Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File:                     Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier:          jWruFnU35UwRKK/5Xs2SQy4RL9CeozgMidPpZEOeiSQ=
Subject key identifier:   E0:BD:54:42:53:9D:FD:51:4A:9E:72:60:73:6C:3A:9E:C5:75:86:91
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer:       /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial:       01962E2AED2A8676E012562CE5841FE55015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number:          0F4F
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
                          2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: eDkxEoPenh+sLm2ZzeXvDRcUuOjdtMM4BlEfsW552gg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ed:2a:86:76:e0:12:56:2c:e5:84:1f:e5:50:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=e0bd5442539dfd514a9e7260736c3a9ec5758691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:62:27:2f:0d:46:05:12:11:a1:fe:8b:dd:
                    8f:db:91:5d:35:5b:90:45:64:b9:e0:9c:37:b8:eb:
                    e6:68:bd:2f:28:32:52:1d:57:19:1b:5d:ec:7c:71:
                    29:94:91:2c:ab:ac:b2:65:1c:19:20:6f:08:9b:32:
                    46:6c:10:54:97:53:e2:ab:15:f0:61:10:23:33:04:
                    33:83:fb:c9:41:f5:6d:f0:92:02:91:3e:88:14:a8:
                    d3:89:2d:b3:24:02:ce:8f:6f:b6:92:17:21:75:ea:
                    5b:40:da:52:aa:80:9f:5c:6f:46:64:ed:29:03:81:
                    a2:c6:d4:3b:92:c5:64:db:ca:f4:86:f9:15:86:ed:
                    ec:09:1d:e7:1f:f2:07:f1:b4:0d:6f:bd:3e:7b:90:
                    e1:03:a7:87:5b:89:b1:0b:61:b2:a3:30:15:ef:e0:
                    8d:fa:9c:a7:24:35:c0:b9:41:b6:39:ba:3e:06:14:
                    c1:29:46:27:61:55:9b:b5:9c:71:de:49:1b:b3:a3:
                    d4:00:dc:3a:67:aa:aa:65:6b:1b:4e:ad:85:ba:8e:
                    06:d0:8b:36:6e:c7:54:47:73:0a:b6:d6:d1:d9:6c:
                    6f:6b:f2:77:e0:07:5a:51:ba:c9:cc:de:8d:d9:f8:
                    18:b2:f6:86:31:3a:23:cf:7a:8e:3b:c5:e0:e8:05:
                    ca:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BD:54:42:53:9D:FD:51:4A:9E:72:60:73:6C:3A:9E:C5:75:86:91
            X509v3 Authority Key Identifier:
                keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d9:45:70:59:12:c0:48:40:71:5a:af:56:a2:d8:41:9b:29:
         dc:5c:7d:e7:51:40:a0:5f:be:0c:4a:f5:68:a1:c5:5b:99:06:
         e2:36:6f:1e:21:68:4f:be:08:7c:37:4b:85:c3:f7:45:b3:c8:
         8f:df:4b:25:13:f5:09:a1:47:cd:cc:e2:e8:b5:fd:84:cc:bd:
         a8:b9:04:c3:e7:8b:b5:32:19:6c:00:a3:a1:f2:81:40:33:c0:
         36:1e:aa:de:8f:eb:62:97:86:8a:8b:e3:88:07:62:b1:2f:12:
         0c:8d:a5:96:5e:e3:a2:da:c2:dd:f4:43:e5:a6:83:ba:b4:23:
         c7:6f:c8:e5:6c:79:ed:02:45:71:0d:98:9d:e8:05:f7:f8:d2:
         15:2b:84:c2:e8:25:ed:24:7f:8a:49:5e:fc:39:d0:d8:37:24:
         4c:62:c4:eb:bf:5e:6f:d4:c1:87:79:18:22:75:3f:87:9c:4c:
         dd:e1:20:ac:b8:11:8a:a6:f7:a8:77:ec:50:49:bb:61:f0:54:
         a3:ae:70:b6:0c:8c:6d:eb:df:b6:d4:70:77:c2:ce:dd:c0:c2:
         05:6c:89:d9:26:02:3c:3d:02:13:3f:e0:1f:17:5a:e4:88:0b:
         ba:56:fc:62:94:1b:c8:f5:cd:62:39:dd:e7:3b:fd:30:b2:31:
         25:1e:18:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----