Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File:                     pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier:          UUVcL7U3lSZLia8qfSXd0MHeoORRZyK7JxttDkWuRhk=
Subject key identifier:   25:C6:DC:20:1C:71:80:13:13:05:4C:B6:5C:50:7D:84:9B:48:5B:5B
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer:       /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial:       01962E2B1B3ECB7ED263BE41F381710EDAB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: RC2JkOQZBHdrMWWJ6dmI74cPa_s.roa (hash: qL9vMEtT48m8aWpCwA/eKJ1AT6hZ+DcyDfjgFWcllKo=)
                          2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: aXqJ56dC11toZHx5hrGjsNVsS/7vSPibWAWBR0cMK/0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1b:3e:cb:7e:d2:63:be:41:f3:81:71:0e:da:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=25c6dc201c71801313054cb65c507d849b485b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ee:e1:a3:e6:cc:c5:24:40:28:81:40:10:ab:
                    3b:57:49:42:4b:fc:4b:cf:8d:c7:8b:83:69:e7:aa:
                    e4:ed:b2:8e:d3:86:fb:47:68:d5:20:e8:3a:8b:f5:
                    e0:68:62:a5:25:d6:44:71:07:cc:9c:2e:fb:24:6c:
                    30:d0:b9:9f:66:8d:5b:4c:00:09:5a:1a:27:eb:3b:
                    c2:03:dd:a2:9b:e4:de:bf:8c:51:5a:b4:3c:97:6f:
                    55:de:4f:2a:27:31:fa:18:93:8f:32:22:04:c9:8e:
                    6a:8a:eb:86:ea:0e:75:2a:a0:9c:94:33:79:ee:b7:
                    df:69:c4:c2:fb:5b:2c:a6:7d:1d:07:c0:1e:01:89:
                    0f:0b:ca:97:06:a0:3b:77:9d:d0:6c:55:92:e8:bd:
                    ff:8a:cd:cb:5b:3b:b6:72:dd:6e:63:00:1e:1d:fe:
                    35:d2:b8:ed:92:49:92:a3:45:93:fb:06:8e:aa:3a:
                    e9:5f:dc:21:82:d9:34:7f:b6:bb:dc:0c:4c:0a:bf:
                    d8:25:bb:e4:14:87:a1:78:5b:b4:4a:d7:1c:72:70:
                    24:c2:74:44:38:6d:f4:c1:5c:1f:2c:6b:4b:6d:57:
                    69:71:68:4c:d2:46:2a:d1:51:6a:93:bc:ab:3e:bb:
                    43:83:a4:bc:a8:f0:1a:77:2b:68:d2:9b:4b:54:eb:
                    ff:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C6:DC:20:1C:71:80:13:13:05:4C:B6:5C:50:7D:84:9B:48:5B:5B
            X509v3 Authority Key Identifier:
                keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e3:1e:dc:7f:2a:c3:1d:ae:ac:91:a4:4b:e5:e5:79:df:ab:
         2f:c7:31:b1:93:8f:2d:97:4d:b7:2a:ae:2b:f5:33:5f:c4:f3:
         ba:9a:be:12:ae:db:da:d9:a1:a6:60:b5:c5:9f:0c:8c:76:2b:
         ee:90:0b:bc:5d:d0:c3:6f:d9:0a:d6:fe:3a:c8:33:f5:34:48:
         05:83:81:19:dc:ef:cc:08:b0:2e:6d:4b:5a:bf:c1:87:ba:2d:
         a3:50:76:98:5c:18:ea:31:a7:3a:c6:61:a1:d0:2a:e4:c6:16:
         8a:97:54:d9:18:2a:5e:5e:1c:66:dc:d8:aa:ce:f8:a6:21:8b:
         7b:ce:c8:c3:ba:66:06:ef:32:52:77:fa:9f:21:b2:68:3c:86:
         ca:81:c5:4a:99:4f:57:da:03:d1:f6:43:ae:bc:0d:a9:14:96:
         36:16:4b:a6:73:b5:d9:44:22:a6:84:d8:9a:b6:a3:fb:5f:87:
         91:46:b8:64:e5:91:01:ff:31:de:72:25:b2:6c:7c:b1:ec:37:
         f6:6f:0c:c5:a6:9b:74:75:84:b1:6c:50:44:46:d5:7f:c5:32:
         66:04:b7:f2:b1:f8:99:83:5f:ee:b9:6e:b8:81:7d:4e:24:bb:
         a5:22:1b:a3:11:e0:c0:4f:59:8f:89:41:7e:08:ec:14:ce:cd:
         19:50:b0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----