Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
File:                     muB8lKimr3pdGPTqrqeeJt-TIhQ.mft (raw, json)
Hash identifier:          +mKEXYGStMza/ZKoT0iKxpudoMKakXaxmZi7qSKdKw8=
Subject key identifier:   8F:38:9D:B4:13:91:70:CE:C4:5D:CC:92:62:56:00:D2:E6:04:CB:F6
Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
Certificate issuer:       /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Certificate serial:       01962ECF6A898FB4A61068EC55A21A71B6AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: hirmv4l90daqtziUonbqzbb8z94.roa (hash: 2pWfc5u+sM7C4s4+z6TKeGnl46lQEVqcp+2HcKGG7wg=)
                          2: muB8lKimr3pdGPTqrqeeJt-TIhQ.crl (hash: UHNUHxI3JRITfTNgiNP4QW41ak3kS2DwAlVmS6aT6kE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6a:89:8f:b4:a6:10:68:ec:55:a2:1a:71:b6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=8f389db4139170cec45dcc92625600d2e604cbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fc:0d:48:f3:ce:f1:0d:c1:f9:31:42:70:40:
                    46:ef:55:ec:0a:2a:7f:c3:05:78:69:d1:14:f2:5b:
                    a5:ee:a0:6d:63:fa:66:c1:66:01:68:71:6d:34:93:
                    7f:ca:30:3f:27:be:a5:2d:60:72:94:63:4d:4c:a8:
                    39:d3:3d:f2:c4:e2:29:25:90:a0:5c:ae:68:b6:94:
                    f4:3b:47:12:03:b0:0f:af:f3:9d:c2:a2:45:56:82:
                    d4:db:bc:68:85:31:2d:6e:89:d9:40:9f:2c:08:9d:
                    1c:88:eb:56:99:8d:67:f7:be:23:89:61:84:39:f7:
                    1c:77:c0:84:5f:a2:70:33:b1:59:d5:92:17:2e:55:
                    76:78:31:9f:cf:3f:f0:f7:f5:38:7a:43:e8:ff:5f:
                    fd:d7:5d:0b:01:32:86:e9:cd:9b:0d:92:e0:13:c6:
                    89:df:5e:1f:bb:c5:e3:76:de:a0:5d:cc:f1:28:0b:
                    b6:65:a5:9b:5b:6d:1c:4a:ce:06:d0:ae:fa:46:dd:
                    3c:c4:74:cb:a9:ac:8a:15:7c:07:f7:f5:a9:e8:8a:
                    ac:68:b2:ca:cc:4b:20:5e:2b:52:37:83:06:c5:5b:
                    f6:46:b1:fb:8b:48:5f:93:bb:24:f7:b4:f9:79:f9:
                    51:8d:8e:c1:d4:06:07:2a:49:2a:08:b0:06:bf:f1:
                    f2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:38:9D:B4:13:91:70:CE:C4:5D:CC:92:62:56:00:D2:E6:04:CB:F6
            X509v3 Authority Key Identifier:
                keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:01:d4:bf:4e:6c:a9:97:a4:97:6b:9d:ac:1c:ea:c4:4b:df:
         44:e9:a4:50:89:9d:cb:23:65:c7:04:c9:04:6b:7f:4d:17:2a:
         7c:80:84:de:0e:6c:bd:4f:98:90:cf:c3:98:33:ae:3c:95:90:
         63:64:c0:92:f4:27:a1:0e:37:4a:28:7b:55:55:32:72:81:a5:
         d4:26:b2:b0:d3:9c:4c:50:86:85:af:25:25:65:f5:5c:b0:97:
         8e:47:2e:b6:44:b7:e8:dc:24:ab:58:65:94:fa:44:9b:bc:e8:
         14:6d:65:62:34:c9:67:1b:c5:da:00:ed:cd:90:22:bd:67:26:
         8b:fd:c4:ac:11:47:53:ae:de:71:86:bc:79:fb:51:e9:6d:d0:
         d3:16:f8:0e:53:16:e2:c5:01:25:44:84:77:4f:33:92:30:1b:
         b7:e7:4b:6f:07:ea:22:89:13:de:4f:45:03:5e:0f:d5:44:42:
         8c:92:7f:ac:dc:83:d5:4e:c4:ac:36:07:94:39:b3:8c:3e:51:
         d3:b4:8d:3c:4b:d6:1a:88:bd:58:a6:85:cf:ce:96:76:80:71:
         06:99:a2:79:65:b1:b3:5c:0c:61:3b:92:86:f0:d4:a2:c9:f3:
         95:eb:73:cd:7d:20:e1:58:4d:17:fc:79:19:b1:df:c1:85:f7:
         2c:ec:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----