Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File:                     MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier:          NyzymskFswuQOnr3BMbMel0gnINYKGAQ4143w9EQKyU=
Subject key identifier:   89:29:33:9B:E2:7C:CF:82:CB:D1:68:A3:59:A7:02:E6:EC:93:38:73
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer:       /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial:       01962E2AC916EE0A0A42773E1F047ACCEF43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: C72NuZYL7u+7QT1AtiYob4whACj+fVt1IfBDfKvcqvk=)
                          2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=)
                          3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=)
                          4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c9:16:ee:0a:0a:42:77:3e:1f:04:7a:cc:ef:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=8929339be27ccf82cbd168a359a702e6ec933873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f7:29:e9:36:18:f9:9d:9d:f3:03:66:73:af:
                    8b:46:e6:ac:9e:d0:74:b7:c8:16:d3:ae:4b:d2:ac:
                    40:ac:ca:1f:7f:86:b8:12:73:7d:4a:77:44:13:a1:
                    12:5b:2a:33:6b:64:7e:74:66:15:42:d2:36:a5:6d:
                    87:7e:f3:80:50:10:ec:09:16:bc:e7:1a:94:19:95:
                    af:72:de:92:2e:0a:e4:9a:54:6e:ef:c5:7c:17:65:
                    83:66:2c:3e:12:5f:5d:c4:a2:4c:3e:57:6a:7f:7e:
                    5c:e4:44:03:a9:7f:95:1d:dc:94:a8:19:77:b3:00:
                    b8:3d:63:61:ac:5d:94:49:75:02:70:59:d8:c1:a4:
                    28:7a:b7:d0:6a:ea:0f:4e:50:c5:ed:87:bf:6b:a6:
                    46:66:82:b3:d5:8b:d7:85:f9:1f:e8:08:7f:8b:9e:
                    09:58:fc:07:e9:87:32:58:0e:43:89:e6:1d:6a:2e:
                    44:a0:b8:03:0b:a1:15:d4:3d:9a:dc:32:ee:89:6f:
                    8f:f9:93:59:83:b9:f7:a9:6e:62:99:99:c6:29:79:
                    7f:55:9d:d7:57:49:8d:8a:6b:67:6d:ad:41:bb:bb:
                    09:aa:9a:65:34:9c:21:7c:c2:73:3b:6d:e1:20:a4:
                    00:05:ab:49:8c:79:63:4f:ab:82:67:c3:42:8c:41:
                    b6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:29:33:9B:E2:7C:CF:82:CB:D1:68:A3:59:A7:02:E6:EC:93:38:73
            X509v3 Authority Key Identifier:
                keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:be:a2:c2:5d:62:b6:28:77:d2:88:8e:d9:48:ed:2b:0b:2c:
         4e:7a:07:4d:99:26:bc:0f:5c:9e:88:33:c9:41:59:d9:d4:ef:
         4f:09:a6:f9:dc:5d:c7:c9:6f:11:e9:db:50:44:8e:25:ad:91:
         ae:20:e8:c4:cf:5b:32:c1:17:22:ad:d6:43:5c:7a:e4:46:ec:
         b4:13:dd:8e:5b:3c:73:c3:83:ef:82:df:fc:fb:f3:03:f8:a6:
         24:95:53:40:35:b4:34:e8:c1:69:6b:2d:73:a9:e6:2d:69:31:
         44:5c:49:a2:bc:a7:d0:7f:6f:37:ce:9e:11:5c:f3:36:2d:e2:
         80:da:43:f7:49:26:cf:8b:5c:98:f5:c3:63:a4:d3:ba:7e:6f:
         eb:c5:60:66:6b:cb:54:40:b9:c3:2c:99:46:66:1b:52:81:12:
         46:f3:c3:73:3a:83:1c:7d:5a:34:72:a5:4b:2b:c1:47:6a:5a:
         07:26:55:47:47:ef:ff:90:d9:77:d5:ba:88:15:da:dc:82:e7:
         7c:ea:9a:34:87:32:83:f9:a5:e8:f0:2c:78:01:20:ad:0f:78:
         e5:e8:7c:10:3c:93:97:ce:d3:94:04:56:df:66:14:b5:98:5a:
         57:20:dc:7d:c2:c7:d2:1d:cc:e6:a8:16:1f:9c:02:19:98:e0:
         25:9f:10:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----