Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File:                     D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier:          q/f5YWmGIRWEQkgO4dgBr96tkjQm3xtxZwYLgNoma+k=
Subject key identifier:   92:6B:5F:C6:70:41:BC:0A:6B:57:81:A9:7F:7B:A3:3C:D4:9A:02:30
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer:       /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial:       01962E99BFA50037AE4645EB3F05C84C4C11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number:          073F
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: 6C2Szm3cfjp9bAf9_VEG9JmuRyM.roa (hash: m6tO4ROtbLwqmMtYoGkRxelczMRQ44EOZBvyjQVDxjY=)
                          2: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: /Fbfqe3RVJg0Rq3Rqj3rB4wtSn/KfnAxWt0a+3YjO74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bf:a5:00:37:ae:46:45:eb:3f:05:c8:4c:4c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=926b5fc67041bc0a6b5781a97f7ba33cd49a0230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:6b:53:e2:82:12:0b:8f:8d:c1:22:f0:8a:
                    d4:4a:17:e5:6a:8c:d6:ca:c7:56:ca:0d:c7:e2:e8:
                    94:e3:22:93:f8:b3:d5:fc:20:70:03:d5:a4:ab:4f:
                    39:c2:49:36:00:a8:f7:3d:cc:89:e3:48:23:7f:28:
                    63:88:ef:36:61:b5:09:10:d8:b7:62:91:eb:aa:8d:
                    40:be:14:6b:29:47:e3:a7:6f:2d:4b:8e:0b:4a:ae:
                    c5:87:25:e2:2c:ca:20:d2:71:6a:10:3c:d1:c5:67:
                    00:e2:ad:31:1c:77:7e:93:d1:78:ce:64:fb:f8:f6:
                    61:f3:a9:de:da:c3:e0:17:bd:f3:b4:7f:75:7d:c5:
                    c9:a0:d9:87:cc:ac:16:bf:d0:59:83:05:e7:1f:ad:
                    a0:37:43:4b:63:43:c0:bd:f3:14:ef:1d:ba:ad:58:
                    b5:90:bf:a8:4b:10:70:3e:0f:b6:54:97:b7:ec:85:
                    9b:47:e6:87:f0:cf:c8:9c:28:86:d0:4c:bb:d0:e2:
                    f7:91:cf:bb:6f:c0:5b:67:5a:b8:29:e6:7f:5d:27:
                    96:c1:f7:bb:74:bb:93:f7:36:5d:cb:28:c7:8c:01:
                    3a:3d:8e:81:9e:c1:de:98:74:13:9c:1f:7a:16:7d:
                    3d:a9:64:9c:08:99:c4:8e:ed:53:c6:1c:16:e1:4a:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6B:5F:C6:70:41:BC:0A:6B:57:81:A9:7F:7B:A3:3C:D4:9A:02:30
            X509v3 Authority Key Identifier:
                keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cf:12:f6:34:49:54:20:1f:cc:77:94:08:ab:df:db:26:5c:
         01:87:67:8c:f7:7f:cc:47:61:2b:65:1d:d6:19:5f:5f:4d:8c:
         f9:56:bf:33:0c:bf:e6:2b:d0:e0:0f:b4:cc:2c:ae:0a:71:ae:
         ab:53:5c:55:74:0a:33:1f:e0:45:45:1f:91:28:26:1f:dd:ee:
         16:60:8e:d0:19:e5:b9:a4:49:c4:7e:b9:78:cb:c3:2a:a0:c7:
         90:40:9c:1a:4a:97:1b:0a:1a:1e:14:3a:e3:aa:79:65:61:c4:
         27:90:a1:97:89:95:1d:79:e5:6f:6f:27:e1:b1:5b:3e:c6:1e:
         bd:9d:fd:c6:58:58:b0:c8:96:04:1f:a8:fd:f2:9d:c5:a3:a5:
         5d:40:4c:13:77:05:35:3e:fc:b7:4a:f3:bd:f3:07:0e:b8:f7:
         56:9e:97:55:9a:cd:ae:a8:c0:d5:0b:3e:f2:40:81:d6:4c:7d:
         69:d4:0c:3b:f7:f3:46:4b:bb:21:bb:13:c4:a9:2d:cb:91:6c:
         a5:6f:73:59:d3:20:f1:cc:d7:11:88:3a:9d:2f:37:30:d4:3d:
         8a:74:bb:af:79:9d:99:57:53:22:47:f9:68:0f:ce:21:91:b0:
         0c:85:03:4c:09:d3:2c:00:7f:e7:e5:85:aa:7a:20:04:4d:24:
         c3:e5:6b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----