Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File:                     m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier:          5Yn30Jfzm1UbS9IIk9MeUUYCSqS9LBQH33Qkz4lF0bk=
Subject key identifier:   5D:F4:BD:74:E2:FE:2E:E9:2B:B1:F4:F8:89:80:AF:32:2B:A4:9E:89
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer:       /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial:       01962DF4074CD38CB4D3BBD5B555B28932FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 1mDSvWCAPrTbdUwmp52_NsdaJps.roa (hash: FwQIJqtRB7XaFGpge2zOocq9MbKJo1suVWwULTT7sHA=)
                          2: JI_IFEVZOLgwy-WHZOm2izr6PIo.roa (hash: OO8EbVI1MKPERWUpbisO0H4MA7HYDCDhv160pD1pO5c=)
                          3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: uCjhfl9uAZqj9evYmHcNRU9UiIVi0E0ceHM0hMwRGGI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:07:4c:d3:8c:b4:d3:bb:d5:b5:55:b2:89:32:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=5df4bd74e2fe2ee92bb1f4f88980af322ba49e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ff:29:fc:d8:be:00:8c:74:64:24:90:f4:11:
                    fa:21:0d:84:b2:d9:c8:77:0e:57:ce:cb:80:70:78:
                    65:bf:74:6e:68:02:58:c4:ce:75:c1:bb:35:b5:9c:
                    b5:98:e5:b5:7c:d0:73:d9:bc:1e:a0:c4:6f:37:c2:
                    c2:c2:3e:d3:46:40:c6:aa:d1:46:f9:c6:c7:48:a4:
                    0a:49:05:d1:c2:40:a5:50:ed:7a:be:8d:00:7d:12:
                    9c:dc:af:6f:7f:97:d4:24:69:9e:40:d7:65:1f:15:
                    f2:2e:4e:73:2c:55:b5:9a:23:73:30:f3:f4:9d:35:
                    a6:70:65:ef:a4:bd:96:3c:98:91:9e:8e:0f:ef:8e:
                    ba:57:47:25:e0:08:b4:e4:e1:ba:d4:56:dd:73:6e:
                    ea:67:68:ce:c1:0a:74:50:70:7d:9c:6a:e1:36:f8:
                    57:c8:7a:d7:80:d0:dc:40:f0:8f:13:a9:dd:d6:58:
                    57:d6:bf:6c:f7:26:a3:0a:47:4f:e0:5a:9a:ee:d0:
                    2d:75:03:fd:0e:e0:8a:9c:fa:a5:25:31:b7:92:63:
                    b6:d6:a6:43:f0:68:4b:82:fe:67:c6:36:ee:5a:93:
                    c4:b5:46:b7:d1:ed:a8:6a:4d:51:28:89:df:71:61:
                    de:43:e1:1c:da:37:ad:f4:3a:af:3d:8d:cb:ee:5d:
                    7e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F4:BD:74:E2:FE:2E:E9:2B:B1:F4:F8:89:80:AF:32:2B:A4:9E:89
            X509v3 Authority Key Identifier:
                keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:77:d2:30:82:c9:12:eb:ee:e4:87:55:f0:72:e8:20:3f:5b:
         3c:47:02:47:eb:5d:21:c2:c0:8e:3e:9b:69:0b:b0:87:86:c2:
         92:9a:b1:55:01:f0:8b:59:28:8e:47:9b:9b:7c:76:2a:c9:c6:
         53:dd:76:ad:a9:0a:0e:77:d7:57:95:ca:dc:bd:cc:02:04:e3:
         39:24:34:0a:f4:73:c0:6a:c8:29:8b:a1:f7:7b:de:51:3c:4f:
         20:68:c2:3e:2d:6e:a1:5d:ba:8f:4d:7e:cf:d1:56:87:0c:58:
         03:01:48:9a:30:1f:35:28:59:bb:01:a2:37:91:cb:0a:a6:db:
         56:53:75:4e:c4:f1:67:cf:32:bc:33:93:ca:a7:d3:2b:8c:ec:
         34:e1:98:24:32:f3:95:a8:22:10:ab:76:77:be:dc:a9:69:f5:
         eb:c8:69:fc:a8:d8:2e:de:79:79:6d:0a:68:21:17:7e:e8:d0:
         e5:19:08:2d:f6:2b:82:c1:f4:d4:0c:38:1f:86:e0:e9:ac:2d:
         96:0d:a4:2a:55:39:4f:f2:eb:8f:70:76:2b:66:85:1f:ab:b2:
         8b:87:77:e9:42:32:49:83:61:d7:f0:af:93:22:54:12:ee:02:
         a5:b0:16:0e:51:79:ad:a2:00:fe:7f:60:f7:8b:d8:32:63:9c:
         e0:9a:47:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----