Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File:                     A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier:          uD31pMFUKJ2sI435CCKlQwwuiEcv3BhdZtAXacow6Go=
Subject key identifier:   CE:20:66:F2:F8:A6:68:18:C5:FC:5D:BD:66:B3:67:A4:C1:20:32:37
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer:       /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial:       01962E994B9FD8E14DB61B41FD131B40A753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: 9t22owOYC7Mw8jA_t9_7gDwHF1o.roa (hash: iV2EeKk18zEE+h5tJ2D8tk3awOGzeRIEDnvnGsDqR3g=)
                          2: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: dU4i/m99YO75BrC9JAdABqTMF2IUuYPWkEoieDx2+cM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4b:9f:d8:e1:4d:b6:1b:41:fd:13:1b:40:a7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=ce2066f2f8a66818c5fc5dbd66b367a4c1203237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a5:50:17:0f:a0:da:2c:6e:54:33:28:ee:ca:
                    4f:b3:db:ca:78:67:8f:4f:ea:22:76:92:d9:b8:14:
                    8c:1f:9d:31:16:f4:f8:8b:8f:28:1c:03:75:18:5f:
                    ec:e7:80:0a:2d:36:a6:69:13:57:5a:e7:cd:93:ea:
                    4e:7d:3d:26:7a:e2:10:7a:59:f8:ce:95:5d:90:b4:
                    2a:1e:6b:03:de:d8:f7:fb:d0:eb:d4:18:03:2c:04:
                    8c:ab:93:0c:b0:71:e7:01:92:e1:eb:aa:a9:eb:f0:
                    37:ae:1a:bd:44:d4:50:5a:51:af:c9:45:43:05:eb:
                    dd:0f:cb:b0:37:ee:ca:b4:97:69:8a:b9:33:0c:12:
                    bb:d5:ad:16:c9:ff:84:d0:de:f5:61:78:5d:2b:a4:
                    5c:19:99:dd:26:07:14:40:b8:a8:ae:dc:fa:21:30:
                    8b:f7:fa:10:f7:0d:cb:48:a4:c0:e4:3d:08:ef:d8:
                    7b:5f:15:f5:2c:63:1c:d8:0c:42:0d:ac:35:c8:ae:
                    6c:b9:4a:0b:a2:fd:16:8a:50:d2:8c:fb:e2:97:2b:
                    8f:be:c8:36:98:e0:c1:c1:b2:5a:6c:ef:ac:aa:67:
                    bf:2b:63:cf:fd:56:53:89:40:c1:53:0e:4b:fd:07:
                    e3:c5:ac:f6:d5:d7:c2:f5:34:c5:3c:70:df:a3:ac:
                    dd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:20:66:F2:F8:A6:68:18:C5:FC:5D:BD:66:B3:67:A4:C1:20:32:37
            X509v3 Authority Key Identifier:
                keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:91:26:6e:f4:6a:1b:12:0c:af:77:2f:e1:34:8b:07:f3:a2:
         60:c1:87:e4:d5:16:18:5c:09:f0:83:8f:b8:64:26:ea:79:83:
         af:28:a0:f3:21:4e:38:b2:2e:36:af:a2:74:03:0a:49:1f:b1:
         ab:e9:e4:f3:03:c5:a1:6f:79:0f:ed:c2:59:fc:4d:e5:51:e3:
         fe:63:e4:e0:86:31:1b:9a:da:73:b2:75:ac:91:ac:3e:60:c6:
         8d:cd:7d:49:e1:87:28:da:dc:10:bf:01:e2:10:19:b3:a0:1d:
         a5:28:77:5b:8d:46:a8:05:44:e6:b6:23:d7:79:b3:1d:15:4c:
         64:2c:90:fe:5b:fd:44:e1:e9:e1:6f:35:91:d1:08:7d:3b:31:
         1e:72:f8:68:bc:96:19:05:11:c6:87:2b:da:57:bc:05:be:83:
         db:cf:da:aa:dc:b9:23:d0:c6:b5:f5:ac:c6:16:fe:da:04:38:
         db:a7:c8:49:a1:6c:ff:50:b1:e1:1e:dd:f0:11:92:a5:8a:01:
         19:db:84:93:db:4a:8a:7e:07:f2:4c:e1:29:ba:93:bb:46:40:
         01:ab:9f:c8:44:5e:5e:4c:de:1b:41:ce:1e:71:4f:d1:f6:0f:
         55:d1:03:c1:0b:57:4c:e1:5a:c8:f3:ce:8f:e5:c6:6c:4b:bb:
         41:b7:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----