Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File:                     k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier:          gi1V2EhMSjJIL+BFCEg4Xi25hJt+C3I/UzAD8+ZWRNo=
Subject key identifier:   A9:C5:6A:E9:68:2D:2D:F7:9E:A9:2C:FD:A9:DB:C9:8B:C4:9E:A9:6A
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer:       /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial:       01962E987B447F1E92517EAA31881FA2EAC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number:          0BFC
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (hash: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=)
                          2: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: /oAEpU1TphHb6tzCZgkpoWbvj25fslNIoq6IyLsZ3k8=)
                          3: uG74c7I0myUDPmZfaSmD4tc9rV4.roa (hash: gFdqnU7r/rSwGKvKSrZSTL5gnMsfd1TYUTvAqWItcO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7b:44:7f:1e:92:51:7e:aa:31:88:1f:a2:ea:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=a9c56ae9682d2df79ea92cfda9dbc98bc49ea96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:53:b9:46:7e:26:59:0c:0f:32:12:ad:26:b5:
                    64:22:46:9b:cd:fa:e6:07:92:8a:16:f4:92:e2:de:
                    d3:c7:0b:b3:51:96:5b:b5:94:e4:00:8a:ed:bb:ef:
                    e4:05:bc:65:25:7a:d2:80:9c:ac:e1:c9:3f:87:83:
                    44:32:90:7e:4a:b9:2a:82:53:4e:5b:a4:52:a5:15:
                    5c:f3:cc:88:3e:ea:fe:a9:11:4c:a7:c8:5d:51:0f:
                    f3:6b:c6:68:cf:f3:6c:1c:78:62:74:0e:6b:14:04:
                    e9:ea:c3:03:73:53:ed:3f:71:ee:f8:2d:b0:1a:49:
                    b7:07:a8:8c:df:9f:a9:20:75:41:38:bd:f0:2f:1b:
                    79:71:d2:e5:7e:cf:6f:e7:34:df:db:d9:64:c3:d5:
                    ad:ba:7c:3f:b3:8b:b1:70:5a:61:88:a7:66:18:23:
                    09:51:1c:26:91:a8:5f:d7:c2:32:b6:e6:47:cd:02:
                    17:9b:80:26:db:59:01:69:b7:0e:00:78:e5:8a:9c:
                    8e:d7:81:8a:0f:80:1d:56:ca:fc:15:c1:4a:34:55:
                    18:7d:ef:53:d2:1f:1a:b4:ee:25:ce:77:c8:7a:3c:
                    58:f4:65:e1:bf:22:5a:de:7d:7a:55:78:f9:2b:ba:
                    a9:8a:03:1d:95:6d:ad:61:dc:20:5f:ad:7c:e4:69:
                    23:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C5:6A:E9:68:2D:2D:F7:9E:A9:2C:FD:A9:DB:C9:8B:C4:9E:A9:6A
            X509v3 Authority Key Identifier:
                keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3c:56:f7:32:6a:7e:ac:5a:f4:17:c9:fd:47:e1:dd:49:1b:
         1b:16:23:bf:d9:2e:11:55:ba:e8:0e:e7:c2:85:58:cd:48:f7:
         6b:a5:7a:78:50:a6:45:91:f0:65:bc:2e:af:c2:8f:ac:32:5c:
         9f:e9:32:10:59:f7:ea:d8:7c:e6:89:68:cb:b3:6a:c9:f1:66:
         2d:d8:f2:95:c6:65:70:96:94:0a:d6:bb:4c:6d:06:f0:2a:a0:
         bf:76:00:01:9e:cc:c2:60:0b:00:c8:87:ee:07:3a:b0:f9:22:
         4c:e4:a0:0b:de:c4:4b:03:f5:eb:1d:f4:19:e1:3f:23:0e:ef:
         34:b8:c7:16:5e:e1:1f:45:ee:c2:de:82:d8:58:ae:69:55:22:
         89:e4:a4:54:d5:00:1f:ae:23:00:6a:ca:03:f9:89:ea:d4:ea:
         19:e9:6c:87:64:14:3d:3f:43:8e:64:ba:32:2e:05:38:db:b3:
         9f:2f:54:05:fc:f2:b4:9e:54:52:76:46:a1:c2:70:75:0f:c7:
         e2:8d:c0:9c:0e:1a:ec:a2:3c:94:75:4d:08:b0:79:42:6a:d3:
         fc:a9:db:e5:40:80:82:de:8c:43:ce:ea:ec:ac:f7:4d:61:27:
         fb:7c:a8:51:e9:3c:87:68:f8:d4:fb:8a:97:64:73:7e:1d:cd:
         8c:f0:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----