Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File:                     sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier:          6QslWrj4PqCqf/EmFDw16tYFRqO+zhuO235U7rEY7nk=
Subject key identifier:   24:CA:D7:FB:49:1B:BA:03:5A:67:4B:43:B5:31:BB:AE:11:1A:AD:44
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer:       /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial:       01962F74EE60D65DDC6CAED747D68BE34555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number:          0F77
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: SEy_q8yasarL4vhAyv6DcTF7WB8.roa (hash: B1SRh1WwCZtBHMAKkgvifQJ/iJUggGCgGgLLkNss5Nw=)
                          2: ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa (hash: udwWfKom+EbN8jk91UYE1hrtLtfJILvdv1JBZTIFT0w=)
                          3: qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa (hash: 9OvJ6Tjvc0ybgSO+B/2T4VgdwfSjKx3tRoZuZYIdcTc=)
                          4: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: sba2cWGD/1Gtd6qotSvW/+DdBIr6Uf0jMTjm8jLbpl4=)
                          5: wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa (hash: /amIoY3uoWrTi9ErwL/m7gwpV0plV6uE2N5Muk44yLw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ee:60:d6:5d:dc:6c:ae:d7:47:d6:8b:e3:45:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=24cad7fb491bba035a674b43b531bbae111aad44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ba:24:b8:3f:ff:fd:a9:3c:5f:c9:a4:2d:ca:
                    1d:ae:cb:96:7a:2a:63:7a:30:e1:64:8a:a2:ad:68:
                    54:72:7a:93:50:0e:bc:0b:3c:57:7c:68:16:a2:a8:
                    a7:d7:1e:3e:f2:da:68:76:ab:25:87:11:85:65:e5:
                    cf:15:a4:46:a7:d1:38:67:d2:88:44:f0:af:d0:a9:
                    34:5f:19:36:f5:32:2f:75:7f:7e:43:13:5d:c7:fd:
                    81:42:59:fe:d9:46:ce:10:03:90:53:80:e1:35:4f:
                    c3:96:b8:f7:07:ac:ca:43:ec:d9:34:73:2a:a5:5c:
                    57:1a:9c:f0:04:a5:65:57:a5:3c:99:e5:2e:e6:34:
                    b4:96:30:b5:d1:63:cd:b1:c5:42:6b:87:74:96:cf:
                    99:c3:64:5a:c5:3f:a1:5c:34:d0:67:eb:95:33:68:
                    33:26:9f:a3:6d:2e:f5:95:10:1e:1c:d6:6c:25:91:
                    60:f2:ff:87:a4:9f:13:08:f4:ab:58:ac:88:1e:77:
                    27:69:eb:a5:84:19:11:b5:20:06:7e:5e:e3:9f:24:
                    57:57:ed:09:d2:26:47:7b:a8:bd:08:14:03:ab:31:
                    3c:d4:6a:eb:a8:a7:d9:f7:a9:07:e4:80:60:77:0d:
                    10:f6:06:35:7b:5f:d2:e9:56:53:1d:7a:f3:a0:d2:
                    9a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CA:D7:FB:49:1B:BA:03:5A:67:4B:43:B5:31:BB:AE:11:1A:AD:44
            X509v3 Authority Key Identifier:
                keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:81:d1:fc:32:34:10:2a:ae:62:ce:81:db:c2:0c:65:d9:aa:
         cc:5b:94:dd:d9:d5:8c:db:8b:98:5d:ca:1a:3f:69:b5:fa:a1:
         b6:29:8e:0e:f8:f4:f4:c7:1d:87:94:9e:8c:60:bd:0b:45:c8:
         e6:17:93:8d:cf:be:48:9d:03:23:9a:26:c4:88:6f:5a:9f:95:
         4a:cd:62:57:38:00:6f:57:6b:61:9a:c3:52:91:77:95:41:a0:
         14:f7:17:07:7e:9a:6f:e9:6d:61:d4:13:ab:ca:27:44:51:b6:
         93:48:a7:73:3d:d1:aa:ea:fd:e5:88:cc:11:00:8e:d6:9d:3e:
         b3:92:c4:65:6b:fc:8c:8a:77:b5:e1:e6:20:1f:0d:64:50:10:
         a9:d1:6a:c1:a8:b1:32:04:5f:ba:63:bd:20:c2:42:81:fd:8e:
         ea:bd:24:e2:cb:0b:86:ad:bc:30:1c:28:ef:b6:ca:d1:34:1c:
         5b:65:ca:ef:da:3c:c8:1b:82:2b:9b:08:be:1f:aa:63:03:33:
         f7:2d:4f:cb:d8:d0:b2:5b:fc:08:17:8f:6a:2f:c2:cc:e1:ac:
         dc:bf:8d:96:fd:db:6d:05:0b:27:17:0e:1f:82:7c:39:6c:31:
         bb:62:37:23:d5:54:78:48:19:fc:1d:79:55:8e:48:83:33:12:
         e3:f6:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----