Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File:                     m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier:          Aup8p6EwK9uLhh7t3QUHJcq7rZ9Kl0QvtunPXDvAMi8=
Subject key identifier:   ED:24:B2:A3:B8:9E:55:1E:84:0B:E5:6A:F6:E5:B3:F8:07:D7:8E:19
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer:       /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial:       01962E98E9F1D765236E582E4F50AA75D7FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number:          0AEB
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: 9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa (hash: DY2LhwUZIsCiZof3w2j02FU4GvRZOJ3xOlslZBpIU3g=)
                          2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: jvGCxeab8JdD0IznShd2nUkeCLvVA1d7aRmar6jFgbg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e9:f1:d7:65:23:6e:58:2e:4f:50:aa:75:d7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=ed24b2a3b89e551e840be56af6e5b3f807d78e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:69:89:aa:0a:80:e7:a5:76:b4:6a:ec:78:2b:
                    0f:32:93:3e:9c:3f:18:83:0c:16:bb:1e:f9:d2:a3:
                    9d:46:8a:0d:5f:31:af:33:8a:31:ce:0f:ae:d0:26:
                    00:84:0f:f8:32:fc:ff:bb:fe:9c:65:bd:b6:df:43:
                    3d:66:0b:b3:e0:83:9b:e0:38:2d:71:76:78:00:85:
                    99:7b:5e:58:c5:26:ef:71:84:d9:fd:03:06:c0:8d:
                    7e:aa:79:81:7a:02:a3:79:e3:c0:61:1c:f1:bc:a8:
                    29:da:c2:1e:17:85:93:4a:f9:cd:da:2b:5d:54:0c:
                    53:b6:7b:36:ef:c4:80:25:d1:38:03:64:d9:a8:b8:
                    ac:9f:7a:2f:5c:10:cf:b0:52:4a:45:b3:28:b5:0a:
                    15:09:5c:97:d7:e3:74:ff:a9:c2:28:b5:43:bd:0d:
                    37:4a:2b:1b:fa:a1:c4:e7:67:ed:69:4e:c2:03:ab:
                    46:a2:4c:de:df:a4:56:c7:46:e7:8c:bd:e5:f4:a3:
                    fd:11:7e:76:51:bd:91:07:a9:bc:0a:78:fc:5e:86:
                    6c:e3:53:75:24:81:40:27:15:7d:41:82:f0:f8:2b:
                    ee:f3:88:1b:bd:ba:ba:c3:5e:26:6e:05:95:a1:f8:
                    4e:1a:d4:78:60:b4:78:79:0c:29:4f:95:b7:ab:d9:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:24:B2:A3:B8:9E:55:1E:84:0B:E5:6A:F6:E5:B3:F8:07:D7:8E:19
            X509v3 Authority Key Identifier:
                keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:10:fe:fe:78:fb:c0:9a:a1:7c:b8:f9:65:ce:43:f4:5d:b4:
         cc:ee:06:d6:62:39:35:31:c3:0d:2a:10:75:77:ec:ef:dc:1b:
         c3:5f:bb:1f:dd:98:bb:cb:bb:b4:4b:7d:60:be:be:14:45:95:
         54:d0:7a:7f:3f:ca:95:af:ff:2e:2e:d8:46:91:71:ad:4e:6b:
         da:d1:c0:a7:d5:3e:43:28:31:83:47:ed:ba:22:1e:62:f1:81:
         89:7b:ad:c4:2a:41:80:1d:42:45:06:0b:60:fd:60:78:d2:1b:
         8f:70:07:9a:e4:37:7a:8d:8d:c5:c0:33:1f:6d:93:e5:2a:13:
         f7:66:c4:e5:d4:9a:9b:41:3f:42:d0:4f:99:5d:66:52:ae:29:
         5b:26:9f:73:eb:fd:84:53:62:80:88:ab:40:17:e2:9b:16:12:
         98:18:6c:41:13:f9:32:52:75:ca:d5:32:00:0d:51:f4:9c:ba:
         a2:a8:e1:a1:62:19:8c:26:4f:54:2b:70:c5:0b:e1:10:4c:5e:
         a8:62:79:b7:8e:ce:c1:9b:64:e0:59:01:0c:1a:f1:91:59:1d:
         61:1e:5a:9b:23:8c:ea:f7:52:97:f5:af:c5:3d:72:45:48:ed:
         28:f6:8b:f4:31:4b:b8:d9:6e:8f:9d:1c:64:90:ef:82:7b:bf:
         dc:be:ff:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----