Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
File:                     SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json)
Hash identifier:          NH3fc/ZHLRxrBYEj6eL3MWV7JNclPvWNDnjy5mBJ0qQ=
Subject key identifier:   63:97:92:EC:57:99:96:4D:22:A8:79:8D:B0:45:79:64:A4:45:84:FA
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Certificate issuer:       /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial:       01962F07033F1FC762F693C1BAB38F1DDA49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: C-CN_JaiRgSKbzPlXi0Jj-g5PhY.roa (hash: ZM7c9sV798W9KVJ3kQt3+KcxqmeF+wXg6yCfeTfvBKg=)
                          2: CXC2XsvDIqaanTmqd2a1qzMnjWs.roa (hash: QAIN6LBn+W+vlGLr5cVirBbL9u+a95dTjOFvgbUMGX4=)
                          3: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: kwkPlR1bCihhnqivH5xZsMfkt0Hz0QwDyNw+xYLcf+w=)
                          4: hWRqGYVmCWMq0Y1sle0EKmWSB94.roa (hash: obdTuMexMzDiPJAN90w8Hcb2NiK0kbzvsWZeLWPpsqE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:03:3f:1f:c7:62:f6:93:c1:ba:b3:8f:1d:da:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=639792ec5799964d22a8798db0457964a44584fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:45:da:52:a0:50:11:db:8b:e2:94:1d:73:
                    42:5b:b3:50:7a:36:e1:5b:41:cf:8c:95:e4:bd:03:
                    35:8e:be:35:42:de:02:37:ea:cc:7c:df:d4:47:97:
                    b2:0b:60:5e:06:1c:5f:bc:ff:5a:af:d5:17:1c:d4:
                    04:04:56:1d:c6:ce:11:4d:58:05:7b:53:71:b0:57:
                    e4:fa:44:7c:a5:f3:b7:c5:3f:09:d1:19:2b:b8:52:
                    40:d0:86:8e:fb:35:2a:65:f5:e7:33:e6:1d:f5:4d:
                    f1:10:1a:31:5d:6e:56:85:72:91:96:a6:09:5f:7f:
                    2e:42:b8:64:bd:82:d6:02:52:82:82:74:a5:36:18:
                    03:14:88:96:ec:07:20:5f:ac:f5:89:09:02:eb:97:
                    b9:e7:14:20:bf:3d:7a:f6:c8:5c:38:b3:eb:10:91:
                    a6:f1:fa:d9:e7:bf:b8:b3:ee:88:0e:5c:a5:5e:fd:
                    0c:4a:33:ec:08:77:63:cb:1e:03:0b:af:02:24:af:
                    2b:a5:41:83:05:e6:c0:05:4b:7a:f9:c1:44:bc:1f:
                    69:26:68:49:77:64:31:a9:e0:f7:27:23:4f:82:4c:
                    ba:f5:4f:b7:54:ed:1d:2b:39:d1:13:44:90:af:ce:
                    9a:d1:66:dc:d3:45:48:a2:5f:5e:7a:03:fc:ad:4b:
                    41:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:97:92:EC:57:99:96:4D:22:A8:79:8D:B0:45:79:64:A4:45:84:FA
            X509v3 Authority Key Identifier:
                keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:86:86:64:f3:1f:5a:f2:92:5e:fa:47:3c:11:15:a5:fe:15:
         43:79:0a:18:68:fe:5e:ac:bc:3d:c8:b3:49:b5:ae:55:1a:d1:
         bb:ad:6c:ce:e2:e5:b1:38:65:6d:a6:ac:1c:7b:a4:4a:25:e2:
         59:28:6c:62:e6:d6:5b:84:f1:86:a6:2e:73:f5:66:ff:6b:83:
         7d:ff:e4:2e:5e:af:5c:93:d6:b4:6b:d2:02:a5:bd:c5:00:d9:
         15:49:3a:82:cc:3d:bf:2b:f3:06:31:35:0e:04:ea:68:78:1c:
         6b:72:0b:04:8a:f4:3a:3e:0d:95:a6:58:21:7a:e4:1d:59:cf:
         e1:7a:da:a1:90:96:88:77:0a:8f:e3:e7:29:0b:36:62:e7:37:
         f5:cc:33:cb:af:f6:02:ea:68:bd:63:ae:23:ef:ae:2f:78:85:
         d2:e5:36:8c:8e:d5:06:30:ef:53:0e:c7:cb:d5:f4:20:2f:13:
         fa:7a:3a:89:c0:1e:e9:8f:3d:ab:25:33:f6:66:9e:9e:a6:4d:
         8c:df:85:48:24:af:da:f6:6a:31:00:7f:1e:19:a3:da:ac:22:
         a5:34:30:35:0b:ec:8b:27:7b:1c:5b:eb:e0:8d:1b:57:60:15:
         ff:af:6c:0b:7a:5c:0f:9c:64:4a:66:71:ff:c1:d7:66:e4:15:
         79:31:5e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----