Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
File:                     mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft (raw, json)
Hash identifier:          cYzu8wrSBIkRyhTS/SuvGFy6A33f5K/O0Yz66+vTdik=
Subject key identifier:   F5:4E:23:7E:88:ED:C8:F4:00:43:1C:E9:62:07:15:A8:A2:E8:D8:BF
Authority key identifier: 98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3
Certificate issuer:       /CN=984503d4d18140b92aa8923193101d0f3eafe2c3
Certificate serial:       01962DF411C4ECE720C87894F1B59670C916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
Manifest number:          0F45
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: CtjT3jVnXWmD83KR_4TWffaI4JQ.roa (hash: flK9Ib6/h/dfOz32Mluz/WYLhTwywQZxRxjgsE0wek0=)
                          2: mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl (hash: DqV0/sIRJQgu6QRDUaVhanZOvWVEWggcHtKigDYjtpI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:11:c4:ec:e7:20:c8:78:94:f1:b5:96:70:c9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984503d4d18140b92aa8923193101d0f3eafe2c3
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=f54e237e88edc8f400431ce9620715a8a2e8d8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:2a:85:f7:7d:e3:6c:c9:08:26:f2:95:09:
                    d7:c1:ef:69:df:8c:07:ae:40:b0:20:80:ea:f9:24:
                    cb:c9:83:31:bf:87:7d:85:2b:70:a8:38:4a:c6:24:
                    c3:94:73:6b:03:4b:0d:41:d6:a5:26:dc:ff:70:fe:
                    cb:1c:0f:43:ca:b8:21:c2:d4:f2:e1:29:82:ac:c5:
                    52:a7:be:08:d1:c2:1e:7d:f8:0d:f0:60:a3:79:7e:
                    16:43:c8:0c:17:b1:b0:9c:f0:02:e4:cc:3b:1c:d9:
                    4d:d2:1d:c8:74:d9:85:44:a9:ea:37:ef:d9:6e:d5:
                    38:84:01:0b:ca:2c:9e:b5:96:27:da:49:ac:56:66:
                    20:59:d2:8c:7b:9b:ff:15:ec:de:08:0a:89:aa:ca:
                    84:dc:6a:2d:47:8e:e5:81:6d:ac:bc:67:36:c6:e3:
                    ce:6e:af:13:2f:1c:51:7c:cc:4b:4d:fb:b5:a5:8b:
                    07:49:23:01:2e:db:fb:ba:ef:58:b1:9c:2f:f4:fa:
                    21:8b:d7:6d:09:4e:ce:44:b7:54:db:2c:e5:a9:9d:
                    a8:bf:3c:82:94:8c:97:2f:6a:29:96:6b:a9:0a:bd:
                    28:c8:92:ee:ed:b5:53:74:83:2a:f0:6c:48:22:4f:
                    e1:fc:18:85:29:8e:4a:0d:8a:3d:2c:81:69:77:a9:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4E:23:7E:88:ED:C8:F4:00:43:1C:E9:62:07:15:A8:A2:E8:D8:BF
            X509v3 Authority Key Identifier:
                keyid:98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:19:17:1c:0b:72:1b:6f:fb:fc:1f:d9:cf:d8:f8:59:05:70:
         04:e9:0a:8a:4c:ff:3b:b8:f2:6c:4c:fb:ec:1f:74:92:03:2c:
         20:a7:62:92:3b:0b:80:38:26:2c:10:51:3e:ce:15:65:4f:ab:
         a8:cf:77:ad:da:2c:f2:af:eb:9e:66:6b:1d:54:69:0c:66:79:
         4d:60:c8:0f:9d:08:c5:e6:53:2c:02:09:aa:89:95:93:9d:d4:
         9e:ac:ff:32:71:40:ef:36:9e:c0:42:13:d5:98:a4:10:82:04:
         04:00:f8:ca:15:7d:16:cf:08:24:de:fd:52:61:70:c2:08:15:
         1e:e8:76:35:72:b6:ac:fc:72:25:68:0e:08:8b:22:72:9c:26:
         42:13:c7:1c:78:fe:37:35:1e:94:1f:82:44:dd:15:cd:3d:aa:
         8a:29:83:99:d7:a0:a9:31:d6:5a:0e:bf:3a:f3:db:06:66:f6:
         31:06:e8:bc:13:5c:ef:91:4f:ca:b7:6c:81:4d:91:bf:bc:9d:
         16:0f:34:d2:a6:8d:57:9c:85:ab:59:4f:6a:6f:73:ca:2b:a8:
         74:8a:7d:d3:2f:04:e4:2b:ac:5c:f6:bd:b1:7a:92:67:1b:cf:
         f1:9d:52:f6:85:73:92:13:0a:76:d5:ad:2d:0e:58:44:fb:0e:
         63:a5:2c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----