Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File:                     MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier:          qVIR+Q0DGbnjZHiwtKNqf1+XoxDJl8+FOh8KosVczCw=
Subject key identifier:   B0:8A:71:10:D2:4B:72:68:E2:25:F1:0B:D5:DC:0D:B2:71:F1:AB:98
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer:       /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial:       01962DF4475A2AFE78AE00D70E265D4EB463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number:          0BCF
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: aRmu5McHPJnmM1i+/cDbP1Iz/jp6N1b0pENxnNRov+A=)
                          2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
                          3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:47:5a:2a:fe:78:ae:00:d7:0e:26:5d:4e:b4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=b08a7110d24b7268e225f10bd5dc0db271f1ab98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:ad:bd:f6:68:14:ea:9d:59:d1:56:99:6a:
                    a4:98:ca:24:65:99:e0:53:c8:95:cf:fc:00:04:71:
                    d4:c6:f2:f7:8f:b4:66:39:c1:10:2b:65:ff:d4:2a:
                    da:ca:7f:74:85:65:31:19:4d:0f:63:f0:dc:53:36:
                    f5:0d:13:fc:7a:1a:ec:74:de:93:71:58:79:37:4e:
                    65:04:0e:db:60:c3:4b:4c:7b:26:3a:f1:9c:c6:b8:
                    a9:59:50:e4:fe:12:ed:45:08:c9:7b:3b:a9:d0:3c:
                    c0:74:5e:21:f6:5c:9c:52:27:7c:71:47:5b:b7:b3:
                    a9:e7:40:12:f0:af:e2:58:ad:db:c6:f0:08:42:6d:
                    a5:b0:73:60:64:b3:b5:a6:eb:99:25:cc:80:b3:ed:
                    69:32:bf:94:54:0e:f4:d5:da:c8:37:30:5b:1f:1b:
                    52:36:e2:65:c9:80:89:18:81:2e:52:cc:12:6a:b4:
                    bc:26:cf:41:fb:bc:29:ff:75:79:1b:b9:0c:4f:17:
                    3b:9c:89:8c:e1:ee:60:f6:5f:3a:4e:72:f2:19:76:
                    f8:1b:6c:76:7b:8d:0a:e8:5f:73:f6:7a:bd:13:53:
                    53:30:db:0c:ba:c3:ce:aa:36:71:4d:04:e1:bf:f5:
                    e0:93:40:53:07:9c:77:17:4b:65:4a:b0:e2:a9:0d:
                    18:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8A:71:10:D2:4B:72:68:E2:25:F1:0B:D5:DC:0D:B2:71:F1:AB:98
            X509v3 Authority Key Identifier:
                keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c0:8e:67:80:4c:18:f1:68:2b:bd:06:2a:56:cd:39:89:ef:
         ec:7c:17:2c:df:a3:f8:77:45:d4:24:58:cf:8f:1a:f5:3e:89:
         22:d4:ba:bc:3b:52:90:2f:89:46:69:13:37:21:b0:30:5e:55:
         d6:e2:e4:9c:e8:22:88:54:99:89:e7:8f:2a:e1:bb:ab:3e:a8:
         55:68:d1:6e:be:d5:73:a0:87:d2:fc:45:1d:a5:76:ca:6d:20:
         6b:bf:1b:6b:a6:f1:74:3a:8d:0d:74:89:c6:29:09:2a:8d:2d:
         a7:44:cb:ec:1a:27:29:23:37:de:20:1d:16:80:b9:33:7c:c2:
         ab:4d:dd:4e:d9:cd:ff:54:2d:32:55:8b:73:15:79:de:ae:a9:
         b7:b8:b0:2d:1e:7e:88:b8:40:f6:18:2a:66:f8:92:9d:9d:8a:
         d2:db:02:cb:f3:99:51:55:12:b1:de:5a:d3:0e:14:df:40:c6:
         3f:b6:c3:ac:1d:df:c7:99:6e:7b:66:90:d9:69:a9:50:d6:0f:
         cb:ad:d2:7a:29:0c:89:57:23:53:dc:4f:17:a4:39:7c:35:50:
         1b:af:f6:01:cf:c5:2a:a8:92:5a:50:52:0c:21:76:1f:ef:0e:
         45:d2:16:60:e8:ae:41:22:a4:45:2d:13:bc:2f:c2:33:78:e1:
         78:07:85:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----