Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
File:                     mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json)
Hash identifier:          gRshFhrVSWOP4aX/PC4JAVdRgr5IrzAMuU37eWIpwOI=
Subject key identifier:   AF:74:98:34:A0:56:0C:27:08:99:CC:7C:4D:53:37:11:9F:8E:35:ED
Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
Certificate issuer:       /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Certificate serial:       01962E9871FBB2A1B6EF7BD5EDB7EB4EE9A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: CxGOoBY5YoTyd6Nu8KyBbb6HwB4.roa (hash: W6T/EKpt1B07PivG7xwB9X1O2PEBzOLgzqiyKvlh3q4=)
                          2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: aQ5I1cE33sYAuMczUnfT9llK3ualvqOIM6IB7iMOc5A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:71:fb:b2:a1:b6:ef:7b:d5:ed:b7:eb:4e:e9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=af749834a0560c270899cc7c4d5337119f8e35ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1b:65:73:b0:e4:fb:a9:a2:b3:4a:bc:f9:87:
                    76:f6:1a:0c:28:e6:ae:96:41:a7:3b:b7:07:37:ea:
                    2c:fd:0a:0f:4c:c7:ee:a2:39:d3:45:d6:e7:c8:b1:
                    8f:cd:21:42:2c:b8:2e:31:d7:6c:22:61:3b:3e:8f:
                    d8:a8:25:b9:dc:9f:1f:82:68:3b:95:ac:32:0c:83:
                    21:3e:9b:1d:a3:ae:8c:92:cf:5d:ea:ca:82:d8:8a:
                    39:03:7a:03:4c:4b:50:3f:de:67:4f:ff:57:74:93:
                    98:8e:4a:a6:81:ff:14:66:34:3d:2b:07:6b:fc:4c:
                    31:51:22:2a:11:f2:a6:2d:3b:75:cf:1d:01:45:79:
                    35:31:42:fa:2a:a4:6b:08:16:1b:ed:4f:81:b5:c4:
                    4c:43:4d:90:80:af:8a:15:80:4b:5f:27:5b:92:87:
                    20:34:f7:ab:ea:d1:2b:3c:be:c1:05:96:35:d4:42:
                    c1:1f:e4:cc:d0:cf:22:56:1e:b2:27:4b:c2:28:71:
                    01:d3:cc:8e:a0:f2:f6:ce:ca:0a:fc:e8:d2:78:05:
                    e1:8b:24:5d:bb:fd:f7:fd:51:c8:b3:c4:74:1f:23:
                    ce:84:de:8f:71:2a:0e:82:f9:ff:dd:f0:a6:22:36:
                    f9:c6:69:f0:26:66:5a:e7:d1:89:1f:e6:4b:a7:4f:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:74:98:34:A0:56:0C:27:08:99:CC:7C:4D:53:37:11:9F:8E:35:ED
            X509v3 Authority Key Identifier:
                keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:77:1d:05:da:5f:22:01:f6:97:4f:b7:71:6b:1e:9d:b6:2a:
         ab:9d:62:ad:aa:52:ef:88:99:15:11:07:c7:62:1d:09:1a:8e:
         4f:a2:b3:2b:2c:a3:fc:c4:ba:09:c3:19:6a:ed:38:e3:36:69:
         13:bf:d7:dc:cb:41:fd:a1:23:27:cc:8d:5d:4c:37:8a:33:45:
         af:57:54:c5:a2:9b:08:14:bb:58:35:27:cc:2f:7c:36:6e:09:
         4e:a1:a4:97:f8:fb:35:6f:40:df:8f:f1:99:43:61:4d:89:8d:
         5f:19:0e:65:22:6b:34:80:03:db:0f:68:a5:40:55:ad:55:e2:
         48:54:30:7b:18:22:d0:88:5c:6e:ba:8d:bc:1d:d0:63:b6:d2:
         e9:e3:c3:f2:87:97:81:0b:e9:dc:68:89:83:3d:0e:c6:12:09:
         65:d8:67:a1:8f:65:a4:63:0d:69:22:1c:d4:38:6f:d9:c7:a7:
         50:9e:c2:0c:19:c8:13:22:ef:e0:71:0f:bc:10:0c:48:c0:da:
         42:11:5d:62:b9:8f:1d:9b:10:91:63:f7:5a:6d:e3:dc:7a:3f:
         df:14:1e:46:00:74:77:0f:04:ef:f8:a0:b0:30:7d:46:c4:f0:
         a9:5b:e3:34:ed:79:f5:6d:28:8d:56:a7:b7:d7:e5:3a:46:ea:
         73:2f:ff:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----