Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File:                     MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier:          fHmuB+U61Qaw01RYe5B8wxXgaRcJhUkRVgBQdMJnvns=
Subject key identifier:   7F:1A:F8:49:7C:4C:64:41:33:23:10:11:36:9D:2C:81:F6:53:B7:6E
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer:       /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial:       01962E2AC49A8A974436B593D9D94EFAC02B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number:          018F
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: 1-5n0KWaGHCDQYhl2aLfMjhVyMRI.roa (hash: KATmxtMp2ikC0o4XIGyQU9bJkWtT8ILR3+Dm38ZRLnA=)
                          2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: inzyRPVnec1ctPK8RxhKce3haixYZjs8cb2b66p79oU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c4:9a:8a:97:44:36:b5:93:d9:d9:4e:fa:c0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=7f1af8497c4c644133231011369d2c81f653b76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:7e:8c:b9:3f:54:62:85:5d:17:b0:58:8d:
                    0f:4e:4a:f4:37:4d:c4:f8:49:90:d7:19:81:bd:1d:
                    b5:ab:5a:5b:16:30:52:cb:95:e8:00:8a:9e:be:b4:
                    99:f8:7e:d2:56:32:db:af:a4:2a:d1:55:b8:63:8b:
                    5f:5a:30:a4:25:0f:95:c2:0e:41:85:0a:ea:91:92:
                    6c:f1:71:ed:af:18:1c:e5:25:cb:c8:69:ae:53:d6:
                    26:b7:72:e7:68:01:e8:5d:d9:6f:c8:f9:dc:7f:a7:
                    ab:5a:df:a4:a7:4f:ae:76:60:f4:46:95:67:9c:41:
                    16:4c:10:7c:bb:5a:30:95:4b:90:d1:89:4c:a5:db:
                    4d:5c:97:c7:e9:0f:34:e3:91:88:83:57:3c:18:18:
                    60:8e:c4:0c:eb:93:1f:63:7e:00:1a:81:54:d0:b2:
                    a2:21:7b:25:b7:44:34:f5:1b:e1:30:94:ef:61:b4:
                    92:a3:6e:c5:f6:5d:d2:02:ac:e6:3b:eb:88:79:a6:
                    bb:88:b5:c6:e7:92:fb:71:cf:5e:3f:02:7a:19:b7:
                    f6:a3:76:32:fd:f1:7c:c0:41:5d:0f:7c:b0:56:c5:
                    97:9c:8e:ad:ce:f8:39:83:33:72:4c:93:39:36:84:
                    f6:d1:dc:9e:35:70:a7:8a:e6:f2:1b:f0:c6:34:d1:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1A:F8:49:7C:4C:64:41:33:23:10:11:36:9D:2C:81:F6:53:B7:6E
            X509v3 Authority Key Identifier:
                keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1a:ae:d7:a7:9c:c8:7b:4a:7f:39:b2:ed:0e:a3:ae:ea:53:
         f8:19:23:64:b9:4e:2e:49:82:0c:ed:c2:b8:a3:62:04:a5:20:
         d0:06:db:a9:ff:ae:e4:05:1c:7f:e5:cf:de:3e:e3:93:69:0e:
         f5:e5:2b:d2:32:3b:50:91:0d:f0:18:a6:35:cd:78:26:bb:8d:
         2b:45:cc:e2:1e:73:28:8c:d3:e0:fa:1c:bc:65:fa:31:17:b9:
         ca:ee:f2:2a:28:44:ad:35:d2:96:d3:64:37:06:53:cd:f3:a1:
         bf:71:15:99:f2:6a:49:3e:18:f1:f9:c4:d8:af:23:2f:6c:5c:
         95:0a:95:09:0e:10:c0:ec:e3:be:54:f2:a0:d2:90:3e:7b:cf:
         6d:ae:f2:d0:38:dc:8f:db:b9:61:80:82:94:6b:06:40:1e:50:
         d4:8f:5b:79:9a:72:9d:63:99:52:68:0d:df:e1:3f:71:77:96:
         73:61:fe:18:71:96:83:2d:de:e7:64:19:8f:15:95:ab:32:9f:
         a8:45:7d:a8:f7:d4:b6:99:db:ce:52:97:1c:26:4b:cd:76:58:
         4e:a4:7e:4e:a9:28:2b:4b:58:26:cc:39:61:29:e3:d6:c0:df:
         39:16:6c:e3:2a:b6:f2:ce:7b:49:47:0a:40:74:57:29:1b:83:
         42:a4:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----