Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
File:                     MGwIZtwlII5sB9SiHX2AULUI1qI.mft (raw, json)
Hash identifier:          2ezf7vupO+CrGUGweFhUvDqTgw6W1brwaX9VtIPxLtY=
Subject key identifier:   CE:F0:8E:6B:4D:F3:E8:7D:A1:A1:71:7A:EB:8B:D0:C8:42:0A:05:DE
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Certificate issuer:       /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial:       01962F74DF9309BA1930945B4A1FCFC6F474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
Manifest number:          135F
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: 0cSUdPzh_fyOTfC0ruB0gTg1QhM.roa (hash: wUgynLVwcF9qr8K69Rsxkk1YVCBtq1S8/W1PvBOd+ok=)
                          2: 6ijDtJkuoccCgLkguN9W1JJhdPo.roa (hash: Sp0vA+9FLAdG8kzazXtCjmipaXXNSCP/zgC375qVZ5o=)
                          3: DhdGK18Qr8BfEi425qb4XqU3Df0.roa (hash: zUZN1xRmcwh2/G+LSnUGvmnpV/nEFzaIhdcZknHnKqM=)
                          4: HdR6Ah0Qe32r7472JEBtQ7R-uic.roa (hash: 9q8qH00PICKWGR7GNHvqSbuGck7QEOPOmn1zpnijT28=)
                          5: MGwIZtwlII5sB9SiHX2AULUI1qI.crl (hash: mtx0IwZ9fzby/8WrU4cheKbBSdfOBXpSwAsTpSt+mYo=)
                          6: TgvbB6i4HXWnjLNcKegQywUTDJ0.roa (hash: YcgfPOv/+fj5b6yQFbK2Xl9gZETkgOC07GVbs5vfuds=)
                          7: YJWzlQkM6ftNHV4yjRuuX05jZgk.roa (hash: 7ihFcpvO1ZNzg+G5DeJYt7AlezmKaK/DCjnqfua0DrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:df:93:09:ba:19:30:94:5b:4a:1f:cf:c6:f4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=cef08e6b4df3e87da1a1717aeb8bd0c8420a05de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:16:67:4b:6e:1f:98:ab:45:12:47:21:4b:89:
                    7d:dd:60:7f:a6:96:c0:1a:02:01:75:b2:65:cc:42:
                    2c:ab:d0:ed:70:aa:98:e4:ec:d5:ca:38:ad:92:dc:
                    75:7a:4b:10:44:75:05:2c:3b:f3:19:88:eb:68:de:
                    ea:6c:ea:14:85:b2:e5:e8:20:96:c5:58:93:fb:86:
                    26:4a:ae:6e:8a:6a:e5:a6:0a:d9:da:eb:45:43:5c:
                    3d:1a:03:ac:84:9b:66:da:c7:43:2a:25:17:d0:59:
                    eb:ff:b5:ba:36:76:f6:11:e2:3f:c5:51:12:9f:9e:
                    eb:11:0e:e5:0d:f0:0c:5c:93:34:b4:94:45:9e:3e:
                    87:d1:2a:f7:06:52:f3:ce:82:76:09:ce:72:a5:76:
                    67:d3:e0:95:89:2f:5a:34:3a:d6:a7:b4:52:c1:0c:
                    e9:91:99:46:2c:ad:16:a2:35:da:39:d8:0f:8b:cc:
                    78:b8:36:e1:14:08:a0:ae:02:86:7a:15:18:7b:b2:
                    c6:24:4d:4b:4a:83:66:91:77:8a:ce:53:74:3d:90:
                    f4:0b:09:26:6e:e7:5f:e5:43:4d:cb:45:f3:d5:56:
                    ac:68:53:cd:47:74:4c:34:41:9f:6f:aa:b7:60:68:
                    a6:03:4f:c5:e8:74:cd:bb:d0:9d:1b:e1:68:08:be:
                    f8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F0:8E:6B:4D:F3:E8:7D:A1:A1:71:7A:EB:8B:D0:C8:42:0A:05:DE
            X509v3 Authority Key Identifier:
                keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:1a:68:96:b0:84:26:b6:da:fc:2d:7e:4f:94:dd:cb:67:a3:
         a9:40:f5:b9:c4:1a:35:15:a6:0b:de:48:a7:47:87:02:f0:86:
         76:f9:be:47:55:66:9f:3f:34:b4:39:cc:30:e7:93:f7:6a:38:
         97:17:82:95:fa:fb:41:2c:80:e2:76:b2:76:e6:63:22:be:d2:
         4d:9d:00:b1:ae:69:8c:0a:72:e1:41:2b:b2:fb:9b:89:fc:f2:
         5a:fa:77:d6:6a:e7:f2:25:4e:7b:98:f7:9d:43:7b:b4:18:e6:
         d7:c8:e8:48:6d:4d:fa:45:91:2c:60:cc:e4:1f:ab:3a:af:2a:
         9d:6c:b8:cc:62:43:a7:c0:30:bf:1f:5a:89:12:84:19:60:28:
         82:1f:40:2c:92:f1:f7:c5:9a:75:b3:30:74:83:18:66:57:13:
         72:3d:b4:36:07:12:6a:7a:c7:fc:6b:bb:16:2b:3f:70:66:a6:
         a0:54:47:3f:64:d6:8f:b0:db:da:8a:c0:85:9c:1d:07:b6:d7:
         94:2b:b0:38:6b:19:d8:80:4b:79:58:13:41:05:d4:89:c4:bb:
         06:13:5a:ba:45:af:f8:33:da:b7:1b:fd:07:1e:45:39:f6:19:
         0e:4e:3e:6b:64:13:99:f8:e5:9e:08:12:44:06:00:fd:38:6b:
         e6:11:8b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----