Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
File:                     Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json)
Hash identifier:          icvJk4y+1qr/lA2EuptpzjSpIOBpx1/5mcDaWTTBVHg=
Subject key identifier:   81:FB:91:70:6C:EF:95:60:AC:8C:60:A5:AF:B0:2B:A8:02:A5:1E:D6
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Certificate issuer:       /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial:       01962E61AA58413F6B5390828699936179CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
Manifest number:          11A4
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: 36CSh06Ox9mraK8un7y_6AAp-pg.roa (hash: jvdOxqlCRm0XFIVOcdWSce8ntia41e6Cx61qkQI3/ug=)
                          2: M9VOPO1QfWRnU4hQ9QVXASg96jA.roa (hash: irJVQjaxHBdQQuBZR03utwnIZQAJVfzNYFhhJleKRbg=)
                          3: MZ_QBnViUEyC8ZRFkedX8Rv5Crs.roa (hash: XyD021GY+KiQ98JM0NY1iLl+QMVF+YOoCbUCeu964IY=)
                          4: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: fG+PNV2GW6t0IvZLmrNkKoOJbuI5B94bisltSsEXNY0=)
                          5: inYhmF6eIH31cCbSimSwHmklnkM.roa (hash: Z7JVezrkgt/wUelYsw9uGal8TdsJiFhrzbB2ZBBaAzE=)
                          6: og5qYEWen63bomOC6zKV2-iRJG8.roa (hash: PKfcuKBaAgdkTGnezARQJkmyOyp3oz6QpSYP3CmFp+c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:aa:58:41:3f:6b:53:90:82:86:99:93:61:79:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=81fb91706cef9560ac8c60a5afb02ba802a51ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:ae:40:c5:1d:b0:c7:3d:52:a7:0e:b3:98:
                    60:44:fa:ce:79:1f:f7:c7:11:b4:b3:65:0d:4d:3c:
                    b7:e3:58:78:2c:28:17:35:e8:a4:21:87:f3:7b:a2:
                    1e:c8:4d:b4:6e:d7:85:ca:80:7a:53:e1:b5:db:a2:
                    ab:63:89:ce:d1:fc:ea:5f:9a:de:db:fe:ac:39:15:
                    38:7e:35:4c:c5:4b:be:73:58:87:74:58:e5:af:ba:
                    ef:d5:33:8b:6d:9f:ea:a8:45:66:97:f7:b0:d9:ce:
                    16:fd:37:21:72:40:93:14:5b:14:5c:45:21:6b:e0:
                    8e:ab:33:03:2a:02:e5:a7:5d:01:8d:49:48:9b:cf:
                    08:24:d0:51:ef:f2:12:1d:4d:fe:27:73:a9:e1:31:
                    30:91:36:ed:1d:7a:41:f9:08:da:c2:23:3e:94:e2:
                    29:76:3f:09:aa:76:c7:b2:40:37:0f:51:66:a9:8b:
                    5c:64:2a:9d:3a:27:e6:c6:dc:83:5c:a4:55:29:3d:
                    be:5c:16:16:f8:d2:7d:7b:d6:e3:03:33:17:0a:b8:
                    49:fb:9a:16:0b:d4:4e:3a:f1:f1:aa:bf:06:69:6f:
                    8a:95:16:58:3e:d3:26:69:eb:d9:ab:2f:a3:bc:1d:
                    42:41:ef:7d:39:e7:bf:5e:b3:1e:19:8a:41:08:76:
                    85:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FB:91:70:6C:EF:95:60:AC:8C:60:A5:AF:B0:2B:A8:02:A5:1E:D6
            X509v3 Authority Key Identifier:
                keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:81:be:0a:98:57:68:c7:62:d2:d9:7f:f3:75:b3:62:55:53:
         ca:41:03:5d:7b:bc:f3:f5:ab:a0:73:13:fc:c3:07:9b:2b:dc:
         85:3b:97:9d:65:6f:dd:63:ca:db:06:5e:7b:b6:55:8d:35:a3:
         fd:a9:2c:d4:02:9f:ca:77:6c:c2:ae:ea:47:3f:fa:69:6c:2d:
         57:1b:e2:41:19:8a:1e:35:a0:2d:b3:c0:6a:84:9d:07:75:12:
         08:20:29:0e:84:7c:1d:3a:68:ff:c7:9b:58:93:5b:7e:93:69:
         45:77:20:5f:a3:1a:b4:59:a4:10:00:a8:7f:45:78:ad:a5:0a:
         c4:ba:79:d7:f1:df:3f:74:ee:2b:c5:29:d4:f8:81:43:c5:0f:
         50:39:73:25:75:90:c7:87:dd:55:3b:9a:93:80:de:c4:12:c5:
         73:a0:52:a0:e3:a8:23:8a:69:37:fd:14:d7:00:1b:cf:77:1d:
         4e:78:96:7d:c8:8f:0f:b2:11:c0:18:68:4c:97:8a:fa:1f:2c:
         61:ed:fc:de:a0:c6:d8:d3:18:1f:ad:46:3d:bf:c4:c3:17:0a:
         4e:be:88:b2:58:f8:4b:64:12:2c:63:79:34:02:07:85:3b:2b:
         2c:d1:ff:ce:c8:fa:8d:64:d5:66:10:dc:38:3f:3f:1b:e3:13:
         95:57:fb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----