Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
File:                     mAPED3e8iPryCfMdNh67q1yurEo.mft (raw, json)
Hash identifier:          5lEkyItmNlpP9gnvfPdOf7s0PTrD4YFeX/CiqAKwK9k=
Subject key identifier:   29:8C:57:B5:A7:D5:87:7C:09:8F:70:26:13:04:AE:9E:43:7F:26:9D
Authority key identifier: 98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
Certificate issuer:       /CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Certificate serial:       01962DF3D6DA649C71B32912838E5781E1FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: FofuUHCsYy2TWoAryzf8NlyduYw.roa (hash: R69ugPfWWsxLjShfG0VPEFk8EHkq5i3Md6nRP/x8COw=)
                          2: Myk-x7JFGZ-QD7gv9P00RV0PvjI.roa (hash: 328xxf9QZGGg7m61rWRIeZ1jEsvvk0/kuvlftHSPZ8o=)
                          3: TjOWAn9m61FkB31GdiLBvzbAI7U.roa (hash: aG8sOh3CvIOag2ln0Tel0Fs9xc2JzXQ51lpXRk6Hp0I=)
                          4: mAPED3e8iPryCfMdNh67q1yurEo.crl (hash: uuWvySnXi45GDxQ942SRP0+90PKlpJaUw/w3rXaN4DQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d6:da:64:9c:71:b3:29:12:83:8e:57:81:e1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=298c57b5a7d5877c098f70261304ae9e437f269d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:48:01:35:81:c3:3e:b2:80:38:ac:ac:c7:85:
                    e7:03:c5:e1:db:81:5f:de:b3:05:d2:17:10:a1:de:
                    ed:f7:82:30:10:32:05:ae:c3:4c:e4:7a:d9:bd:95:
                    a6:3e:66:be:5a:65:73:bc:81:39:56:53:61:7b:3b:
                    bf:4d:50:11:d9:7a:4d:eb:4e:02:b7:dd:0b:d0:5a:
                    d6:53:a6:b7:bb:a6:d5:21:17:c6:d2:8d:06:a1:4c:
                    85:ba:d0:12:e9:80:0d:02:d1:bd:6b:a9:b6:98:bd:
                    24:90:46:5c:41:d4:ba:8f:d5:74:01:e9:c8:77:f7:
                    5b:62:e1:6d:0d:06:af:05:58:96:19:b0:ff:52:ef:
                    81:17:88:41:2c:bb:66:3a:0c:c4:8e:ba:5e:c0:08:
                    1f:38:0e:15:3f:cb:a6:d7:75:fc:5c:08:07:ee:88:
                    4d:d5:ad:2d:a4:ca:74:ad:ba:95:53:89:9e:39:24:
                    29:d7:eb:df:f6:f3:4c:90:6c:29:78:c1:95:f3:fa:
                    39:e7:b2:32:ba:0a:ef:6e:9c:8e:bc:32:61:2a:49:
                    e8:96:a7:20:15:e8:3c:0b:70:90:fc:52:73:77:d2:
                    82:b9:be:37:6c:0b:a4:a0:10:68:dc:d0:ea:42:cc:
                    f3:05:94:d1:e2:c4:e6:ec:2d:4e:e6:b6:fa:82:f3:
                    05:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8C:57:B5:A7:D5:87:7C:09:8F:70:26:13:04:AE:9E:43:7F:26:9D
            X509v3 Authority Key Identifier:
                keyid:98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:75:cf:51:b0:0a:9e:2e:0f:eb:7a:c7:b6:c6:f1:0a:1e:db:
         a2:af:12:5a:dc:e3:9e:ff:cf:d4:77:f7:ca:18:69:07:01:41:
         d6:74:ff:dc:38:92:3c:56:6a:96:b4:a3:38:2a:33:90:0a:2a:
         75:da:74:b3:a9:8b:6c:ef:37:50:37:37:53:5a:b0:7e:d8:dc:
         be:eb:41:f0:20:37:9e:8b:42:2d:d5:9e:05:e2:4b:6c:da:a2:
         f5:63:66:22:53:33:97:4d:99:fe:32:9f:62:d8:9f:60:11:ba:
         39:9f:11:9f:12:2e:ed:f6:b0:6f:6e:41:8f:40:86:39:e5:46:
         fc:99:cf:1b:70:ca:dd:2a:1d:d2:b3:05:fd:80:e5:92:af:7f:
         47:25:6e:c5:9c:45:d8:4b:73:e1:80:e3:e4:f6:d5:b1:94:18:
         f4:9b:1a:7d:89:96:6d:f2:e1:48:75:98:58:3c:f6:db:e4:89:
         f6:24:2e:8e:71:98:87:80:cf:c6:7d:2c:ff:39:7f:ba:9f:60:
         4b:bf:25:63:f7:cf:df:8d:de:6c:f2:0a:dd:92:e0:33:ac:43:
         24:20:cd:09:a8:f0:fc:62:ae:a5:17:8a:f3:7e:53:89:49:b7:
         e7:26:dc:47:69:c1:08:53:c3:07:1c:07:2c:91:57:e8:80:74:
         2f:0c:ae:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----