Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
File:                     rMSPelkSBYjUFw6igV5q5RvmvP8.mft (raw, json)
Hash identifier:          U6duR+znFNPGoArybJh04+sEB32NNeXsjdE5Vy/7MMI=
Subject key identifier:   D0:51:66:B8:98:51:63:18:15:9E:E1:1D:CD:BC:E3:66:6A:35:8B:3B
Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Certificate issuer:       /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Certificate serial:       01962F7480D3D415611F6EDEE9D3AC726C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
Manifest number:          0581
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: 9aHsA3_Ynggs276_sCFsSz4MycM.roa (hash: qPhn5WBiWKeIsNs1cjOrwQopHwGcYtGq0upChF7kDvI=)
                          2: B0641shvDQ9p2BIgOLZHHAVjZSw.roa (hash: bvzmPdErYhIKPNksHZ+/ri9guEtRIMbmfasCvweNx4w=)
                          3: XrEnfRZ_aS_v253DnFB44a25MQg.roa (hash: cz7gfFsvOBuR8Jx82WCxw05R+M3PHvihU0+XIidI9k8=)
                          4: rMSPelkSBYjUFw6igV5q5RvmvP8.crl (hash: /SYxsZcXZAFpoRSu8A78cXoGQqaFa3YJgqkS0sLULFY=)
                          5: sGNKOVYjDTSby3HV0d5UrQif03o.roa (hash: fEt1u0Pnd1OgLhD2ZLaC3l+U/rkH+wDu1pDtZ8ZNq+Q=)
                          6: xspPEiEQGiUUjQNMRrR4LTirJ8g.roa (hash: ij24ceO8VLn5TPnpgS1+UFG8iPy5YqTgJqLC4WCf/eM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:80:d3:d4:15:61:1f:6e:de:e9:d3:ac:72:6c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=d05166b898516318159ee11dcdbce3666a358b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:d9:fb:c6:f5:8c:66:71:5e:62:2c:e9:ae:
                    a9:d7:01:9f:54:a2:0b:ba:0b:91:4f:bb:dc:de:73:
                    0e:ef:8c:7e:68:94:b6:47:2f:48:43:5a:4a:ec:b8:
                    dd:c1:5b:78:d0:57:da:a3:17:c4:e8:88:99:74:95:
                    8f:e5:af:dd:68:65:3d:d0:40:be:35:4b:02:75:b3:
                    08:b2:4a:74:2e:10:58:d8:5b:70:36:03:c7:b8:d7:
                    33:b5:59:3a:61:9e:5a:bc:34:c1:3c:16:aa:ed:b2:
                    3c:ae:b5:27:5f:55:ff:9a:e1:0d:58:8d:42:32:48:
                    d2:b1:b9:53:34:c7:3c:2b:33:4a:0b:47:fd:f1:b3:
                    f9:9c:39:f1:b0:60:fc:0a:4b:b5:70:f9:e8:ce:9b:
                    3f:6f:90:0d:b7:63:74:7a:58:f3:0d:9f:13:f1:86:
                    4d:44:72:7f:0c:c7:21:bf:aa:22:4d:28:44:09:f8:
                    07:00:96:37:71:70:4a:95:49:e5:89:0d:1d:c6:35:
                    ee:49:ce:18:f6:e1:d5:2d:d5:1e:4e:76:11:ac:33:
                    26:ae:58:24:85:0d:9b:31:4e:71:27:cf:40:62:04:
                    05:cd:5e:09:bd:03:7a:5f:86:5f:17:3b:ae:92:bd:
                    04:06:24:7f:a9:22:d9:be:2f:c8:17:cf:67:d7:31:
                    47:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:51:66:B8:98:51:63:18:15:9E:E1:1D:CD:BC:E3:66:6A:35:8B:3B
            X509v3 Authority Key Identifier:
                keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:72:cb:ce:aa:84:7c:9b:4a:15:94:5f:fd:f6:29:97:6e:80:
         32:ae:16:e5:59:b0:36:c8:63:fd:5a:8d:0d:e2:c3:4a:76:10:
         f0:7e:93:c6:d1:bf:82:eb:c8:07:ad:d8:30:a9:c0:12:4d:f1:
         4b:11:0a:97:30:97:d8:97:6f:43:93:cd:be:2d:98:7e:74:d5:
         23:9d:46:7a:2b:a6:fa:1f:c5:a9:03:01:8a:83:59:45:52:33:
         30:ab:75:59:51:bb:db:95:06:03:3d:f3:2a:4f:8b:eb:2a:6c:
         a2:4f:ce:e5:f7:66:14:e0:14:fe:6d:96:d8:61:10:b4:43:0f:
         b8:14:a9:1c:3a:53:ea:78:a5:91:25:f9:73:7d:ee:d2:7f:3a:
         82:6e:ff:45:58:0a:7c:d1:dd:f2:af:4a:e1:d6:0b:68:d0:4c:
         a7:52:4d:f2:3c:83:b6:98:c8:ff:44:dc:59:39:c0:d3:2a:9d:
         4f:aa:b6:9a:fa:6f:7b:36:62:8d:b1:8e:34:c6:77:1e:4e:08:
         09:fc:1a:53:e9:6c:09:64:09:a3:de:6c:0a:67:1e:7c:ce:7d:
         38:44:de:95:4f:1e:10:e2:df:48:c1:82:f7:8b:bf:a7:4d:26:
         75:63:38:25:70:23:6d:7a:6f:5d:fb:d4:52:5a:55:db:23:0f:
         5c:11:10:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----