Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File:                     S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier:          Es19QLn8chtI36OtCl2cDuULm4GENeHU48R44et8LHk=
Subject key identifier:   61:60:F9:3E:C4:EA:CF:63:7B:E0:7C:39:BF:87:E7:D3:78:FE:EE:6D
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer:       /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial:       01962FAB63F78A252DDCAA0811FD6B369CD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: 4KEPqzPMpSoYq_-etsWBx1UVT9A.roa (hash: Qyft6AJjQ5gcWAFAYWi3WKCXr3fTm1AuVg1MESeGi2E=)
                          2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: 4BSnT3hsvJgvx3ra9OlOgqvVP3Bwyx+H406NntzVwG0=)
                          3: pPYYG56VOORuxgT5M_ZuhSvmRfg.roa (hash: UBXy6znS5i9dvxzfkJnX+PZpKfrnJ0My4xHbPC9KdaQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:63:f7:8a:25:2d:dc:aa:08:11:fd:6b:36:9c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=6160f93ec4eacf637be07c39bf87e7d378feee6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:59:c8:ff:f0:f4:24:54:9a:b4:ab:fa:f6:46:
                    cf:90:58:90:61:1e:78:62:64:57:97:59:36:f8:28:
                    c7:0e:a6:2f:2b:7c:6f:18:b8:2f:ff:3c:69:b3:8b:
                    58:11:14:ef:2a:51:9c:83:fc:23:80:ff:33:72:4a:
                    1f:d5:39:1f:23:57:17:d3:d6:c5:90:5c:cc:be:25:
                    8f:b1:c9:72:dd:ff:5f:68:95:b7:d7:b3:65:b7:3d:
                    6c:fb:68:42:91:50:90:97:35:36:82:81:7a:6a:69:
                    40:9d:8e:8d:ad:f3:fe:9c:f8:ad:c5:93:6c:a1:1b:
                    25:b7:47:05:66:ac:31:e3:f9:14:9b:9d:b2:bc:e7:
                    ed:17:72:9e:e3:27:51:5a:33:c3:91:db:25:d6:3b:
                    ae:c0:bc:23:e9:3b:84:0e:38:17:5d:52:0c:7a:22:
                    f8:c4:37:2a:2c:99:5e:6d:ff:6e:e4:d2:af:b6:5a:
                    09:32:9a:ac:0a:a6:fa:99:2c:63:2e:f2:16:d6:0b:
                    bd:1f:dd:15:bd:9c:1d:67:79:69:ae:5e:88:28:11:
                    14:62:d8:e5:6f:8a:54:5e:15:48:62:75:69:f5:5e:
                    39:35:ef:47:43:b7:88:bf:c1:1f:5e:95:17:09:3b:
                    11:a9:1b:64:95:5a:27:cb:cb:21:3f:b4:3d:97:5a:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:60:F9:3E:C4:EA:CF:63:7B:E0:7C:39:BF:87:E7:D3:78:FE:EE:6D
            X509v3 Authority Key Identifier:
                keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c8:11:5a:bc:2a:32:65:f9:5c:63:52:c2:7e:da:5b:f5:46:
         b1:2f:0a:93:db:99:35:d6:bf:fd:5e:43:3b:df:b3:9f:6e:0f:
         a9:fd:27:80:0c:2e:ee:65:d2:3d:41:49:50:3c:71:f2:6e:36:
         df:f2:d9:22:c3:14:7b:96:b8:38:d1:77:b9:1a:1a:19:6a:ef:
         26:6b:ef:c0:fc:4c:4f:3a:db:93:64:47:2c:db:66:1c:df:5a:
         e5:95:c3:11:7e:72:64:59:6a:77:c5:e0:21:38:8d:d8:75:87:
         2a:7b:64:f5:80:68:51:db:69:9a:55:e4:50:93:19:b8:2f:c0:
         78:80:f9:10:0e:f9:db:fb:cd:7f:d6:f3:f8:9c:ff:d7:b7:82:
         a4:03:f3:56:b4:e7:0a:2d:2e:aa:94:d1:0d:a9:4c:83:08:0e:
         16:ea:ff:29:72:05:57:41:3e:00:c6:2d:07:e2:cb:bc:79:65:
         8a:26:40:08:15:67:c6:63:e4:ef:18:eb:e6:28:b4:b1:dd:7f:
         d9:e0:a3:34:37:6e:d5:2e:52:63:34:7d:8b:3d:24:a8:b1:c3:
         32:81:ff:85:99:63:58:46:e6:0b:d5:e1:5d:29:ab:18:a7:0d:
         94:94:c7:60:6a:4b:17:c5:c7:54:85:33:31:ff:e6:7f:7f:67:
         16:46:91:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----