Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File:                     mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier:          5LnW9hhIuF1iFjPxKVMPLd9j7Hdoo5Ocmz6mHTSddHk=
Subject key identifier:   3F:7C:0D:67:F3:2A:61:37:21:F8:12:4E:D5:26:BE:A2:54:94:04:3F
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer:       /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial:       01962E99BF4717342E7A2DD7A7C7240B477C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=)
                          2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=)
                          3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: HZiNliVjZYPUX0zT/W4zusMN46IYhUyg6tdgCmBRDBY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bf:47:17:34:2e:7a:2d:d7:a7:c7:24:0b:47:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=3f7c0d67f32a613721f8124ed526bea25494043f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:78:28:02:37:7b:ec:ca:76:12:37:08:ab:45:
                    5f:98:b0:38:c4:98:fc:80:e3:0b:7f:2c:77:96:d2:
                    e3:38:c5:cc:ad:e0:33:85:e8:25:b9:39:ec:56:58:
                    8d:77:d3:58:80:66:97:a2:b9:f7:6c:52:55:c9:11:
                    3e:09:a1:9a:9f:6b:7d:a5:d0:65:de:e0:7e:5a:00:
                    45:24:39:8c:dc:ac:39:d6:27:e0:3e:78:e6:2a:e9:
                    b3:3b:98:f2:d8:3b:48:ae:50:b2:b5:be:00:35:1c:
                    77:9e:d6:99:47:81:0d:ae:06:68:ce:95:91:00:8e:
                    d7:61:09:3e:b4:1c:dd:29:fa:8b:62:a3:48:f2:d2:
                    7c:ec:5a:a8:c0:64:e8:bd:3a:9c:52:be:df:e7:3c:
                    49:7d:03:39:5d:32:92:b2:46:4c:67:45:6a:a1:fc:
                    a1:71:48:b2:35:82:0c:21:b3:dc:bc:4e:90:a8:35:
                    f2:c0:6f:46:b6:94:8a:5a:c7:54:6e:04:1f:54:31:
                    29:1b:aa:dc:79:88:ea:86:ec:bd:92:0b:65:1f:34:
                    30:84:62:46:ba:65:3a:0e:e9:3c:97:4f:d2:d8:ab:
                    94:e8:03:8a:96:24:f1:53:87:6d:1e:51:fa:5a:0b:
                    c2:76:2f:09:4d:d4:f7:92:3b:42:99:89:a6:30:2d:
                    d9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7C:0D:67:F3:2A:61:37:21:F8:12:4E:D5:26:BE:A2:54:94:04:3F
            X509v3 Authority Key Identifier:
                keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b1:2c:e5:63:7b:98:3c:52:25:2b:b1:72:c7:59:34:1d:04:
         66:4c:f5:17:83:79:87:b1:f7:c4:65:00:59:f0:43:f4:fd:0a:
         e3:f0:81:9d:0b:d6:87:1a:11:a0:99:22:03:72:24:17:e3:34:
         63:55:0e:39:12:b7:00:b4:a6:1f:61:18:fb:51:9e:aa:1d:c5:
         02:bb:84:58:64:52:4b:1b:56:8d:28:b8:b2:7d:e7:c7:14:ef:
         e6:a6:4c:62:98:e9:5c:9b:a7:29:74:c4:be:45:5a:cf:c9:f3:
         2e:2a:c0:3a:22:45:c4:03:02:59:b0:a0:26:fb:e8:ad:0e:02:
         31:57:e2:fb:d3:38:7f:a7:ac:a7:ae:eb:ae:ba:6a:e5:c4:ed:
         33:9d:a2:7a:ee:75:e4:bf:0e:da:06:ac:8e:fe:77:e6:94:8b:
         ce:6e:21:46:fe:04:96:b7:d5:5c:8b:3e:cd:f6:06:ba:c8:0b:
         46:53:97:07:6a:3d:d3:4e:c9:a0:21:7b:f7:3e:f2:b6:34:0c:
         0a:c4:71:59:eb:2d:48:ac:56:47:31:fe:8d:54:52:02:08:b3:
         77:ca:cb:36:de:04:2d:44:93:76:a8:92:56:07:20:fd:10:bd:
         4f:0b:3b:b6:38:ed:d1:0a:c5:1f:d0:95:62:94:2b:bb:e3:db:
         2d:30:cd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----