Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
File:                     sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json)
Hash identifier:          JZycn9uAUnkAgxR5fORA7L+eCcwAeYNQs0adGg7GWzE=
Subject key identifier:   9F:46:BB:F0:E6:EC:BE:D2:0A:EA:E5:D2:A5:BA:E4:1E:63:AD:34:60
Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
Certificate issuer:       /CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Certificate serial:       01962F0712160254BDD5C8DCE7EBF431C688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
Manifest number:          01CC
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: K12F-uP3adhB5XYkvRWOwtyWFxQ.roa (hash: 4K99rP4m/GgxDIw4+Su5OB+ocoFQK/2aIqkgeWKmoU4=)
                          2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: pSBsucIxDJP0PXI0J0TL7ULVElIzZMjJS9YR4P3OdrU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:12:16:02:54:bd:d5:c8:dc:e7:eb:f4:31:c6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=9f46bbf0e6ecbed20aeae5d2a5bae41e63ad3460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9d:8c:7a:bb:85:0c:2b:bc:4e:e5:51:36:88:
                    0a:4e:ec:d9:b2:7d:ae:0d:c6:ee:4e:24:3c:f0:c1:
                    34:cb:77:67:52:94:a0:0c:8b:72:ba:0e:c8:20:0c:
                    31:6d:9c:b1:2d:f6:85:97:6b:80:3a:65:cc:8f:75:
                    e5:44:ee:af:17:b9:8f:c4:7c:7e:78:b4:58:55:71:
                    c8:58:80:6a:b0:85:ab:41:b9:d3:03:65:aa:39:05:
                    a5:99:04:0a:e6:54:d5:d5:74:91:ba:1a:a0:0f:15:
                    db:17:f3:e2:d6:b4:0b:0e:85:04:88:44:74:fb:13:
                    a6:65:df:23:5b:8f:a2:f6:82:85:bd:cf:e0:ce:0a:
                    8f:07:ef:45:51:f1:7c:9c:56:c2:c9:51:68:28:c5:
                    f5:fe:ba:18:d3:f3:5f:d0:2e:5b:fc:f1:33:6b:cc:
                    1b:2a:13:89:9a:0f:9d:fa:37:81:68:66:e1:fa:35:
                    93:51:65:4d:ac:d4:26:82:69:bd:33:3a:9a:76:a5:
                    ed:10:a4:28:28:f8:b7:8a:8d:e4:71:5d:ce:45:c8:
                    37:1c:10:a3:7b:7a:7f:d3:3e:5f:ed:36:8b:0a:25:
                    e2:29:ac:4a:84:7d:b0:76:0c:e1:04:8a:be:09:b5:
                    38:03:68:c3:0b:12:4e:62:c0:f7:fa:6b:fc:46:3e:
                    fc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:46:BB:F0:E6:EC:BE:D2:0A:EA:E5:D2:A5:BA:E4:1E:63:AD:34:60
            X509v3 Authority Key Identifier:
                keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:11:fc:79:20:35:ac:86:4a:e3:89:e7:40:46:c6:37:7d:48:
         56:f6:46:c3:5d:38:31:4a:1b:49:0e:6a:ab:bf:9d:35:f1:63:
         dc:67:88:6b:19:6a:a0:57:e8:36:4f:22:4f:28:5b:44:3c:78:
         d4:a0:9a:f7:ea:00:2a:ca:85:03:32:59:36:5c:23:2a:ea:0d:
         87:98:33:81:6c:82:38:f6:15:f7:50:38:d2:d7:50:5e:30:6f:
         e4:47:e7:7f:df:82:e9:26:b0:a0:db:46:1b:91:b7:3a:d8:26:
         52:e2:09:1a:1f:9d:a4:04:38:96:fe:70:3f:00:f9:42:f1:31:
         c2:fe:24:be:6c:f4:3c:c0:37:2b:3a:43:d5:37:0c:64:24:d1:
         21:99:6f:75:f2:6f:33:f9:43:f1:22:0d:bc:db:a6:b8:ab:17:
         c9:b5:03:8b:bc:34:bf:5b:9e:d7:b9:40:e0:22:db:53:e3:61:
         80:78:0d:33:fb:29:eb:65:54:6d:12:91:72:be:25:38:77:33:
         47:5f:d6:df:8c:08:42:f5:66:ee:62:39:49:14:6c:f5:38:b8:
         f7:a3:5c:42:24:2b:74:92:ad:ee:10:4a:7c:1a:fa:9c:43:08:
         17:37:4c:0b:d2:b1:3d:20:df:39:f0:4c:54:b7:cd:18:db:16:
         44:62:92:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----