Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
File:                     RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft (raw, json)
Hash identifier:          fsNtyUaYmiUAcGbhO/ztGa22MlhFSgsRilM6R926GKw=
Subject key identifier:   2E:26:43:E3:60:DF:78:BF:89:58:4B:E6:6C:0D:9F:E1:7E:AB:62:3E
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Certificate issuer:       /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial:       01962E98733C4B773D50CA3F4E6D5C12C40B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: 9NPwe5Cch9DKsApne4lBck33dDg.roa (hash: n5rsnUrmOjZIQ9fY3e7CPhPSBY9CrA1hfcg23aULjnI=)
                          2: RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl (hash: eiIWEcvSfvmR0PYBWs5h4sWSb0ZHroj+dkUMEQ4akUY=)
                          3: ZbtF1y6qqiNNF9Kn4_owkJXh8bU.roa (hash: d2ka5QhSCEg5WGvXSWc7XTeM7dxOHFNwQmEQHDweYuE=)
                          4: gJceF3d-nooj-HNFWfJ7DjrX2tM.roa (hash: UdFUlFj+wie5ycXMTsd/YSKdJbHKvpKDw6EwjwqI0NE=)
                          5: o5WCBd7B_bdBqX3qKx8Y0fm2X9U.roa (hash: aIK9wfTTcwYlswanyt/B91y3FSF50A1oyK2VXl08Ak8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:73:3c:4b:77:3d:50:ca:3f:4e:6d:5c:12:c4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=2e2643e360df78bf89584be66c0d9fe17eab623e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8f:ef:af:cb:bd:53:a0:cd:07:a8:a1:cd:60:
                    29:c7:81:2a:09:1d:ee:39:7a:84:a1:ca:11:ff:47:
                    fa:b6:c1:67:9e:fd:96:5c:9d:f3:13:35:9c:cf:4e:
                    d4:d6:0f:ff:28:d8:db:71:5a:0f:65:de:f0:b9:c1:
                    09:91:0c:57:af:75:90:d1:37:ed:3a:d3:6d:b5:43:
                    96:b6:ed:36:11:76:20:01:2b:3e:61:b1:4d:5e:5b:
                    06:d9:df:12:dc:15:ef:3d:45:47:a6:b2:70:a0:44:
                    6f:66:09:ea:a6:dc:56:99:1a:c9:17:9e:ee:88:a5:
                    a6:3b:d5:06:b9:89:45:91:3d:65:7f:a5:f6:10:93:
                    28:74:db:8a:30:02:38:24:76:27:27:b2:2e:d3:f2:
                    6d:3e:8e:43:79:2e:0a:7a:2a:99:32:0f:a4:87:fa:
                    75:c4:a9:c5:e9:1f:a5:65:23:ec:b9:1a:fe:4a:60:
                    7a:79:84:50:00:06:a0:62:8c:a1:31:b3:5c:ae:5a:
                    93:35:d1:7a:9a:d6:41:16:0a:84:41:81:8d:be:ca:
                    75:46:bb:9e:8d:07:39:79:95:18:ae:c9:83:ee:23:
                    24:48:30:03:ac:03:a4:fc:35:24:42:47:61:9a:28:
                    fb:52:9e:94:03:a8:5e:d2:da:38:e0:22:c5:ed:98:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:26:43:E3:60:DF:78:BF:89:58:4B:E6:6C:0D:9F:E1:7E:AB:62:3E
            X509v3 Authority Key Identifier:
                keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6d:8c:d1:54:50:bd:71:bf:b9:4d:04:07:48:bf:35:37:5d:
         af:96:b0:75:69:e4:d5:de:ad:1d:ee:02:39:f5:ec:c0:8d:b4:
         c6:01:31:b2:7e:ce:c1:61:b0:6b:1c:50:8a:99:95:07:e7:87:
         ef:e0:12:2c:64:9f:e1:1b:05:01:01:3a:5f:6f:ca:ac:54:49:
         df:bb:69:fa:cf:dd:cd:90:07:ff:e0:24:c4:69:01:93:8d:e5:
         4c:92:a1:1b:94:80:fc:e4:1c:49:4f:89:9b:e9:11:16:2f:5c:
         6b:12:b1:db:fa:a5:38:13:54:6a:e3:f7:49:16:d7:3f:52:47:
         66:7b:ae:67:fe:ca:ae:6c:f8:ec:c0:ec:ed:2d:ee:2f:a6:a7:
         f3:c4:8a:ae:19:a8:e7:0a:19:5f:44:f2:5d:07:62:90:49:0a:
         f5:a4:b0:f4:91:8a:d6:6b:d7:70:74:75:42:ea:8d:2f:0e:a7:
         8c:81:bf:99:27:92:d2:b0:b8:78:ed:ec:b0:94:85:3e:38:ad:
         36:32:7d:2d:6e:7c:ca:dd:46:9b:24:d1:21:40:55:d1:94:45:
         38:aa:22:52:11:0d:7b:dd:67:94:5a:ec:78:16:a4:9d:55:1d:
         c5:8d:ae:27:b6:c9:6f:54:d5:1c:e5:6e:f8:2d:a5:80:ce:4b:
         46:b6:62:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----