Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File:                     0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier:          x1iw/h1SuDd2eMZTIPAJbqX61uK9vT/zNPg1vGFkPZc=
Subject key identifier:   45:CF:12:97:08:C8:7B:9D:89:A6:0C:A3:86:8C:3D:C2:11:99:3A:21
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer:       /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial:       01962F3D6549C8103E1378BA1A4B73C219FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: 3YJdI+GKDMkWc/uEt4TKHgQsICu+m5urbPVmRMoWKgo=)
                          2: MJ3Ujpsu932Kq9qToC3uCXh54hU.roa (hash: l3V5KY6EuXVHlgG1l6ReQGHr0W/s/8NEtWYweJ7lAL4=)
                          3: P_fOQuoMuGlAOPCmfzTnkjBIl1I.roa (hash: 7StdsKvi1Pne8B1xArTjZazqt8/ZqEM0Iq/sVM/3q5k=)
                          4: hrAYR0420UBtvUw-GSTKs3FQjCk.roa (hash: EUwZ4vaZd8b1hNex2hrQ4tIUkpR7m+MzQOOzSNGo02A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:65:49:c8:10:3e:13:78:ba:1a:4b:73:c2:19:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=45cf129708c87b9d89a60ca3868c3dc211993a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:2a:d2:8a:9f:90:d1:f8:57:cb:bc:0f:61:
                    a0:6c:ae:9d:b9:9c:0d:9f:92:4f:e9:84:0a:bf:ff:
                    7e:32:13:1c:4c:b1:d5:44:77:a7:1b:ae:fc:1f:96:
                    f7:54:fa:76:1c:79:bc:60:2f:58:38:96:1a:4d:cc:
                    f5:6c:aa:5c:d4:58:21:b1:40:34:72:88:e9:2a:5c:
                    2e:cb:a6:c2:2c:5a:bd:ab:66:9b:9e:cf:f8:80:20:
                    19:20:1d:d9:f6:ef:fa:30:52:54:09:25:9f:be:ed:
                    aa:8c:74:b3:ae:7c:1a:94:b3:33:fd:b8:43:34:83:
                    51:52:d5:80:d1:c6:5a:78:fb:ab:e2:40:a6:ef:9d:
                    78:02:54:af:cb:64:38:5d:c8:e6:65:e4:66:2e:83:
                    32:69:c5:2d:4d:c6:4e:00:4b:71:bc:62:a4:00:73:
                    e3:e1:83:71:97:59:7d:ba:f0:4a:c5:c6:93:4c:cc:
                    60:d4:d7:85:a6:c3:d5:e3:c1:5a:3e:a6:1b:aa:6c:
                    a9:15:f5:e0:6a:f6:7e:11:fc:30:a9:12:1e:26:5e:
                    c6:3f:09:25:14:a5:86:8d:1a:ae:36:22:88:f4:36:
                    77:68:ee:4e:ec:67:d8:ca:22:b7:72:81:c1:04:39:
                    b0:50:63:eb:c7:ca:7a:cb:1e:8e:54:2e:37:36:4e:
                    b0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CF:12:97:08:C8:7B:9D:89:A6:0C:A3:86:8C:3D:C2:11:99:3A:21
            X509v3 Authority Key Identifier:
                keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c5:be:7c:70:89:37:a8:27:a4:40:4e:c4:75:7a:e1:5a:14:
         12:15:bc:e8:73:cf:0b:df:a7:bb:4a:78:78:04:17:af:8d:65:
         99:54:1c:91:18:f1:5f:1a:80:93:dd:d5:fe:c8:5e:fc:52:47:
         7c:b7:f7:37:39:1d:1c:35:75:be:82:e0:9e:dd:e9:f9:38:f8:
         dd:8c:6f:b1:29:33:47:88:1d:e1:56:6d:db:9f:1d:7c:9f:ee:
         a8:56:4e:95:1b:bc:2f:58:90:76:62:f2:0c:93:c3:68:1e:e5:
         b9:43:ae:bf:59:73:91:02:0c:38:a0:37:2e:fb:56:1e:a6:47:
         fe:f5:0d:9f:c3:5f:cf:3f:28:7c:28:a6:1b:bd:18:b1:2b:97:
         0f:d5:dd:18:c2:59:60:b8:7b:87:90:08:80:00:ba:f0:6f:98:
         5b:e2:38:fd:0b:13:f3:62:67:87:ec:ab:65:ea:8e:49:3e:05:
         d0:0d:1b:0d:c5:ff:90:02:2a:bc:b0:05:4d:91:09:2e:82:65:
         7d:eb:10:58:55:ad:dc:ff:57:5d:b5:29:f5:97:0d:41:a9:ff:
         eb:be:fa:fa:8c:9d:4d:11:15:59:49:1e:e0:00:2a:c0:ad:d9:
         70:4b:f5:ff:71:2b:b8:3e:26:53:65:7d:79:c0:09:56:bb:e6:
         f0:90:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----