Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File:                     MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier:          6xPtD2aTVYx/HwR/LgasqGPxRB0U8+YiuRwUFr++JfU=
Subject key identifier:   5E:D4:A8:13:41:C2:27:10:7C:EF:FF:6E:2B:86:C7:E0:C8:82:A2:1F
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer:       /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial:       01962E99B9A4E1534A20D5A5C557AD25F3CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: ApyGylUq9XnJnWFVsfj0zntPv2A.roa (hash: J/AU6L4U60tQsws5n8ktoibPaB7afggy7L2/aS0YmuI=)
                          2: GebDZHzgUSVpcN28Yg77a-VI06g.roa (hash: dm+f03y/iSx5h5jyotT9d+cvRSI3pxxJ+UatUa1LFiM=)
                          3: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: +FKBzHcvxKJr3SzyOYzdHVT5SP9QFYQdochTSkBmcPM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b9:a4:e1:53:4a:20:d5:a5:c5:57:ad:25:f3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=5ed4a81341c227107cefff6e2b86c7e0c882a21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:38:1f:74:5f:fa:51:6b:6a:f0:b2:05:4e:d8:
                    ac:e6:7f:66:a4:a6:3b:f5:e1:c9:cc:d2:99:18:45:
                    31:09:51:06:4c:c1:da:f0:2b:1a:2f:93:12:5d:4f:
                    27:e3:a4:47:38:52:5b:a8:b0:20:4f:35:ff:07:17:
                    cc:b3:f8:75:67:60:13:2a:dd:15:54:c5:82:e6:9f:
                    e5:f3:ce:53:53:a8:cc:72:6b:2e:35:1f:8f:3d:4d:
                    ba:d2:ba:47:54:e6:71:ff:82:12:18:25:f1:82:52:
                    91:3b:85:7d:0b:70:72:86:c2:61:a5:75:d2:72:5d:
                    16:c9:9b:b1:7e:19:f1:00:b1:aa:58:7d:96:ed:3b:
                    33:89:6c:21:01:7b:16:f0:40:2e:4e:49:5f:7e:46:
                    d9:03:3b:2f:99:e3:1f:f2:78:10:ba:46:c1:24:a0:
                    9f:d9:e0:bc:88:67:7d:df:79:95:f4:b7:09:2f:4d:
                    e5:5c:0d:69:83:f8:fc:e0:31:8d:9f:96:b9:2a:95:
                    63:cc:30:09:c1:a1:e2:f6:eb:50:d1:b9:24:32:7a:
                    5d:44:09:a6:4c:2c:d2:1e:76:1d:93:82:d0:5d:21:
                    98:48:7f:e8:4c:3a:75:49:63:49:4c:2c:ee:52:8f:
                    50:b0:c2:4b:de:5f:a3:78:71:fc:77:92:58:9a:3a:
                    45:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D4:A8:13:41:C2:27:10:7C:EF:FF:6E:2B:86:C7:E0:C8:82:A2:1F
            X509v3 Authority Key Identifier:
                keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c6:01:ec:fd:15:29:4d:61:a1:95:29:81:45:30:6a:62:8d:
         07:5c:1e:05:1c:35:1e:2a:5e:50:f3:6a:d7:84:69:e8:1e:62:
         9d:43:42:1a:62:96:27:bf:57:e9:b5:f9:ce:d6:30:c2:69:00:
         d4:10:49:e6:8b:ec:4e:15:5d:f6:e0:14:82:5f:1a:d3:94:e7:
         68:1c:ee:84:97:c2:0a:f4:18:09:8d:9f:20:c8:5d:7d:41:29:
         31:e9:57:2f:6b:49:5c:e2:6f:d7:15:e8:28:2b:f1:26:5e:b0:
         d2:a0:c1:ef:b4:33:75:1e:26:c9:6f:4a:1a:0a:fa:f4:d4:47:
         5e:b6:fd:f3:5d:66:5a:6c:44:3c:13:e0:30:aa:ca:b1:6d:67:
         db:e7:fb:c5:f2:75:d6:d2:7a:e8:a1:49:d7:4d:e4:0a:14:bc:
         7a:0c:ab:28:ab:e6:db:2a:d8:7b:eb:cb:c9:e0:39:aa:62:cb:
         69:7e:6b:27:d4:b3:66:e0:dc:d6:fa:8e:f8:e2:33:69:f8:9b:
         6c:1c:23:48:43:eb:ce:9e:04:a1:d4:a8:c7:f9:c8:42:4d:31:
         02:cd:b5:ae:de:ee:25:d2:e9:df:20:a2:b4:98:74:3d:40:28:
         3e:c6:32:d5:87:72:a7:71:ee:55:a8:45:19:57:f2:58:89:76:
         a5:e1:3a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----