Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File:                     Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier:          fFSAoHt2B7RTm5bBxnc27Ql8bvMjWV+kiPDaze7w8gk=
Subject key identifier:   2D:DA:5B:38:1A:E4:29:7D:ED:E5:D2:94:55:0E:B2:28:75:52:C7:2F
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer:       /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial:       01962F744755B2AE8CEAD792DFE381CA66C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number:          10A8
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: 4jpGoGfytvkcBWF1AUAJF0-qdUc.roa (hash: RRVQEgJXSCFRfqwvduB081T3vxLgFXzLMjRYLNyG6B8=)
                          2: 988R5OqLx1cdXJRL_JY-sifrbw8.roa (hash: BOCl4HP9kR43t+HCwvP5qbX3Z6YHP7lJJWGPo5+9LHA=)
                          3: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: BuAD3F+vB5fv4JhdABn4rDg7DwIbPQbyuS/kxKa6wqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:47:55:b2:ae:8c:ea:d7:92:df:e3:81:ca:66:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=2dda5b381ae4297dede5d294550eb2287552c72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:21:df:97:76:df:df:c2:0b:f8:ff:21:ca:
                    64:6f:0b:9c:0e:1a:ec:f8:d1:cf:1b:c5:9d:7d:34:
                    fe:c3:28:63:b5:1a:3e:86:77:5b:be:77:30:a8:57:
                    21:f2:74:09:e9:64:d2:7f:52:83:95:33:7a:5d:75:
                    72:e8:25:5d:a3:f4:43:60:ff:6b:b8:03:cb:86:bb:
                    10:cd:ef:97:9f:01:bf:d3:3f:2b:4e:a3:26:e1:3f:
                    a5:4b:ef:b9:b6:fb:6f:fa:84:de:fa:1c:db:24:9b:
                    11:55:40:eb:cb:42:10:ec:8c:a8:81:bc:3b:ca:1e:
                    ce:06:d7:e0:11:43:bf:27:b3:46:45:bc:2d:38:69:
                    5e:2b:90:20:26:2b:99:06:a4:48:01:eb:0a:5e:87:
                    64:2f:c0:03:84:3d:04:17:ad:f4:1e:be:bd:69:16:
                    31:01:f0:54:07:a0:df:bb:c3:4d:ac:27:9d:03:6f:
                    eb:02:75:88:50:8e:56:bd:3c:1c:53:a4:ef:43:fa:
                    b6:7e:b1:86:fd:89:83:d6:a2:c9:9d:f7:54:37:f7:
                    17:4a:a3:29:5a:86:aa:7b:00:b9:84:81:4c:0f:98:
                    fe:5f:14:e2:19:d1:f8:55:36:ec:a2:ae:53:d0:20:
                    17:5a:a1:2c:e7:d5:2a:7f:91:f5:db:97:32:a3:2f:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DA:5B:38:1A:E4:29:7D:ED:E5:D2:94:55:0E:B2:28:75:52:C7:2F
            X509v3 Authority Key Identifier:
                keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2b:13:98:ab:61:d2:0d:d9:ff:39:0c:a9:b6:88:ff:03:37:
         50:26:f2:80:b7:0f:b4:40:23:88:bf:2f:25:eb:6f:96:80:2b:
         37:9c:b8:81:7d:e7:f1:98:03:c6:2a:65:e6:bd:45:e4:95:33:
         a2:de:f3:95:0c:cd:08:32:c0:34:6c:20:b5:bc:cc:92:56:b9:
         37:bc:80:e2:08:f8:96:d8:ed:6b:98:9f:7e:8a:f9:2f:50:17:
         c6:57:67:7a:30:ec:d1:a1:6c:e1:47:f1:8b:18:d4:8c:4d:84:
         6a:f5:b5:63:dd:1c:88:eb:ab:06:56:e4:8b:10:e1:de:f7:52:
         d5:24:84:c7:a3:c3:00:6e:0e:2d:c9:95:27:fe:e0:47:db:3e:
         81:45:b6:7f:c3:6e:a5:ea:d2:d3:eb:f2:62:a1:76:1e:63:27:
         fc:97:26:15:91:2c:9a:7c:48:81:2d:08:91:62:ca:e1:2a:dc:
         53:70:51:b7:ad:ad:81:f9:de:cf:77:1e:6c:7d:b1:e4:6b:11:
         e2:d5:b9:7e:a5:e4:37:5f:2d:26:25:c0:95:3c:fb:be:a9:a3:
         71:b2:2a:10:0d:1b:68:22:ec:9e:25:60:34:d6:f5:d2:44:d4:
         aa:db:9d:8b:ae:93:6c:e1:23:79:29:6f:98:13:4c:27:ea:7d:
         ec:6b:9d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----