Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
File:                     mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json)
Hash identifier:          a32eOyoibwKglP7B3vuPDKEo5ryG5u04myi3uYIRHuI=
Subject key identifier:   8E:3E:4D:13:99:81:B4:19:DD:80:23:5A:2C:ED:5C:EF:3D:43:C7:C5
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Certificate issuer:       /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial:       01962F3D63B189153878BDF43FF16555E54D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
Manifest number:          040E
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: 0Xa-Nei_d95pLvklAjjCcq4wB50.roa (hash: IPQHZLb7lkBMMEnjRg8Zyo+jCG1PIyAJca8gIl7Nyqw=)
                          2: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: MISPtjyYZuhPDXHK+AwQJsPB4q+zJ3h/ZfMaN+iOBoo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:63:b1:89:15:38:78:bd:f4:3f:f1:65:55:e5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=8e3e4d139981b419dd80235a2ced5cef3d43c7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:a4:7f:bb:0a:51:a9:7b:40:b8:d8:3f:b5:
                    a6:16:7e:b1:40:97:c6:e8:fa:32:63:2e:a0:7f:4e:
                    c0:6b:43:9f:59:d5:91:62:f6:a1:7a:e6:a5:8e:6a:
                    2d:73:84:86:62:44:91:bd:b1:ce:cc:87:c6:8a:e8:
                    11:e0:41:ef:98:78:4f:2c:cb:1f:76:15:8b:bc:4f:
                    fb:f3:ef:58:7a:2a:08:f4:6a:b5:3e:0b:a0:08:1b:
                    97:48:77:32:43:c2:f3:a4:0b:55:cd:c9:dc:60:07:
                    e9:80:e6:44:56:e6:da:18:66:0f:2f:8f:b9:b3:b7:
                    80:92:5a:5f:31:bd:32:78:85:3c:12:f6:b0:2a:86:
                    3c:48:5e:c5:86:9d:fe:d3:1e:f4:ac:42:71:42:15:
                    dd:28:54:68:a3:6c:4a:ae:9c:26:20:c7:8e:49:b8:
                    53:ea:04:e1:78:9d:b7:c5:f6:ad:3d:07:9c:92:ba:
                    cf:54:82:00:17:32:75:1b:08:97:a7:d9:fc:c4:f2:
                    8f:f9:a3:aa:14:a2:35:d5:fa:48:7a:b1:e1:48:03:
                    50:7b:05:14:5e:87:88:c1:48:9d:4c:13:be:13:d3:
                    ec:26:80:48:42:56:64:98:c9:a7:e5:5b:82:31:43:
                    c1:8c:92:69:bb:ad:e7:b9:cd:4d:fb:50:21:dd:32:
                    bf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3E:4D:13:99:81:B4:19:DD:80:23:5A:2C:ED:5C:EF:3D:43:C7:C5
            X509v3 Authority Key Identifier:
                keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:69:d4:43:5f:19:fe:8b:ce:b7:3f:60:42:bc:85:a7:ce:7c:
         df:64:58:71:29:f2:c4:31:66:c7:96:44:40:5d:0f:0b:eb:d8:
         de:d0:7c:97:20:df:ec:5d:56:d2:79:9d:03:c2:c0:20:42:5c:
         8f:62:89:c2:9c:bc:c4:17:be:73:ed:a9:69:2d:ce:77:a8:51:
         57:ad:1f:db:76:cc:c7:ee:e7:a4:99:3f:6b:c6:29:a1:0d:d7:
         b3:92:f4:e2:11:0f:21:51:cf:c2:b2:1b:9f:4e:ec:4d:84:32:
         f9:e1:c5:72:78:61:2d:02:b2:be:e6:b9:48:66:7f:18:3a:1f:
         17:3c:d3:2a:f8:dd:1b:17:43:be:c1:60:f7:d6:86:7f:2d:31:
         d7:15:e2:14:bb:52:ef:de:c1:d2:3c:45:52:03:16:60:6f:47:
         e3:ac:0d:13:51:d0:2a:f5:af:67:cf:6c:3d:19:4c:3f:90:dc:
         9f:2a:91:ea:09:22:9e:ba:5c:8b:f9:ea:0d:ab:a8:6d:38:42:
         30:5d:25:4f:7f:23:21:a5:4f:03:2d:85:6d:69:fc:5c:8c:ae:
         4e:ba:3c:29:f8:9c:60:b6:a5:75:cb:f5:5e:0c:1f:1e:fd:7f:
         ed:30:db:9f:15:91:6d:f3:be:a2:d7:5f:04:47:cd:f4:9e:99:
         7a:85:36:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----