f5:7f:1b:f2:d9:1d:b9:03:50:c3:c1:19:67:3c:22:6b:16:
         81:db:ba:c3:58:b7:68:b2:04:dc:00:39:05:f4:79:2d:22:c0:
         f7:82:58:86:a4:90:98:80:b0:13:1c:b2:c3:ce:63:19:17:b8:
         a7:88:e4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----