Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File:                     pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier:          w8KKXofcqIqMH/K418rIIlDDBKQ0CCq1s29SBAKDwO4=
Subject key identifier:   AA:49:9A:C3:6C:27:7E:C5:E0:BF:7E:5B:9E:32:5A:DF:06:CF:D4:C3
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer:       /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial:       01962FAB167F2D58B4D3578263DC5217BC72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: 561vyQubUBVe_MLgzSiqqYxU6_Y.roa (hash: 6HivC1fxPXMlCdAVu0fVBq06y4Hg53XB3H7/WZM7Ul4=)
                          2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: Bef+k3X4BO4zx+MX3M/S9dqfTOYsWXhzXMh1a46/qlA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:16:7f:2d:58:b4:d3:57:82:63:dc:52:17:bc:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=aa499ac36c277ec5e0bf7e5b9e325adf06cfd4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:34:78:25:ba:36:99:4b:ee:ca:53:13:a8:
                    11:0e:a5:51:1c:da:e5:70:1a:f1:05:2b:31:5c:9e:
                    f9:f1:e0:e7:d9:1c:4b:af:51:56:56:c9:de:0c:e2:
                    6d:39:d6:1a:23:85:de:c3:cc:85:30:98:8b:db:bd:
                    19:0a:cc:57:c6:f4:12:4f:12:ee:bb:07:9d:06:4f:
                    0e:e5:f4:04:a3:89:9f:35:a3:08:c5:f5:0b:f0:44:
                    31:cc:93:49:b1:be:3c:34:6f:41:a3:04:66:4a:9e:
                    d2:32:78:29:e3:78:56:ad:39:fc:14:1e:fc:00:5b:
                    dc:5b:88:69:67:0a:b6:4c:a7:39:69:0f:30:c3:18:
                    4b:9e:93:e2:4d:29:59:de:04:e2:1a:89:0d:cf:bd:
                    fc:b5:ba:66:31:c2:a2:ce:8e:9d:73:27:82:51:dd:
                    b0:f4:d4:41:dd:e0:d6:2a:f9:44:1f:25:90:43:73:
                    91:5c:a6:db:9f:06:01:fa:cc:97:74:c6:51:19:21:
                    12:ca:6e:f8:d7:61:02:2f:21:f0:88:5c:5a:59:0e:
                    c1:51:85:5d:44:b1:9a:89:05:12:89:8e:7f:4f:49:
                    2a:ae:a4:36:f8:ca:dd:cf:e6:42:6d:00:1f:73:cb:
                    ea:93:bf:f2:50:b2:dc:f3:e0:29:1b:1d:03:05:cb:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:49:9A:C3:6C:27:7E:C5:E0:BF:7E:5B:9E:32:5A:DF:06:CF:D4:C3
            X509v3 Authority Key Identifier:
                keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:0f:fb:ad:dc:77:6d:0e:88:89:81:36:1c:ce:96:50:fa:
         b9:53:73:66:65:0c:1b:3c:99:4c:a0:b5:5b:c6:19:a2:bf:33:
         5b:74:5c:ea:be:f7:29:5c:60:6d:5c:0a:0e:47:74:06:bd:5a:
         b6:c6:a0:a3:0c:25:d6:80:89:03:2e:e7:f1:41:52:8f:2a:a8:
         8f:c7:7d:03:1b:77:c8:76:6c:16:46:ba:c5:08:38:8f:ec:34:
         0b:54:11:e8:88:eb:24:0b:6d:c4:6a:f6:9e:dc:58:e6:9d:b4:
         6e:74:17:89:30:b9:d3:c2:25:fa:b9:dc:d3:35:e9:3d:db:90:
         0c:e4:9d:cf:71:1b:eb:65:82:46:e9:99:68:55:db:da:dd:06:
         8c:17:df:73:12:fc:7d:aa:9d:c9:b5:68:43:79:eb:9d:3f:2a:
         1c:dc:e5:e6:f0:74:6d:74:6a:40:83:53:3f:26:a1:50:bb:87:
         66:46:16:3b:27:99:56:ce:a2:bd:28:5a:04:80:47:50:a9:11:
         4a:db:a3:35:c2:4a:f6:cf:d2:0b:fb:9d:c2:79:68:33:43:d0:
         59:37:52:94:09:36:2b:8c:20:cb:6f:fb:61:6f:4d:04:94:be:
         93:99:92:2a:e9:16:b1:05:1d:7e:6b:7c:2c:a0:4f:7b:ee:33:
         2e:f1:8d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----