Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
File:                     1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json)
Hash identifier:          mOA0couoxNK5oxJtdWV5PbLe0SyDpQVb23a1PHHsagU=
Subject key identifier:   2B:5E:B8:14:D4:1F:F3:4F:9D:C1:B0:B9:67:5A:8A:44:AB:5D:E9:DC
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Certificate issuer:       /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial:       01962E997A1AA6D3AE9AA568B57F3CCB3201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
Manifest number:          0169
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: fk3iIR49HRlUo2TGCLdJDt0bLa21tJGcJey2N4TsCfI=)
                          2: 75Qx-kzPheTuRxMqDJeoXXXQrYg.roa (hash: ErepmH4DhXni27k1mjnFsC8LESHYORnx4kYupx2Zkhc=)
                          3: nya5VnmImUQCPczzWGzozyYmAoM.roa (hash: qg+/w/vLW7M/opQjKzbc9S+ktTmX4UXhPUmqd4d4i7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7a:1a:a6:d3:ae:9a:a5:68:b5:7f:3c:cb:32:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=2b5eb814d41ff34f9dc1b0b9675a8a44ab5de9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:c7:72:af:2e:8e:7c:26:f1:4d:c8:48:8d:
                    ee:fa:0e:25:d7:ff:af:ec:fc:0e:f2:28:32:f8:d9:
                    e5:fa:ce:9b:7c:f4:83:7b:04:33:c1:6f:a3:dc:dc:
                    34:bb:9e:af:6e:07:47:ad:15:46:f4:18:84:ba:a1:
                    0d:98:59:45:9f:7e:b2:ff:d6:f2:7d:79:41:97:3a:
                    e8:35:f6:bc:c1:d2:fe:d6:76:4e:6f:94:07:eb:24:
                    81:4d:a7:5f:f6:55:77:e5:ef:ab:70:61:46:66:67:
                    7b:4d:4f:71:7c:1a:ab:aa:69:ea:5e:37:06:38:53:
                    d8:ff:a8:34:6c:02:32:3f:8a:6a:0c:67:59:6e:eb:
                    a4:cc:e6:df:00:64:56:30:1d:13:5f:cd:d3:78:59:
                    4d:10:37:9b:71:06:22:2d:d5:a7:4c:30:cc:c4:41:
                    de:a7:94:81:ef:fd:a9:bc:3a:56:0e:ec:b2:0d:ae:
                    6c:b9:d2:b7:5f:e5:82:2f:98:44:88:e3:9f:b8:c5:
                    e0:0a:24:f5:a1:e8:3f:a9:ff:3a:51:1c:6a:69:76:
                    28:71:02:e1:78:f0:8a:b6:dc:39:64:cd:ed:83:54:
                    eb:2f:6f:8f:b7:24:2e:52:52:6b:33:9d:70:36:35:
                    fc:90:21:9a:27:d0:8b:98:b8:80:00:b4:f8:6b:cd:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5E:B8:14:D4:1F:F3:4F:9D:C1:B0:B9:67:5A:8A:44:AB:5D:E9:DC
            X509v3 Authority Key Identifier:
                keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a5:48:23:de:95:b1:2e:5b:58:c7:ee:bd:cb:99:6e:24:46:
         5f:a6:cd:be:9c:3c:82:30:98:ca:72:15:18:da:b8:e0:3f:e7:
         88:9f:0d:cf:2a:1a:39:96:96:a8:05:f8:81:c8:d0:24:44:31:
         72:4e:fb:c8:5b:30:b5:8c:eb:0c:7d:67:43:49:4a:9d:40:12:
         2d:2d:e1:4e:66:8e:5b:49:9a:51:c4:fd:0f:40:f5:17:da:66:
         08:64:03:7e:02:dc:0b:ea:92:c2:99:cc:93:20:72:2f:8e:3b:
         45:c3:ca:74:e7:7f:04:4c:73:13:f8:7a:c4:58:8b:d5:e4:d6:
         7c:66:47:b6:11:b7:54:70:94:58:71:67:6c:a4:8d:d9:9b:ae:
         29:37:d6:d1:4a:27:f0:a6:d3:9d:d9:8c:18:6a:52:0c:76:dc:
         a1:68:33:45:cd:01:75:67:77:fc:1e:e2:dd:24:5b:7f:00:bb:
         2f:e1:62:58:0a:49:6c:6d:61:cd:1a:84:6f:55:02:d0:73:b5:
         ca:c2:51:28:77:36:25:7a:ab:1b:b9:a4:cb:f8:ef:c5:ed:f8:
         ab:50:73:f7:93:90:36:0b:be:b2:bc:22:ac:e0:8f:63:1e:db:
         8e:a9:68:89:8c:06:9a:42:f6:95:9b:e4:d4:12:80:b6:38:05:
         6b:95:56:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----