Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
File:                     vX2BeM7FzTdlSKkEkRf0acCnQxw.mft (raw, json)
Hash identifier:          duLJx/xcMN+XiSjXHk6PNpsiJfQUGAytMVJhE7eBz10=
Subject key identifier:   00:96:24:69:44:D6:22:AA:B1:0D:83:B2:FF:7A:E1:13:72:87:94:D3
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Certificate issuer:       /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial:       01962FAB51E33DAA59502F5EE4606D7E2CC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: Ndw7HVDtjP0mKBQVp0z9A-CbAvY.roa (hash: Gvsu5qwW/HZfnE/HXNRfeWRnDFzMBicoBm7giJXuEbI=)
                          2: QPWAwQFNqSZZic2_WlAPH58qqA4.roa (hash: skiFt149qEZ92Md1xg5hAbPh0VVNiYKSR7UbnADB92E=)
                          3: fHkoAZxOrb4jS9uptQ9di3MomH4.roa (hash: OuL9G7DUjjtpe04g3KNS/iW0YgxTMwqsjJxCgrATRoE=)
                          4: vX2BeM7FzTdlSKkEkRf0acCnQxw.crl (hash: slAFn/gF1EbPOmqzD0ITjrMQM6s9aa6LU7/dQ6cuX18=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:51:e3:3d:aa:59:50:2f:5e:e4:60:6d:7e:2c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=0096246944d622aab10d83b2ff7ae113728794d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:53:2c:bb:5b:33:f3:63:1e:8d:52:db:8d:d6:
                    52:82:89:c8:16:5b:d6:af:c5:63:45:9c:36:80:12:
                    49:bc:6b:72:c6:18:63:4c:8d:15:43:6e:44:01:3e:
                    ef:96:6c:54:73:ae:84:19:2a:8b:40:91:4e:6b:e4:
                    fe:4f:ce:8a:32:81:89:b8:40:ff:dc:37:7a:e4:e8:
                    5f:f9:e2:2f:33:00:66:00:71:82:ff:6a:56:d7:36:
                    62:df:81:33:54:cb:6b:01:28:59:72:ef:1a:32:e9:
                    65:0b:8f:75:08:36:bc:7c:e8:80:27:90:5c:7b:78:
                    b7:50:ac:1f:8d:27:1c:bb:8e:31:2d:a9:47:88:77:
                    42:b8:8f:37:11:ea:11:91:67:8a:db:44:c6:f6:ca:
                    59:3b:d1:fb:d3:66:b8:be:4e:21:bd:6d:20:d0:6e:
                    ac:45:c5:7f:5c:54:8a:d7:f9:89:12:a9:4e:b1:90:
                    3d:d2:d2:06:16:69:95:5a:27:e4:b3:ba:c7:c7:34:
                    00:9a:2c:e5:25:59:46:c7:47:25:92:84:f2:8e:96:
                    5f:e3:0d:d6:71:a9:11:cd:09:9a:01:2f:11:61:46:
                    df:46:7e:3f:e3:37:f1:b8:b2:70:a7:bc:89:95:8e:
                    7a:e0:4b:20:dc:d9:3d:e8:fd:f3:8e:61:ce:32:9d:
                    6d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:96:24:69:44:D6:22:AA:B1:0D:83:B2:FF:7A:E1:13:72:87:94:D3
            X509v3 Authority Key Identifier:
                keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:bf:be:74:6a:85:a6:9b:b9:95:b5:95:db:02:07:19:ed:b7:
         ec:bb:f8:65:7a:10:90:8c:cc:61:b4:51:01:ba:9c:3c:73:c5:
         29:ec:68:86:d0:80:9b:25:a6:13:a4:27:8a:d0:e4:d9:c4:dc:
         98:3d:68:95:02:35:b2:54:52:56:3b:28:99:f4:56:56:ee:c2:
         56:b7:49:ea:c7:f6:c9:d0:16:95:09:73:ea:1d:15:6f:78:8c:
         4a:ba:54:bd:6a:cb:08:80:2c:da:08:c0:a0:a2:bf:16:a5:3a:
         98:91:d1:88:7d:ca:81:be:f6:e1:40:ee:c2:ef:d7:f3:f8:83:
         5e:9a:3b:a3:e0:9d:fa:a7:ed:37:26:c0:d1:cd:cd:e0:4d:b7:
         c0:d5:7b:1b:ec:87:ca:c6:46:8b:e9:09:82:4f:52:c8:fd:0c:
         9c:11:b7:97:55:21:d8:e5:12:b5:b1:0b:7b:b3:2a:cc:1a:f4:
         e9:66:16:e9:2e:fd:59:f7:80:9b:28:b4:b6:6b:88:1d:dc:cb:
         a2:47:da:2b:01:f3:d8:18:6f:0d:63:ad:46:70:a9:60:c8:4f:
         63:23:6f:b4:18:6c:c9:dd:69:02:a2:9d:1e:7a:23:c3:2e:23:
         68:16:50:c2:33:62:08:e1:90:b4:4e:13:42:ba:9d:4d:02:10:
         9a:29:00:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----