Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File:                     RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier:          8k213f2yng4V9whlVS1TWYKp3MRVrZav/ZXc/E5Y2Ns=
Subject key identifier:   35:7E:90:B1:C4:08:4B:16:BD:95:92:83:32:A3:89:79:31:69:B0:9D
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer:       /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial:       01962E98DA50EBCD3765CFE77BF389FBE2D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: 3JkSKP7jBeNBJpMBSaOABWLwqrY.roa (hash: qvkM6RHQW3kH5F1/K52m/X+zUOs3qQZCWijPjerK2kc=)
                          2: I1VO7zMbx-vbjpttTgauG2K9yC0.roa (hash: +jpo7oyuZbYyl/PyBGr6vKJVEKniF9XZYZ9HT6VtMFY=)
                          3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: YNfBzUr9MtP9HieQ/VBSL0UGR0IwDjiJ5/deizYzHfU=)
                          4: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:da:50:eb:cd:37:65:cf:e7:7b:f3:89:fb:e2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=357e90b1c4084b16bd95928332a389793169b09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:09:47:a0:45:48:0d:f5:e4:80:c5:16:dd:
                    8a:74:7e:1f:3a:94:88:b5:14:8c:31:00:89:99:88:
                    1a:a2:57:7a:91:b0:16:47:e0:87:16:49:e7:db:5d:
                    ba:5f:72:be:c6:f1:1e:81:b2:36:98:50:7a:44:f9:
                    ad:5b:8b:b6:67:9a:63:ad:d4:29:06:a6:34:9f:c6:
                    9e:82:87:51:35:ce:70:23:0b:34:4d:a6:b4:61:ab:
                    ee:26:51:e5:88:b0:33:17:d6:77:36:a8:b8:05:57:
                    13:f8:00:62:bb:dc:bc:cf:cd:6e:83:5e:97:53:3a:
                    39:0e:77:53:e0:18:17:e1:e7:56:10:19:7c:b9:4b:
                    b5:94:bf:22:d7:78:53:9f:e5:27:6e:86:d4:6c:39:
                    01:ee:b2:cd:17:c3:12:3f:80:79:77:43:b6:af:46:
                    9f:38:35:a1:db:14:96:48:a0:b3:a5:ac:0a:d8:a7:
                    3c:b2:85:de:b8:ce:ef:af:49:26:c0:50:fe:f2:91:
                    3a:ba:0d:55:0a:50:46:5c:b7:0f:d7:98:15:01:78:
                    17:34:9c:dd:31:c7:f2:df:61:7d:fa:2f:68:a4:0d:
                    20:5a:b6:3f:af:57:a2:cb:cf:92:67:4b:86:d9:95:
                    14:19:97:d4:22:84:2a:d7:8e:23:1a:0d:d1:35:cc:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7E:90:B1:C4:08:4B:16:BD:95:92:83:32:A3:89:79:31:69:B0:9D
            X509v3 Authority Key Identifier:
                keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:08:d5:ed:1a:f9:db:f0:47:b6:70:74:99:b0:86:02:8e:51:
         11:69:32:fa:db:2a:5f:58:b4:7f:a5:f9:36:b4:9d:3a:c5:fe:
         91:cc:44:dc:a0:80:0b:3f:63:ba:4f:a1:90:6f:e3:99:a3:db:
         51:e6:07:3c:b7:d9:42:f9:f7:b5:47:61:8c:e9:e8:6f:61:a5:
         c4:62:1a:02:15:1a:12:76:03:a9:ef:19:94:8c:27:de:ad:9d:
         71:f1:89:33:86:b1:37:ea:4d:2d:b2:0a:e2:f3:7b:9a:b8:4b:
         60:ec:eb:4b:24:e2:ef:85:c5:fb:9d:a9:f6:3f:af:df:9c:74:
         96:f0:99:e5:8d:14:61:99:cc:9b:1a:e6:20:9a:10:ea:e0:d6:
         04:00:37:cf:4c:cf:77:bf:9c:51:3a:a0:fe:16:1a:8c:35:35:
         00:50:45:c5:23:32:15:d6:8e:94:ff:4a:1a:24:4d:ef:4f:b4:
         47:ee:cb:45:04:b6:f4:0c:a4:b6:f9:27:d7:03:b2:d0:9c:25:
         dc:02:df:06:be:4f:b5:04:aa:f6:89:43:a0:f3:7e:2d:26:e9:
         4a:31:56:43:9b:ea:6e:0a:e6:33:b5:66:4b:74:6c:c9:d8:b2:
         df:47:92:c7:31:0e:a1:35:d5:db:c4:e7:2a:64:57:f7:de:19:
         91:ea:8e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----