Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
File:                     sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft (raw, json)
Hash identifier:          OZ3PIO5OAGddaTEmemjmAnScVt7v+h5d+dRrDKlvBiA=
Subject key identifier:   BE:0B:2D:02:22:97:DE:F2:FB:FE:2D:30:DE:6B:DE:B0:1E:8D:65:25
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Certificate issuer:       /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial:       01962DF3EA50B22C62694F241C1DFEC0E69A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: IZAxEHA5n8YPukULkPEQv7owY4Y.roa (hash: vkfnMd+CZAW7CnrGWVozJx3AoLaV453dmGIo6rw9ME8=)
                          2: mA3rys3eEYCw0R5GwYAKoJlEh2w.roa (hash: Y+HfCJ1pTuTaQ4aj+4iQZxk3GQcy6uxEiMl5g7TwtZg=)
                          3: sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl (hash: AV6lIvvDSlegls46veSLRU2NN6XTrDQOReNyIBPkJ30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ea:50:b2:2c:62:69:4f:24:1c:1d:fe:c0:e6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=be0b2d022297def2fbfe2d30de6bdeb01e8d6525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:8b:69:fb:73:8f:a4:af:2e:28:f1:25:42:
                    63:04:18:22:c6:95:f2:2f:a4:b2:23:19:f3:fd:ce:
                    6e:e2:eb:8a:46:88:05:ea:49:22:2f:66:15:39:83:
                    14:18:b1:11:e8:09:df:5e:6a:4a:29:f0:a9:df:39:
                    57:c5:41:5f:f3:2c:64:d0:43:0b:db:7c:9c:c5:bb:
                    c0:0b:c1:08:b2:85:87:73:58:56:6f:5a:26:fe:13:
                    f4:99:9f:23:58:8e:29:92:dc:0f:32:74:0b:c5:e5:
                    ab:8c:0d:a7:42:f2:a7:fd:00:b9:f1:82:41:5c:6e:
                    e4:2c:1e:57:16:25:57:61:c7:50:66:73:bc:ff:a1:
                    6b:a4:3d:f4:e5:b1:a0:0d:82:0d:b6:d8:6f:91:c1:
                    19:07:07:75:00:89:73:1c:98:18:00:74:f2:d8:33:
                    b3:d4:a3:42:d6:69:56:8d:e5:1b:ba:38:d5:4e:f9:
                    74:ba:fe:9a:bf:36:a9:84:32:b8:86:1b:62:ef:b5:
                    d5:41:f2:fe:33:1d:63:a0:d7:3b:5b:9a:0e:c3:7a:
                    3f:f3:13:a5:b4:ef:93:07:90:73:51:3c:32:8c:51:
                    a4:1a:e7:22:cd:e6:ff:10:e0:a4:ba:66:a3:6d:53:
                    20:37:54:40:25:91:00:15:38:6b:de:7b:85:d9:bc:
                    80:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0B:2D:02:22:97:DE:F2:FB:FE:2D:30:DE:6B:DE:B0:1E:8D:65:25
            X509v3 Authority Key Identifier:
                keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:29:8c:4d:d8:96:d7:0d:5f:02:a6:9f:2a:c9:17:b8:e6:c5:
         95:dc:1f:32:00:92:2f:14:1d:e6:cc:24:3b:df:ee:41:de:fb:
         0a:4e:a4:99:0a:21:cf:4a:9b:10:e2:1f:bc:3b:22:9c:76:21:
         3d:18:53:6d:97:7a:69:3a:21:c2:c6:6c:48:63:17:58:db:09:
         69:36:cc:63:91:2c:a3:e7:f3:4d:3f:97:ca:96:ac:2f:2e:92:
         f9:35:57:d9:cf:3e:3f:d7:c1:cb:de:bb:69:bc:9f:c6:02:eb:
         e3:de:b2:70:a5:74:52:0b:76:09:17:66:6e:69:2d:32:0d:50:
         c9:98:bb:80:22:e9:dd:a4:07:5e:c4:5e:ba:0f:7e:c3:ed:4a:
         fb:25:47:1c:b8:c4:70:e5:a3:35:ff:83:1d:84:9b:cf:3d:68:
         e0:1f:2f:16:38:96:91:65:22:fc:69:b6:c0:4e:c8:d8:5f:ae:
         f7:9b:c2:38:50:bc:93:ec:48:30:05:48:c5:ee:00:5e:01:0b:
         6f:db:e9:da:47:fe:e0:ea:16:29:7c:16:42:48:12:fa:25:d1:
         0f:9f:55:ae:4e:75:37:41:03:7e:1d:a9:82:84:51:ea:f3:a5:
         fb:50:38:94:69:70:c8:83:30:20:26:ab:fd:dc:1f:76:bc:fc:
         ea:e2:d5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----