Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File:                     svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier:          Fxjw85fzXO/hZFGj0k+MzUChrwNcBHsFNuYpP1Hfx0E=
Subject key identifier:   A2:8A:7C:DB:66:3F:63:A5:8A:F8:05:A4:8D:85:DF:BE:2B:A3:A6:C1
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer:       /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial:       01962F3D405DF5DC60EF21159B3B1CAB48A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number:          0E7A
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: bkaEgwUfFQuvU4deHKYEq645oxo.roa (hash: a6t899hSFrNnCxDeJsEHX7KWBkAwoAJJxMP3KbPkcsM=)
                          2: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (hash: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=)
                          3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: SOSxllT9ritRDYl48qGRAfTdK3eW7b6iH4R/H3g3TuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:40:5d:f5:dc:60:ef:21:15:9b:3b:1c:ab:48:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=a28a7cdb663f63a58af805a48d85dfbe2ba3a6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2e:3e:67:ee:0a:19:cd:bd:fb:4b:d7:00:1e:
                    5a:15:eb:68:e0:61:30:25:fc:f0:15:d8:c9:b3:04:
                    a9:f5:13:d7:12:c9:b3:70:71:a3:65:c2:ea:12:c2:
                    98:76:b7:5b:51:78:7e:a8:f2:5a:39:26:bb:a4:05:
                    15:e5:c3:9b:57:a0:2e:42:f5:62:bc:d2:97:57:8a:
                    d9:bf:29:5b:d2:b1:07:50:0b:18:2d:26:d4:5d:fa:
                    90:be:f5:10:79:4f:f2:25:8d:a4:3e:83:42:e3:43:
                    ed:ea:ec:fe:d6:37:6a:1f:72:8d:62:65:45:77:0f:
                    e2:68:27:92:22:a5:a1:33:22:f4:33:75:e8:dc:41:
                    c7:8e:d1:55:d6:13:02:26:dd:96:81:11:59:73:9f:
                    49:b3:23:14:02:94:9c:8c:0a:d1:c9:28:16:fc:74:
                    97:3b:0a:46:f6:7e:81:85:32:af:10:20:d2:f1:47:
                    e2:99:55:00:77:ff:9d:a0:5f:01:c2:7c:1e:4d:f3:
                    fb:91:e0:3d:0f:08:e0:f6:0a:41:f8:7a:25:c9:df:
                    26:f7:02:70:50:5b:6e:cd:07:e5:2a:bc:b4:ab:be:
                    9a:46:e7:81:6b:f1:c8:b1:ec:6e:da:f1:69:63:ff:
                    2e:d4:89:9e:c4:2d:17:42:b2:ce:88:72:87:40:22:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8A:7C:DB:66:3F:63:A5:8A:F8:05:A4:8D:85:DF:BE:2B:A3:A6:C1
            X509v3 Authority Key Identifier:
                keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:21:f7:9d:90:dc:3f:20:d4:65:22:e9:06:5d:02:ef:74:17:
         62:51:28:c6:e1:7b:3c:99:c9:6a:15:bf:e0:a0:f2:9c:ce:5b:
         f2:e5:aa:c1:ee:53:1d:a1:aa:b6:64:50:cc:a8:f6:ad:00:d8:
         14:44:c5:3e:63:d5:db:ab:c4:c1:a0:71:d3:1e:d2:57:a4:1c:
         01:08:fb:6b:a1:8c:3f:99:47:51:6b:3c:c2:8a:38:80:9b:68:
         f6:1b:bd:ba:ac:65:5d:3d:29:7e:3b:52:6b:c0:10:a6:94:75:
         7d:2f:72:64:c8:ce:b7:7a:1e:11:65:1a:ab:7a:6c:1d:dd:9e:
         58:63:3c:e4:ae:20:0c:38:5f:bf:e7:39:de:56:c3:9f:ad:5d:
         79:96:aa:87:46:49:4d:73:3c:04:de:ab:07:33:97:59:04:51:
         6f:9a:27:ad:b2:08:53:eb:28:64:c4:be:2c:0e:1b:c3:ff:71:
         5a:c6:a8:7e:f1:fd:92:7d:97:c5:73:00:69:c1:1c:5c:ad:f8:
         1d:43:c5:25:db:02:82:52:d4:5c:4e:0b:d9:38:d6:2a:ab:cb:
         13:06:53:92:74:67:58:04:2e:ce:c7:0b:87:76:41:1e:46:71:
         16:92:ca:68:8a:97:5d:14:5b:23:b8:f8:53:b5:2d:90:2c:f7:
         b8:2b:85:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----