Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File:                     0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier:          BU0WniPqmsx5x60IHBH6155BfJ7Rn/LD+A/HhS6BMr0=
Subject key identifier:   BE:21:DE:ED:11:AF:11:A4:20:66:20:B7:14:8B:99:3B:82:9F:27:B9
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer:       /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial:       01962F748487FD0ED02058DAD933DB8B86B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: ehDc4u9olMLL+aCC67bEIM3KqZxKKiDSpoviQeL3xg8=)
                          2: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (hash: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=)
                          3: u73MqPatc0TpxI-ub7E_BjZdR0A.roa (hash: Va28jPu1gwk8ly85dp8PE1WNkUFlIH8BlQN3xkzDe74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:84:87:fd:0e:d0:20:58:da:d9:33:db:8b:86:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=be21deed11af11a4206620b7148b993b829f27b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:33:f6:c6:50:e5:93:12:0b:9e:66:9d:79:9d:
                    2a:70:82:b6:10:f3:ac:13:ab:b9:b4:7c:a3:59:f5:
                    1f:a2:2c:f4:03:53:65:f7:01:fa:68:0a:68:98:ee:
                    78:af:3b:1f:a1:fe:4b:42:da:bc:bd:9b:33:c0:09:
                    b7:55:be:e0:0f:af:15:b3:e1:13:bc:fa:4f:fa:c9:
                    3f:b1:0f:34:70:bb:06:c4:b9:77:ff:9a:3a:65:13:
                    10:4e:5a:51:b5:77:60:c8:18:b9:35:ef:bd:7e:b7:
                    c7:7f:16:70:56:53:d4:b3:0a:70:16:1c:5b:b7:2a:
                    8c:6e:83:27:d2:4e:25:1e:c1:2e:d7:c6:f7:b9:c4:
                    6e:28:cc:03:79:2d:ce:70:dd:c2:18:36:89:ba:e5:
                    e1:13:5c:1b:18:3b:c8:02:a5:c8:5f:3b:8f:8d:27:
                    0d:8c:56:c9:f0:24:32:55:a1:02:46:45:85:28:ee:
                    d5:bf:21:f1:30:ce:6d:20:40:77:88:82:23:95:2e:
                    c7:49:92:be:0a:4f:dc:52:c0:da:c5:fb:19:24:f2:
                    f4:4e:3f:8a:4a:62:de:2c:e0:5e:24:4c:76:08:b3:
                    38:b0:ad:3e:88:63:d9:0e:c7:e7:47:f5:66:f5:60:
                    cd:d8:f4:6d:0f:15:71:66:17:d2:90:ea:ef:34:4c:
                    70:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:21:DE:ED:11:AF:11:A4:20:66:20:B7:14:8B:99:3B:82:9F:27:B9
            X509v3 Authority Key Identifier:
                keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f1:08:90:de:76:eb:49:06:88:d5:0e:48:e8:89:f8:dc:2b:55:
         81:79:26:10:af:dc:47:35:8f:f5:c2:e8:90:40:33:48:db:38:
         06:7b:ac:95:3c:2e:ff:51:05:9b:e1:bd:b8:39:77:5a:f1:ee:
         17:0e:dc:51:70:6a:49:cf:21:82:50:d7:c1:75:c1:9e:4b:e7:
         43:2c:11:1b:8a:3a:c4:c5:f4:f5:fd:23:31:16:c8:8e:1d:32:
         b2:c7:d2:e3:c1:49:77:39:4b:e2:43:7b:7c:dc:b8:79:91:6e:
         2a:de:46:32:20:fa:59:31:6a:ce:59:19:f7:ad:aa:66:62:19:
         a2:ed:5b:ee:6b:6c:83:7d:dc:0f:7a:32:79:fb:c0:67:0b:00:
         a4:d8:75:6e:18:d3:03:09:02:8b:d7:1c:4f:da:c8:5b:24:61:
         84:85:42:9c:19:34:ed:7a:21:2f:4d:ce:7c:3a:d6:bf:2b:71:
         b7:e3:13:d4:c8:96:90:02:d6:23:14:d0:8b:5b:43:08:0d:30:
         02:ab:f4:e7:76:84:c9:de:ea:e4:54:fe:4e:c8:50:1b:33:03:
         1a:75:77:46:ad:53:7f:ea:43:cc:46:b3:b8:1a:5e:fe:cb:33:
         55:85:4b:1c:ad:0b:f2:c3:55:6b:d5:f0:8d:87:2d:31:43:82:
         ae:7f:bb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----