Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
File:                     MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft (raw, json)
Hash identifier:          KxcK5j93F/BpsEfrPYgpHAgLJP4q65Urx8+U5b/icRs=
Subject key identifier:   A1:50:7E:D4:E9:55:A0:88:B5:52:7C:DD:81:19:3E:58:45:4D:71:59
Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
Certificate issuer:       /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Certificate serial:       01962E2AE8884B11BBBE703B0A0D22659C19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
Manifest number:          135E
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: 2B-FwUEQx6Nr4Ray6DAMUlw7Mv8.roa (hash: BBGC/ULum47ycUnwMz9z0fK4GgKW3TWVfbzBiHksvmc=)
                          2: GtTmoRT7XNVXBnXOsHZVf63eiDE.roa (hash: D+k5RJe28ejPSPya6Jjm6aV5eby1Bwyad8Nl2+QCWeE=)
                          3: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl (hash: 4ORkyu07BHXOyHrCXKRo0ZMQAIALV8+eEL24VQpkecM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e8:88:4b:11:bb:be:70:3b:0a:0d:22:65:9c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=a1507ed4e955a088b5527cdd81193e58454d7159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:00:1c:57:36:52:c6:ee:f0:71:71:91:13:f9:
                    06:f8:fe:80:28:61:cc:df:2d:b5:84:8d:2e:1d:c4:
                    c1:f6:f8:27:73:f5:81:15:af:0b:9c:74:fe:6b:ce:
                    7e:97:b1:89:fa:42:3c:11:19:16:b8:64:62:26:18:
                    ef:45:8d:79:e4:d3:b3:9e:4d:59:e9:f1:38:29:4e:
                    43:38:07:91:9e:0c:c0:69:4d:bb:3b:19:c7:1f:63:
                    61:ac:a2:aa:6a:13:85:d6:5b:5b:ab:66:0f:d3:aa:
                    36:18:85:12:4d:65:57:49:d9:87:8d:ef:67:73:42:
                    85:c6:80:10:a7:90:5d:12:b9:d9:8b:4e:a8:da:fb:
                    99:72:27:e6:a8:ff:d1:81:d7:82:a8:d4:0e:21:3e:
                    39:11:e4:d7:fe:f4:8f:aa:f6:83:0b:c2:e5:8f:16:
                    7a:91:96:21:87:a4:53:fa:ed:95:2a:0c:2e:3a:c3:
                    da:d5:21:4a:76:38:b9:32:ca:7e:53:ee:5d:a9:07:
                    da:7b:c4:4b:0e:81:ba:bf:e7:8a:02:e8:e1:3a:d5:
                    76:aa:d6:12:da:c3:6c:82:ad:35:f7:bb:8d:bb:11:
                    05:45:67:3c:a2:68:d7:bd:68:0e:fe:5e:89:f5:7f:
                    d3:db:a5:53:a2:c5:cd:e0:20:04:8f:03:e5:65:94:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:50:7E:D4:E9:55:A0:88:B5:52:7C:DD:81:19:3E:58:45:4D:71:59
            X509v3 Authority Key Identifier:
                keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a3:43:01:d8:50:9d:f7:b7:58:f1:1e:20:c2:86:c6:0f:fe:
         51:4e:06:43:f6:10:5d:14:26:a8:75:86:ec:c4:37:7f:99:09:
         17:f8:90:34:59:f6:e4:53:f9:8b:7a:8c:46:b1:05:61:c9:42:
         8b:d1:d8:69:32:60:9e:87:3d:1c:0a:c0:49:7b:3f:6c:8b:03:
         e8:71:ff:bf:0a:e2:43:16:f7:5c:6e:b9:ff:aa:f6:32:50:57:
         94:d2:2b:48:d9:68:85:05:d9:01:30:ba:57:e6:12:3a:ff:3c:
         2e:69:bb:ce:aa:93:bf:1f:3f:66:93:4e:bd:d5:a8:c8:24:05:
         bb:eb:fe:c2:45:69:c0:76:3f:d8:8e:fb:c3:0b:d0:29:1a:ac:
         44:e5:2a:0e:93:48:7e:7c:89:ab:35:e6:05:b8:0b:71:30:bb:
         a2:b2:4f:19:95:00:9f:85:c3:7d:38:bf:e2:ce:89:50:85:e0:
         fb:5e:f6:98:06:84:ec:b6:f9:84:c1:92:b8:6b:21:47:8c:d2:
         e4:96:d9:87:8b:62:e9:89:70:a7:55:12:b3:b5:9a:ca:c4:78:
         e6:b0:6a:7d:56:0d:55:e5:a8:c6:2b:a6:d2:1b:22:e9:22:1f:
         c4:94:4c:75:f7:dd:e5:7e:45:37:ff:ef:48:e9:8b:1f:7c:fb:
         92:62:bf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----