Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
File:                     j57SGI2p7K2hFJFFrvpJcm_gHpY.mft (raw, json)
Hash identifier:          TkB4saaOW8vfwADZd3wLt5/TK4G2dpfI7rL2/64RlHU=
Subject key identifier:   7D:32:EF:A2:B5:AA:A2:55:02:C6:B5:E0:E1:09:B2:66:F2:56:57:BC
Authority key identifier: 8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
Certificate issuer:       /CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Certificate serial:       01962ECF5BFB2B3A5233099A61082C64CCD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
Manifest number:          0310
Signing time:             Sun 13 Apr 2025 11:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:03 +0000
Files and hashes:         1: XfshKmg26J4GeDmQkqYBCAG3kyQ.roa (hash: WmdBSp3tOZptf78Fte4nZRzoao1ErG+KJTfgEnIY6YY=)
                          2: j57SGI2p7K2hFJFFrvpJcm_gHpY.crl (hash: PNHPcG/khkQLsXEDFxOdI+HvffYInSo3dH2K0aUHyY8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5b:fb:2b:3a:52:33:09:9a:61:08:2c:64:cc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9ed2188da9ecada1149145aefa49726fe01e96
        Validity
            Not Before: Apr 13 11:01:03 2025 GMT
            Not After : Apr 14 11:01:03 2025 GMT
        Subject: CN=7d32efa2b5aaa25502c6b5e0e109b266f25657bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:25:ff:be:6a:08:4b:7e:56:02:c9:b9:f1:
                    82:81:14:14:59:ad:00:57:72:cb:f2:19:5c:eb:b1:
                    ab:dc:0e:85:86:a1:8d:8c:25:f3:8b:f1:d4:85:8a:
                    00:af:65:4a:7e:79:dd:4e:bd:b0:a9:76:a1:6a:4f:
                    7a:14:73:3e:de:1a:8a:90:b9:d7:53:a5:4b:80:5a:
                    a6:b3:fb:72:17:6b:ba:37:5f:fc:75:96:fd:de:ce:
                    44:9d:4c:dc:5b:66:3d:e1:a8:e1:ad:ff:84:e3:62:
                    99:5a:64:c3:34:51:58:91:ac:6b:f2:d1:37:32:f5:
                    5a:f3:55:be:b4:da:8f:f0:89:2a:cf:bf:f4:33:d9:
                    87:13:c9:67:15:2e:83:26:03:46:63:db:f3:f0:da:
                    b3:79:90:d4:a2:89:94:a6:63:1b:50:69:46:0d:25:
                    77:ec:26:97:a0:28:05:48:1c:cf:56:6f:26:c9:ac:
                    4d:0d:0e:d6:f4:ba:f1:99:5d:ed:46:ea:1c:4c:36:
                    9d:ec:87:ae:3e:fd:d2:60:2a:c6:42:11:c5:6d:ba:
                    e4:ab:32:52:df:33:60:a2:e8:31:d2:19:ac:d0:38:
                    2f:b6:77:c1:a7:66:9b:94:d9:aa:cd:9a:b0:5b:fc:
                    65:cd:ba:d7:2f:be:8e:c9:c5:de:ec:c7:45:2c:db:
                    51:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:32:EF:A2:B5:AA:A2:55:02:C6:B5:E0:E1:09:B2:66:F2:56:57:BC
            X509v3 Authority Key Identifier:
                keyid:8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cc:04:b8:c0:d3:9e:2d:31:30:c6:48:60:cf:54:80:0a:14:
         9a:c5:57:30:f5:e3:35:5f:6d:a8:07:b1:d3:16:d6:83:87:25:
         30:c2:e7:9d:a9:4f:04:b9:68:4a:32:7e:d7:9d:0f:50:cd:0f:
         8b:9b:7a:d6:07:ab:3a:2b:c3:92:30:83:7d:7d:8b:7f:17:72:
         5e:14:43:76:73:51:37:42:ed:2b:dc:8f:d2:21:8f:7c:1d:38:
         cf:40:79:85:4b:a4:39:8c:26:c9:ba:e8:b1:bf:25:9e:a8:13:
         c2:57:52:3c:fa:46:d0:d3:70:bc:e5:ac:36:eb:f7:b3:f8:11:
         08:15:5b:fa:7c:aa:3c:8b:d8:5b:47:d3:ae:a0:b8:98:82:22:
         66:f9:df:3d:8c:77:00:47:bf:2e:54:85:4a:60:79:e8:00:f0:
         da:4d:82:78:44:4c:fb:0a:a2:10:52:7f:a6:30:fb:43:4b:48:
         3e:ce:24:bd:00:f0:4c:c2:fc:0c:e5:42:97:de:0c:e7:3e:4a:
         67:cf:69:bf:e9:dd:0e:bc:88:91:6d:22:cc:c7:6b:47:5c:34:
         21:4a:9d:f7:e1:39:23:d2:87:f5:a6:75:af:8b:9c:72:01:b8:
         07:1c:7c:25:b9:2c:70:ed:ff:df:9f:a1:2a:f2:48:1c:45:98:
         1b:51:af:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----