Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File:                     MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier:          HaXX1Xs6/om0YhzNIJHIxzZsmI2+z2J+MpI4la+Wj08=
Subject key identifier:   BD:14:F6:F5:0C:28:99:6B:69:EF:F3:F6:9A:9C:08:B9:5A:08:8D:64
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer:       /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial:       01962E2B4F2C2E0BCB3B75185DEEFA110E71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number:          1164
Signing time:             Sun 13 Apr 2025 08:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:52 +0000
Files and hashes:         1: 1-VHrNTKPE5li_5D6_S7bqwdp74.roa (hash: D8+eyIa/n1dX91YGJmeaTQ892LZ6O4dV4y7sAsmFXOY=)
                          2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: 8ZgX3imjylSZl3LrJpEHyE8CIRZT5RvJbrV2vRxtE80=)
                          3: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (hash: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4f:2c:2e:0b:cb:3b:75:18:5d:ee:fa:11:0e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
        Validity
            Not Before: Apr 13 08:01:52 2025 GMT
            Not After : Apr 14 08:01:52 2025 GMT
        Subject: CN=bd14f6f50c28996b69eff3f69a9c08b95a088d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:88:9a:93:95:a9:fb:30:d0:41:7b:d1:fb:
                    69:41:1f:38:f1:39:f0:02:af:88:aa:41:a9:a9:67:
                    13:21:43:e8:0b:0e:b3:28:bd:1c:87:eb:c2:8e:65:
                    ea:66:5b:a9:be:15:49:8f:c8:8f:c2:3e:0d:84:cc:
                    0c:03:ce:36:9c:ba:b4:61:28:50:87:40:2d:6d:1c:
                    cc:e8:b9:c8:07:b9:5e:4e:30:99:be:42:c4:65:f3:
                    1b:57:1c:da:e9:13:6c:f1:07:52:5b:9e:4c:b9:b6:
                    0f:1f:21:c5:75:cf:3a:9d:a7:e2:c1:d6:76:5c:52:
                    fb:b0:d1:72:59:8f:4b:d8:10:7c:c9:d1:de:31:09:
                    d3:80:98:db:ed:52:1c:11:1d:c4:d5:b8:53:a7:1e:
                    d6:2c:55:2d:8e:e1:18:89:a9:12:c8:a8:83:ad:0c:
                    ae:8b:aa:c5:52:a0:7f:2f:7f:ea:f8:80:45:2e:2c:
                    6f:ab:74:51:27:1d:69:4d:85:80:04:41:bb:8f:41:
                    7d:23:44:36:af:ab:4f:2e:45:40:55:15:89:89:c0:
                    84:1d:11:01:4e:8f:73:8c:ad:61:d9:e8:c7:b1:2d:
                    13:f4:90:ff:10:a2:ee:cf:97:55:6d:a7:8c:d7:ae:
                    eb:3a:e7:e7:27:5a:9e:65:b3:70:6f:b0:34:de:43:
                    53:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:14:F6:F5:0C:28:99:6B:69:EF:F3:F6:9A:9C:08:B9:5A:08:8D:64
            X509v3 Authority Key Identifier:
                keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6e:ab:0d:fb:d2:e3:24:ab:12:32:34:ac:08:13:0e:cb:d0:
         5f:42:49:ca:d7:fd:b6:e8:86:46:0a:9b:b4:4e:e9:2f:41:5a:
         ed:52:57:e3:7a:48:05:c4:8a:a0:50:aa:55:25:fe:77:fa:bf:
         7a:4d:67:17:28:29:69:d9:14:d8:5e:ad:89:17:e4:1b:5d:e9:
         c4:19:66:b9:9e:6d:8f:27:2d:04:3c:58:01:4f:2d:34:bc:84:
         d2:5f:e5:3b:a5:bd:d2:81:1f:3f:db:c1:b1:b2:5a:f0:8e:e3:
         8d:4c:b5:c8:0d:a4:31:47:87:37:a8:b6:3f:d7:9f:65:f7:a7:
         7a:89:fc:0e:94:5d:8d:2a:7c:78:f1:d7:26:6f:e8:a5:b7:29:
         05:2e:0d:0f:da:a6:f4:09:e3:fe:ff:1c:e9:55:c0:7d:b4:5c:
         ff:fa:8d:1b:0d:b4:11:b6:60:0c:48:02:d8:22:fe:7f:73:0e:
         eb:2b:9b:f7:f7:85:14:d3:3f:26:05:e0:88:1c:0b:84:e7:a9:
         5c:38:7f:cd:49:92:4a:67:4f:d4:eb:b0:c8:95:44:3a:c6:5f:
         b4:0a:a7:f6:e5:9c:8a:19:92:de:26:cd:ea:b8:87:4e:eb:2a:
         27:1e:8a:b1:10:fd:4c:19:ca:98:5d:37:15:16:85:5c:c2:a3:
         8d:c9:82:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----