Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
File:                     m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json)
Hash identifier:          rhjCsEpL38htvQR1XDO1h5jJvAY04Y+m+rFsUR8B+uA=
Subject key identifier:   7F:35:88:14:C8:D6:0F:6C:73:31:1B:95:7F:F1:03:57:E5:3F:3E:AB
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Certificate issuer:       /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial:       01962E2B250FE50A71FF1E6FBAFD53E03A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
Manifest number:          0E1D
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: 6k-d4-zz1Bi0ZB30NR9XiBJdbJI.roa (hash: n2UlT2v5ne1WHXzI3nHhngksH2y/h3ykBECiQHVHKNo=)
                          2: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: 3t157rYSm4zyk+c/u6Dn14lHpa1rOUJV4GuPF57M+Qg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:25:0f:e5:0a:71:ff:1e:6f:ba:fd:53:e0:3a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=7f358814c8d60f6c73311b957ff10357e53f3eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:fc:37:20:92:9c:6f:d6:47:11:6c:3c:10:
                    4e:0a:31:af:90:aa:84:17:64:82:d9:c2:50:19:13:
                    f3:c7:3f:ad:a8:3c:c2:c6:06:cb:6f:bd:77:42:f1:
                    35:21:16:66:17:12:8e:c4:88:8e:1c:11:da:13:9b:
                    62:43:b1:e1:ac:d2:c7:24:ac:3c:75:3a:de:6c:71:
                    e5:ab:cf:36:45:e2:8e:a4:1d:ae:73:26:88:c6:8c:
                    58:f9:70:dc:c7:4a:75:f6:cd:f9:0d:a2:9d:5e:36:
                    72:f7:5c:20:76:2e:45:52:34:3e:f9:ad:fb:6f:d4:
                    87:64:45:d8:4e:78:59:8d:d4:44:73:72:af:7d:f9:
                    b5:48:16:9c:a4:2f:ab:1e:58:d6:83:9c:8e:00:6f:
                    82:2c:e8:f4:61:73:9e:77:e9:46:36:fc:2d:6f:81:
                    33:9e:d9:f2:39:ab:fc:85:99:fe:c2:26:ed:08:b2:
                    41:98:1c:cb:09:08:20:ba:8f:84:f2:9a:77:56:de:
                    8b:6e:25:71:44:75:a5:b7:b2:b7:2a:0a:7e:8e:c2:
                    98:22:cc:f5:fe:7e:20:70:1c:61:06:c7:95:60:5b:
                    2b:96:31:cc:d3:14:c7:0b:27:1f:3c:1e:91:7c:f0:
                    fa:3f:b5:b8:ff:76:a1:40:36:b7:9e:ab:d8:52:99:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:35:88:14:C8:D6:0F:6C:73:31:1B:95:7F:F1:03:57:E5:3F:3E:AB
            X509v3 Authority Key Identifier:
                keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:63:59:c1:86:eb:a6:60:ce:7a:6a:54:23:dc:f5:de:73:8c:
         2b:27:cc:34:2b:d3:bc:45:0f:fd:68:26:3a:f3:ba:e6:dd:f2:
         ce:1f:a6:e4:0d:8f:e9:c1:30:0e:a6:84:be:c9:dd:c6:39:88:
         86:dc:7c:26:e0:a5:f8:8c:3a:51:91:c9:50:2f:ca:f9:f5:91:
         2c:9e:f3:c0:d2:85:5f:98:2a:51:fe:6e:02:76:2d:a6:bc:44:
         7d:fc:90:19:bc:df:32:ff:23:40:f4:01:aa:f3:af:0a:71:31:
         b1:84:5a:9f:6e:0a:f5:d0:d4:bc:a5:df:a9:43:72:98:0d:96:
         12:05:59:dd:8c:31:97:81:cd:c3:97:2a:b0:30:d6:59:b8:e4:
         8f:82:35:24:1e:28:32:3c:73:35:e9:23:72:06:7f:34:f6:79:
         b4:2d:f3:7a:8e:e4:06:97:cf:c2:ec:b9:cb:4f:2c:ca:58:63:
         7a:6a:d2:2a:73:04:dc:a5:48:04:f9:0e:50:e1:e4:ac:63:45:
         d9:7b:72:9b:ad:f0:69:5a:49:f1:53:c8:16:0b:4a:eb:97:9d:
         3e:e7:f7:fe:b2:98:44:1e:ec:76:82:fc:b6:c4:65:92:9b:0f:
         c8:e3:f3:a6:cb:f9:b4:89:dd:74:be:5a:e7:25:c5:80:94:18:
         99:c5:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----