Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File:                     pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier:          3W/xjPYov/W0lyQcYiZpnsahBHFnL5JFOjlqkYodpxg=
Subject key identifier:   4D:A0:92:F4:30:F6:AA:A7:9D:99:62:7F:8D:7B:BB:1D:28:C6:94:E9
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer:       /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial:       01962E2B3C4B0AB9AC766205D39F4C134305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number:          1013
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: UxzS6/8WsUjZvXFHfCT4Y56lvk0jL8wz0fyn8wMtylY=)
                          2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3c:4b:0a:b9:ac:76:62:05:d3:9f:4c:13:43:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=4da092f430f6aaa79d99627f8d7bbb1d28c694e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9e:3f:46:38:41:28:b1:9c:50:6c:6c:ed:45:
                    b2:e3:34:cf:29:12:3f:37:60:c2:af:0c:5a:6f:b8:
                    12:6c:6c:ac:8b:1f:7d:ff:da:00:a7:83:20:f5:62:
                    18:60:d9:3f:de:2f:77:36:66:19:fc:d2:6f:2c:44:
                    ed:54:2d:ee:06:3a:5e:c0:9b:38:08:07:cd:10:bf:
                    e5:c9:91:ea:6b:3c:c2:f3:a1:87:d6:5c:bc:c2:db:
                    f0:af:89:8b:92:4e:6f:6f:fb:cf:75:50:1b:a7:e9:
                    e7:b4:96:fa:5b:6f:d0:77:f0:5f:c6:8d:be:ee:d7:
                    c5:7f:3c:f9:f5:61:70:9d:14:b4:e8:bf:c5:32:88:
                    a5:6a:e5:54:1f:ab:a3:72:0e:19:a1:5d:c1:7f:f9:
                    a1:1c:79:e7:82:1b:c0:f3:f4:2f:00:99:5e:f3:77:
                    87:73:83:1b:8a:4d:22:01:dd:68:7c:fe:8e:13:6b:
                    48:93:93:a4:bf:c6:cf:f0:be:a9:fa:73:dc:17:03:
                    fe:c3:cf:7f:f8:1f:13:8e:9e:fe:97:6a:ab:01:78:
                    96:5d:2c:b3:f3:ef:2e:60:34:9b:5b:79:20:22:08:
                    96:c3:68:d7:38:05:1c:b3:01:a6:c5:11:b2:b5:a7:
                    98:85:07:65:b5:2d:8b:51:fd:5d:1c:00:c4:ee:33:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A0:92:F4:30:F6:AA:A7:9D:99:62:7F:8D:7B:BB:1D:28:C6:94:E9
            X509v3 Authority Key Identifier:
                keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:31:38:03:b1:b2:69:37:9c:c4:56:7f:c7:2a:79:d7:09:2e:
         87:96:e3:18:9c:64:f0:11:be:b1:16:30:1b:2e:bf:da:d0:48:
         ec:3c:cf:8b:31:7a:3e:a0:72:27:2d:63:1e:09:b7:ce:c1:06:
         0f:fe:c6:98:10:bf:32:98:a9:e4:f3:53:31:7f:b2:72:cc:68:
         f2:3f:23:26:71:50:1c:bc:73:1b:0d:b2:39:4b:32:19:01:02:
         56:67:0d:09:8b:38:8e:bc:a6:4f:69:fa:9e:75:2e:a2:bb:4c:
         ef:de:f7:d9:a9:55:a1:d2:3a:6d:11:df:ee:f5:45:5f:05:ec:
         cb:43:f4:aa:ed:c1:77:cf:a1:e1:a3:ef:b5:1e:6d:64:46:db:
         d3:0b:18:e6:e0:4d:75:0f:a6:c3:40:cb:4e:ca:ef:4c:e9:75:
         b3:d6:13:74:71:11:93:7b:d2:a8:c7:c5:e6:1d:5d:96:58:57:
         92:db:38:2a:ac:5d:4a:6f:da:ed:77:b4:9b:f5:ce:9e:18:4f:
         88:db:c1:3d:14:93:9b:d7:0e:5a:ad:9f:99:fb:50:97:9b:e9:
         ba:94:5f:27:08:73:11:32:7e:24:be:c6:8a:9e:4b:da:0c:df:
         29:d9:61:19:12:13:7c:7e:37:db:54:53:26:d8:b4:b1:a7:86:
         69:9c:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----