Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File:                     mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier:          qLvhZFgR39MmTS3wXr/6bt0F2VsjsDHjVAx/+a4Y6HE=
Subject key identifier:   F0:1A:3E:11:9C:D8:01:43:04:AF:12:1B:C5:48:64:46:98:B2:02:79
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer:       /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial:       01962F3DCE8B7D1A03244B635D6E3072C615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number:          1512
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=)
                          2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=)
                          3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: jOv+3KFXjYTcTDI3wD5dxcN5SspF/a60IGksj9tEdKo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ce:8b:7d:1a:03:24:4b:63:5d:6e:30:72:c6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=f01a3e119cd8014304af121bc548644698b20279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:b7:50:e3:29:01:45:ce:ff:06:c0:c1:9b:
                    b7:f6:a3:96:16:68:8b:bb:a1:c6:e5:26:c6:af:6b:
                    2e:4a:22:7a:33:3e:b8:79:46:a6:3a:12:ae:5c:a9:
                    9f:ba:03:01:65:cf:33:78:84:9d:5e:3f:2b:8a:cf:
                    c3:01:1d:6f:e3:c7:1d:75:35:b4:6f:88:25:9e:0c:
                    40:3d:55:93:2c:67:57:b8:45:2b:65:bf:43:f1:a6:
                    29:76:93:9f:3f:94:ab:75:6f:e8:d8:4e:d2:0b:66:
                    8d:75:a4:fb:ba:8d:46:1b:07:d6:01:c2:ea:7a:ad:
                    7f:ae:53:d3:38:74:4f:dd:f9:14:a4:20:7f:60:68:
                    86:3b:7e:01:10:24:20:5f:f6:8b:85:b9:e4:0d:3b:
                    71:0d:4f:fa:f0:8b:44:6a:d2:36:3f:b9:20:30:0a:
                    5a:f1:52:28:35:a4:a3:cf:b2:85:1d:0c:0e:c3:d3:
                    ff:f5:b9:c6:b1:07:b0:69:6b:31:fd:fe:4c:42:89:
                    50:05:97:09:f8:87:f6:08:b7:0c:9e:24:1e:62:66:
                    ae:50:b2:c5:d7:31:99:b7:13:f4:cf:fa:82:ff:29:
                    8b:a0:0b:c5:cd:29:cf:24:81:13:14:0d:26:f7:c4:
                    69:46:d2:f8:9a:fc:1b:90:b3:89:0b:c3:fe:3a:f0:
                    2a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1A:3E:11:9C:D8:01:43:04:AF:12:1B:C5:48:64:46:98:B2:02:79
            X509v3 Authority Key Identifier:
                keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e3:50:52:c0:23:f0:b1:2c:5a:15:7c:65:b1:69:aa:15:21:
         36:9c:ef:12:24:58:75:6b:9b:2e:fc:8d:b0:35:25:b6:8a:51:
         a4:36:af:4c:36:f5:bf:de:67:b3:dc:4f:b2:95:e2:77:19:d1:
         26:32:d8:a6:f5:06:c6:79:32:74:21:74:8b:0c:9d:54:65:be:
         14:cc:b4:dc:74:e4:fd:b5:70:ea:28:6c:2e:80:3d:e5:fd:98:
         31:2e:50:3a:f7:28:f1:10:2a:44:2a:18:c0:65:63:c0:f6:9d:
         f0:4a:aa:bd:f6:6f:3b:98:99:ff:c1:fa:a1:80:c5:84:b3:6d:
         b2:ae:48:2d:ad:08:bc:c5:02:2c:61:40:75:f4:16:59:e6:3f:
         bf:a5:66:ba:2f:58:cd:ef:09:54:47:34:46:b5:34:d0:00:ed:
         bf:d6:c2:c3:04:a4:d4:9f:f1:62:81:5c:12:3a:85:20:2a:b6:
         03:c5:2d:f0:f8:36:78:25:bb:dd:9b:1f:c9:05:88:b7:5a:83:
         13:8d:8c:d9:a1:f3:5b:5d:aa:65:6e:c8:ca:dc:dd:46:b4:9f:
         95:b6:13:80:20:2a:0c:5e:2c:ce:aa:89:e7:f2:d3:f2:7b:40:
         1c:d7:b7:20:59:4a:d5:4a:5f:bc:fb:17:d9:f3:5c:f1:2c:d4:
         b7:9d:7f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----