Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
File:                     fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft (raw, json)
Hash identifier:          7ZHOV2kRWa4m7n4R67tM0Fx7gXtG0b34xzV+nylmUkA=
Subject key identifier:   B8:BE:32:43:80:55:1A:40:87:70:FD:53:60:1C:36:6B:A8:E8:E6:CB
Authority key identifier: 7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7
Certificate issuer:       /CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
Certificate serial:       01962DF40D569769B88B6B3DDEEDA3349D09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: 9f63Sb9a540JPUwazld4MMVS_iE.roa (hash: DIORsJwOy+2Zy+DITLzusBKnfVOGOXxgm47fM/VbAWQ=)
                          2: fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl (hash: wIM6EWEtZbiddtsPMtQCkQCmA6xJse6RmG6TKRbAuA8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0d:56:97:69:b8:8b:6b:3d:de:ed:a3:34:9d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=b8be324380551a408770fd53601c366ba8e8e6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bf:37:a3:c5:dc:f5:5c:f2:20:b4:ab:5b:63:
                    e8:1f:f4:0b:b1:9c:c6:5f:f9:90:9f:aa:1c:a2:15:
                    94:8c:e7:69:f9:2b:7a:5c:a7:ca:79:aa:ee:e2:f6:
                    0b:b5:77:d5:de:2c:b3:72:cc:9e:72:83:5d:b2:e7:
                    16:1e:bb:a2:6f:01:07:17:c8:72:95:32:01:61:1e:
                    7e:62:95:21:0f:9b:41:55:4b:b2:28:2a:6a:7e:53:
                    94:e7:aa:9e:70:d6:83:33:69:17:52:e1:21:e1:1f:
                    14:1b:6b:f4:cf:f9:30:f2:38:2b:17:74:cd:09:51:
                    4a:ca:83:ad:5f:b2:38:da:e8:92:a3:3e:17:d6:63:
                    93:86:d9:3f:29:3b:90:97:43:03:c9:ad:42:77:eb:
                    ea:f7:ab:4a:da:9a:3d:94:60:0b:e3:cf:f9:67:26:
                    74:62:a4:ee:2d:6f:9e:35:bf:5b:0b:8a:bf:9e:ef:
                    7f:22:e1:33:52:d0:37:e0:9a:24:50:0f:03:59:be:
                    0f:51:3d:5f:05:5b:15:4d:5b:19:dc:00:f5:cc:52:
                    d8:88:03:b2:62:6b:03:d5:1a:c8:0d:af:13:37:15:
                    da:76:49:32:6a:ed:1e:b1:25:79:cd:f6:8a:62:7d:
                    7f:58:d4:09:3e:32:03:28:95:71:54:19:4a:67:a6:
                    7d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BE:32:43:80:55:1A:40:87:70:FD:53:60:1C:36:6B:A8:E8:E6:CB
            X509v3 Authority Key Identifier:
                keyid:7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b5:f9:38:3f:c9:1d:f5:f0:f7:55:84:a2:ac:aa:49:e4:79:
         72:fe:21:0f:14:17:5d:fa:7e:89:f3:ae:5e:df:a1:f5:c3:06:
         e0:50:18:11:9b:c8:b6:d9:72:f7:46:52:0c:1f:ae:64:39:3b:
         f9:74:66:0e:1e:a4:f2:22:3d:28:cf:c4:4c:39:66:fa:f6:22:
         98:55:22:00:be:25:9d:cd:aa:1e:fe:06:d8:03:91:2a:5b:dc:
         ac:ff:42:c0:7c:ad:41:73:47:51:3d:d3:71:0a:d3:00:03:51:
         b7:5b:e6:ce:67:b8:74:02:39:2f:19:2f:50:0c:34:49:33:80:
         55:f2:47:bb:45:34:62:80:c4:96:82:73:f9:76:00:54:70:e2:
         47:ed:b4:d1:90:25:82:ff:bd:9f:2f:71:d2:b9:33:35:bf:9c:
         14:3f:88:77:52:e2:fd:6d:b3:e2:4d:26:41:1b:05:76:3b:15:
         21:72:3f:c7:c9:08:14:d1:15:90:45:38:fc:c6:b3:eb:7b:4b:
         34:ff:5f:a7:9a:8b:20:15:20:9a:a6:21:4f:ce:c7:93:f5:41:
         dd:92:83:12:48:56:88:66:f6:95:75:79:d9:48:8e:c7:9e:65:
         2f:35:4d:45:0c:25:20:61:38:1d:ef:5a:ed:d9:6a:6e:09:29:
         a5:dd:76:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----