Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File:                     mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier:          BipyQBa/w7Q+MQB9uYQbELjUPMMO+MyPvccWGfP5o6s=
Subject key identifier:   C6:1B:67:3D:84:25:24:AA:5F:39:96:94:A8:0A:BF:86:66:24:06:F5
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer:       /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial:       01962ECFA24550B7EA7041B5AA30ABA43B3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number:          0BC8
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: 9Dg6tOo6O44yr7jeWe1ba9VjCFs.roa (hash: 26YW4jX+yyct0IS6KpfO0MNuSdKZWiF48vsQnmBErMk=)
                          2: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: mrdjMisg9X38VOfwxjvW9FR7FBSqenCg+Wbm8Lrpr+M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a2:45:50:b7:ea:70:41:b5:aa:30:ab:a4:3b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=c61b673d842524aa5f399694a80abf86662406f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6c:47:7f:1f:95:6e:ea:d0:39:13:c4:00:2a:
                    19:30:14:84:7a:ba:97:37:87:1b:eb:7f:ab:94:82:
                    97:5c:73:3c:87:af:6e:a4:5e:50:62:86:8e:c3:bd:
                    89:6a:0d:f0:9f:45:f6:5d:e0:f4:3b:25:32:09:13:
                    19:52:13:6b:1c:7b:21:2d:b6:0f:d6:6b:3e:8e:f9:
                    84:76:f0:16:d9:b4:eb:a9:aa:80:d6:a8:d9:61:6c:
                    68:23:46:bd:b6:c6:56:c3:ea:aa:12:25:e3:74:94:
                    04:86:7e:01:ce:8e:e9:42:14:99:b9:cd:a7:8e:b0:
                    2f:0f:d9:47:73:90:ac:31:4b:f1:58:fe:d9:8c:a3:
                    1d:af:52:52:80:12:0d:ab:13:89:64:43:dd:49:4f:
                    71:66:13:bc:23:d0:d9:6c:36:09:57:a8:70:e1:46:
                    c5:f9:a1:aa:99:10:6b:9e:b6:c5:ea:23:85:7b:e3:
                    c6:a6:c6:4d:37:c9:dc:fa:6d:94:1d:60:18:ec:26:
                    cb:9f:ad:56:df:3d:5f:bb:14:1b:bd:42:8d:ad:61:
                    2f:57:a6:9f:9a:ce:a7:33:e4:8f:b5:f2:a2:06:12:
                    4d:07:66:06:f3:7a:70:95:f3:c3:e3:a4:5f:a1:b5:
                    b5:87:de:73:c8:89:39:69:a2:e7:b3:f9:90:60:cf:
                    e1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1B:67:3D:84:25:24:AA:5F:39:96:94:A8:0A:BF:86:66:24:06:F5
            X509v3 Authority Key Identifier:
                keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:10:7f:bf:3b:32:4a:8f:66:da:9e:03:c9:f4:e5:69:c2:0e:
         98:84:8b:79:1e:1e:1f:a4:0d:f4:4f:1d:47:c4:b3:c3:8b:c0:
         2d:ac:b9:37:2a:cf:27:6a:23:c8:31:85:f0:47:8c:7c:0b:c3:
         43:42:ad:df:44:7e:ff:8f:60:0f:24:2a:c2:84:46:0d:cc:ae:
         69:e7:2c:aa:df:d6:35:cb:a3:f6:a6:6d:f5:52:54:0a:ac:6e:
         f2:6e:74:92:c3:8d:ce:90:59:0d:8e:a0:ab:56:20:71:3c:eb:
         0c:05:2b:8c:34:26:60:64:6b:1d:ea:91:79:37:cc:5a:57:d4:
         07:78:3d:54:49:51:df:4e:5c:51:6a:b7:f5:12:14:82:20:8f:
         2c:35:e9:66:36:2d:ce:9a:de:94:28:4d:01:45:1d:90:bf:d5:
         1f:09:64:d4:43:8a:66:a2:c0:4e:0e:c7:a9:fb:0e:78:b2:9f:
         d5:90:57:45:4f:86:ff:75:df:77:9f:bb:90:a4:40:f2:d5:67:
         29:86:b7:c9:1c:35:56:82:6b:bb:43:de:e6:e3:d8:fc:54:0d:
         13:6a:de:08:b5:79:13:5b:eb:08:4c:f5:11:e6:b9:17:62:ac:
         21:e3:4e:08:bb:67:35:df:f7:b7:62:2c:bf:f1:6a:17:8d:14:
         8f:83:b4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----