Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File:                     totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier:          YolUoAE2vNfIf4H99KiPgTW361khYj42LiyCkhrvOow=
Subject key identifier:   18:90:2C:FF:9A:97:2C:1F:18:17:1F:29:90:D2:2F:8E:70:03:A8:33
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer:       /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial:       01962F74DCD2D157D1136530E604FCD54A37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=)
                          2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: XLPH6MdyzAaeHBWpE3KK4ZGLN+t5qVZfM0hRYz8zrgI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:dc:d2:d1:57:d1:13:65:30:e6:04:fc:d5:4a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=18902cff9a972c1f18171f2990d22f8e7003a833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:8c:bb:df:77:68:d8:02:03:b5:f9:54:d7:
                    bd:2a:1d:b3:60:35:17:f9:b5:a1:b6:32:f9:0a:53:
                    d2:d5:0c:52:3a:4d:a2:47:ca:9d:fc:d4:cb:9f:bf:
                    2c:10:da:98:d8:fd:7a:a3:53:87:c5:23:78:67:0f:
                    f6:54:3b:5f:66:60:9d:ae:58:04:36:87:7a:34:5e:
                    d0:5a:b4:d5:90:4e:ff:47:fa:3f:3a:c7:64:f2:bf:
                    f8:13:bd:c1:a1:df:88:72:7d:80:96:43:93:64:1b:
                    4c:1d:25:02:a7:04:68:08:de:70:3f:1e:9a:bc:cf:
                    89:ea:86:58:03:24:ff:df:c3:78:3f:27:00:22:a9:
                    bd:e1:53:77:66:e2:ad:d7:81:4e:1e:23:01:74:ab:
                    82:13:f7:40:a6:5a:1d:ac:29:fd:8a:09:05:87:82:
                    05:57:cb:81:1b:ee:57:26:4e:de:f5:b4:19:c6:b8:
                    17:cf:64:17:85:95:c8:15:32:81:2a:b3:bc:58:fd:
                    45:38:2d:97:09:b2:1c:96:f8:ad:8f:25:a0:bb:74:
                    2f:f5:bb:3b:9f:b2:ef:80:62:85:cb:a9:9f:cd:39:
                    e7:bf:90:9b:46:38:bb:98:a2:62:ad:2c:59:e7:ac:
                    53:bf:64:c3:08:d1:3d:d6:4f:ba:99:86:48:e4:4a:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:90:2C:FF:9A:97:2C:1F:18:17:1F:29:90:D2:2F:8E:70:03:A8:33
            X509v3 Authority Key Identifier:
                keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0a:5c:0e:18:55:f7:4a:fa:77:9a:72:5f:79:1d:1c:bd:b4:
         0b:bd:fd:1f:c1:1f:51:5d:57:6a:5c:ff:6b:2a:75:66:39:69:
         5e:d4:9c:cd:83:ba:34:4a:58:b0:41:cb:7b:8b:a7:03:69:28:
         c7:00:63:7b:ee:82:a3:58:64:a9:69:84:d9:a8:0b:20:60:4c:
         bd:75:3a:fb:b6:c5:0a:f7:4e:90:40:93:99:4a:34:a9:cf:d1:
         88:95:e9:a7:25:17:8b:fb:01:dc:b8:d5:37:0f:87:dd:d6:76:
         4f:d8:34:fc:6c:eb:e1:6d:fb:3a:17:b8:06:02:d8:6c:8a:2c:
         a6:67:d8:fe:bc:4e:4b:af:98:d4:b2:68:25:0b:2f:04:f2:b2:
         93:88:f3:25:7c:7d:db:0a:18:c8:d0:0a:af:47:03:25:bf:de:
         5f:13:d6:d9:8a:84:d5:97:7d:aa:e5:47:f8:24:86:43:55:d9:
         cd:c1:0b:3d:93:3c:6b:e5:02:38:be:1a:ca:56:77:c3:b2:cd:
         44:1c:6b:d5:59:09:41:fe:88:0b:14:a1:f4:2f:f5:76:14:a4:
         5f:ef:ad:f9:e7:8b:90:13:f5:23:2e:20:6b:c3:41:80:df:15:
         66:19:b8:bd:82:d7:63:f5:10:cc:2e:97:f0:9b:5c:1a:01:f0:
         77:af:2d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----