Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File:                     mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier:          bCYlvvWpFb43lGwgGWvtjtPEiSVOO2lEG/I2hhcudmk=
Subject key identifier:   34:68:DC:6D:DF:2C:CE:58:8C:9E:08:BD:B8:15:1C:DA:B4:DC:86:44
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer:       /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial:       01962E61B4F4B877717890EDEE77DA7443A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: TAIaujQ4VKKsXuUakY0dKEcAcGs.roa (hash: d9TADe0Qn4Oy08MasSNafdYWP3qjs55v/m6HHzPTGmc=)
                          2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: xhXMAgQr23C2qU5UAdasD0AHUDiDUHhqCnmUwAtR92Q=)
                          3: osc7ldM1EyAIq-Pc65jfOVsDsEo.roa (hash: jLW59X/F/Mi9You64kz4gdG8TC0tIrDCV1yujScQLmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b4:f4:b8:77:71:78:90:ed:ee:77:da:74:43:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=3468dc6ddf2cce588c9e08bdb8151cdab4dc8644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:b0:dc:e8:e5:9d:df:81:20:50:12:5e:9f:
                    1b:e0:89:3d:30:9c:3a:65:38:05:72:4c:f5:48:4f:
                    8e:e6:6f:30:ec:68:87:22:e0:da:8d:04:51:47:3c:
                    bd:d8:a6:fa:36:ba:4f:2d:8a:85:0e:eb:3d:79:1d:
                    15:77:57:b5:93:ec:1e:d9:e7:40:d5:49:d3:6f:a1:
                    34:f8:da:1f:d3:2b:93:cb:86:d1:ff:01:0d:bf:e8:
                    56:4a:97:34:12:ee:51:32:25:b7:49:dd:d2:06:9d:
                    77:82:6f:e0:e7:ed:03:ee:8f:50:d4:8a:4c:bb:cd:
                    36:f3:7b:99:98:06:a1:c7:9d:5b:fa:43:cc:f3:c0:
                    e9:c3:c4:44:7d:16:c8:71:0e:88:9b:88:a4:11:0c:
                    88:dc:ae:b1:e1:ee:d8:fa:e9:23:f2:b0:b7:d7:5f:
                    78:00:89:22:60:95:90:b4:97:e9:36:bf:9e:51:45:
                    ec:e9:cf:53:3c:1e:4e:1b:78:3d:e5:f3:46:7e:06:
                    31:1c:a4:55:33:40:be:4b:1d:71:a6:6a:d2:98:bc:
                    80:fc:26:75:eb:40:b7:34:e4:c6:34:46:12:a7:ec:
                    fb:46:8c:99:2b:58:97:b5:47:51:79:e3:18:73:99:
                    f3:4d:53:57:08:a1:0e:3e:34:d4:b8:1a:53:bd:6c:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:68:DC:6D:DF:2C:CE:58:8C:9E:08:BD:B8:15:1C:DA:B4:DC:86:44
            X509v3 Authority Key Identifier:
                keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ee:5c:8e:ab:1e:ba:f5:4a:da:ad:f8:ab:fa:66:d7:a1:78:
         58:c0:aa:d1:ba:73:08:bc:3c:5c:53:4e:29:f6:fc:53:fa:ef:
         ff:2d:f9:88:63:ad:d3:5f:4b:0c:d1:01:3a:f7:ba:a0:2e:e2:
         11:9d:20:a7:d3:87:d6:3d:36:a3:da:1d:06:dd:fb:c4:99:a8:
         ce:b0:da:a6:ce:16:5f:f1:a0:dc:cb:b5:58:81:90:8f:4c:d0:
         5d:43:db:79:76:93:29:d7:dd:d6:e8:8a:a9:45:4e:7d:45:e7:
         7b:9c:18:46:ca:11:de:ea:e2:74:45:f0:be:c3:ee:ab:f8:3f:
         ff:7b:ef:9f:36:d0:6e:5d:c0:e5:06:90:9a:4a:3a:9b:a7:54:
         ea:b7:b9:cc:10:a5:7a:ef:1a:77:de:55:f5:01:43:5c:de:bc:
         05:46:7b:7a:97:40:5d:10:8f:73:e6:f1:77:f0:0c:0b:29:63:
         f0:23:fc:c5:7e:90:2b:10:b3:4d:6c:ec:ac:0f:62:7e:e4:d3:
         1d:d2:f1:19:ca:6f:07:ea:f7:41:f2:87:0b:e6:af:3c:fa:10:
         ab:bb:97:f6:f7:61:87:98:24:c5:14:11:70:5b:7f:8d:4f:dd:
         ef:54:e0:9c:7c:8b:04:e2:b7:dd:fe:f1:84:81:59:d0:c8:5a:
         04:bb:05:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----