Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File:                     mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier:          GXV/zyE4ulFbG9XiG0DNLRTN2syPrEsCxAU2vlV85VI=
Subject key identifier:   52:36:1A:27:FA:FF:35:E2:DE:04:BD:1A:6B:C6:32:E7:09:00:8D:32
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer:       /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial:       01962E99043FA0A75FC81FB1C756F9510A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: I46JWrJ0wkgqhhjcXFEe1Gwyho8.roa (hash: DdJIf3u90dazdq9CZo2Xm0G5puQXvhN9Fr/LhJUcUXI=)
                          2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: ZYE9oes6i1ZnXMnDCBeOol9g0LeeNscQ/8y37DPB7KQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:04:3f:a0:a7:5f:c8:1f:b1:c7:56:f9:51:0a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=52361a27faff35e2de04bd1a6bc632e709008d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:a8:4f:67:99:ca:a2:43:1d:53:ce:a4:f9:
                    38:0f:b5:21:fc:05:0a:d2:9f:77:a0:29:29:9d:dd:
                    50:8c:67:54:18:5c:c1:86:b1:3a:75:e0:71:4b:3f:
                    50:3d:0c:9a:95:03:17:65:91:9e:a0:8e:15:bf:76:
                    50:05:91:aa:a0:3e:92:0b:00:a6:46:d9:df:43:9f:
                    9e:12:ea:87:d9:79:7d:14:71:a6:2a:c3:07:d3:39:
                    1f:c7:b2:07:e9:33:63:d1:8f:b2:84:d9:b3:dc:97:
                    fc:8d:e8:94:5f:f7:07:79:f5:3b:03:d7:27:ce:f1:
                    09:0d:aa:b3:b8:95:bb:8c:e5:1b:f6:54:e2:44:19:
                    c2:79:63:96:f6:31:17:ba:37:dc:7f:7e:db:19:3a:
                    36:4a:d5:64:8b:39:3f:b5:0d:16:3a:fe:9a:f9:6a:
                    e9:74:4b:06:63:83:bb:ae:92:7b:ff:b7:27:9e:0c:
                    53:50:31:38:ad:38:c5:4e:35:31:14:a8:bb:e3:11:
                    8c:e4:70:ee:e7:d1:85:bc:03:d8:0f:ba:9b:3e:63:
                    2f:8e:fd:9e:24:73:d7:7f:0b:aa:87:44:79:e4:4f:
                    a8:95:8a:fa:a8:16:b5:b0:4a:26:0c:87:30:bb:a8:
                    8b:fc:76:b0:8b:13:0e:14:cd:82:85:2b:0c:a9:a9:
                    ec:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:36:1A:27:FA:FF:35:E2:DE:04:BD:1A:6B:C6:32:E7:09:00:8D:32
            X509v3 Authority Key Identifier:
                keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6f:9f:57:48:56:95:be:b3:eb:2d:28:8a:6f:64:ea:d5:76:
         9f:1a:33:a4:fe:7c:8b:fa:93:55:ba:b0:af:9a:08:ff:83:09:
         03:a8:2d:ea:07:d1:8d:0e:3d:65:61:36:8b:6d:3a:e5:ed:b1:
         4d:04:a6:e7:80:2d:b9:73:8c:c5:d2:23:7e:3b:da:a3:4a:c3:
         1c:9e:19:69:94:7b:5b:44:0a:4a:f9:45:8e:18:d9:93:78:64:
         f5:55:5a:a8:91:8f:41:17:23:f9:66:96:8e:25:6c:5d:5c:94:
         f8:e5:a0:97:02:b2:e3:a1:e4:b8:2b:6e:0b:59:1f:c6:59:21:
         52:93:6e:df:35:01:9f:88:9c:66:30:5d:55:ca:56:80:db:94:
         82:2c:b7:ed:ca:a8:78:c0:68:3d:19:99:fb:0c:7a:9d:32:ab:
         e1:ce:59:18:e9:b6:2c:96:31:cb:85:f0:c4:d3:9a:34:8b:31:
         0a:f8:bd:52:2f:e1:2f:0d:0b:ed:5c:b2:77:6f:6e:e2:97:42:
         ad:88:76:42:04:0e:fc:2c:07:e5:63:b9:ce:ac:05:e0:61:7c:
         47:04:49:8c:6e:98:d8:ba:b3:82:45:ae:ec:d7:ae:48:72:da:
         d7:2d:6e:b2:3f:31:15:dd:ca:b9:18:e5:da:cd:ef:c7:7b:d5:
         95:49:90:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----