Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File:                     RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier:          8idFYv988o42rIay9uf8MUe61AKOpbeQnmUlR5i7WpM=
Subject key identifier:   70:F5:04:A0:38:06:DA:FE:AE:DF:59:CD:B1:98:2D:D8:8C:89:C0:4D
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer:       /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial:       01962E2B33B05533C11DDBAE4FAB35622E7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: KrEyLtzd_FGxXKe36EuPBXxaKHA.roa (hash: ADivn+VbvpgE3fUtfn8Xzz0qtLuBXCOdiCI9IztCcUQ=)
                          2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: T5eZoPo+R3lSyL4fZjtXk2M7Lw1XII5Iy+y3v8cf6Hc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:33:b0:55:33:c1:1d:db:ae:4f:ab:35:62:2e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=70f504a03806dafeaedf59cdb1982dd88c89c04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:fd:77:cd:8f:78:1c:8e:45:eb:9e:7f:69:
                    ac:45:c3:25:52:71:d8:c2:7b:36:ec:eb:fe:e9:95:
                    83:4d:ec:53:16:5a:c3:ba:c4:da:f6:4b:3f:93:16:
                    89:57:c0:df:38:5e:b8:56:6b:c7:3b:ad:cb:8f:32:
                    26:d0:99:7e:cd:79:a0:c6:40:3e:70:89:13:19:e6:
                    f6:6a:f6:aa:34:1f:68:a6:ec:bc:34:d4:12:59:7a:
                    bd:8c:8e:b9:68:c0:08:4e:53:e9:ae:68:d7:66:e2:
                    e2:20:f3:11:6e:60:1f:e9:93:e4:5c:73:0f:34:3c:
                    b6:60:18:bc:53:11:ba:61:02:8e:b0:b1:08:18:5a:
                    fd:5b:92:2f:56:83:e6:cf:30:9a:61:23:c3:d8:58:
                    d6:b6:e6:09:b2:b5:cd:f1:dd:ec:9d:87:f0:d0:98:
                    ff:d9:5c:f3:f3:f3:d3:f1:f0:76:61:e7:e3:89:64:
                    ac:a6:e4:48:32:81:45:53:71:c1:5f:90:6b:89:da:
                    4f:cc:dc:90:20:eb:ee:50:4d:c2:c4:8f:e5:3a:2d:
                    bf:55:44:5f:b4:99:cd:5d:66:35:31:a7:b2:db:7c:
                    14:36:e1:dd:b2:ea:c9:b7:2c:78:4e:60:7a:9c:c7:
                    fb:d6:17:97:dd:2a:64:bc:01:16:23:65:88:44:91:
                    cc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F5:04:A0:38:06:DA:FE:AE:DF:59:CD:B1:98:2D:D8:8C:89:C0:4D
            X509v3 Authority Key Identifier:
                keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:73:6a:fa:f3:6f:dc:6e:93:28:a6:97:26:57:36:49:91:b1:
         44:4f:85:0f:74:59:29:40:67:04:ca:44:10:5a:bf:b8:8c:d7:
         c9:09:31:e0:03:43:17:c1:68:ed:39:03:ce:25:ab:40:b7:a9:
         87:97:c3:bd:0a:2d:1f:27:8a:de:8a:1b:1c:4d:37:c2:ef:ff:
         c9:72:14:49:59:bc:8b:2d:7a:48:ad:c7:44:1a:de:ef:cb:1f:
         8f:2c:0b:7a:9d:4c:f7:06:c7:48:20:78:59:c9:75:55:a2:57:
         fd:a7:0f:93:eb:45:bb:72:c9:67:59:43:a3:ce:c8:72:fa:3d:
         c8:4b:6e:ae:49:c8:b4:0c:94:e7:bb:6c:c1:93:21:f5:45:31:
         47:ef:dc:ca:33:6a:54:56:36:55:96:e4:f6:d3:ae:de:d8:5e:
         dc:23:83:05:78:36:da:64:65:06:36:cf:f9:39:e8:ed:a5:e4:
         82:15:62:ae:dd:fe:e3:7b:aa:81:1c:e5:39:7e:b2:8b:4f:c6:
         61:68:36:79:1f:d4:53:e9:66:62:d4:1c:b3:e8:a3:0b:58:a3:
         13:52:da:7c:1e:7a:5e:41:8a:f7:3a:62:5d:1b:8d:23:4e:3b:
         29:fe:8c:d7:95:a3:ed:8b:11:35:6e:9c:1c:dc:7c:03:1e:19:
         40:d7:a4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----