Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File:                     diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier:          2xujDNXRxSE8ODB5gOaJPTzC2FLhYPXi1bUc3lRr8uY=
Subject key identifier:   BF:68:98:5D:EB:74:23:87:B3:46:EF:75:DF:CE:A4:8D:D7:D4:B9:03
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer:       /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial:       01962E2B16F83237ADAC9E044BD568C6C5D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number:          0FE9
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa (hash: gx9j7t15QGkKCeRoIsEf7+ccbpVHUlLwcV3VvzvpL3Q=)
                          2: WBT1E8wMWVVtH50VHvbFOxWnsoc.roa (hash: 5BEbt/cVnX10Y8kVh9GNgAEAt1IoZtioMoHuC8FObvc=)
                          3: aBAGt66YKPdKQ8RR2EE80USkpUo.roa (hash: iC1feUzfX4kgYVZxGnHiEz5thaZLZj/NmxSIHfu8NW0=)
                          4: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: dsetXQEY7gBZXbFJOvx7IFyrq9Wtl9urfffBPHd8Irs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:16:f8:32:37:ad:ac:9e:04:4b:d5:68:c6:c5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=bf68985deb742387b346ef75dfcea48dd7d4b903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:c1:70:b1:f1:e4:cd:f4:cd:bf:e9:50:cf:
                    38:18:14:27:e2:fc:df:73:04:9a:70:78:04:9a:13:
                    27:fc:69:24:4f:84:3b:fe:70:eb:e6:bf:a9:aa:15:
                    dc:b9:4d:f6:dd:08:39:e5:fc:9f:28:75:5a:62:2e:
                    d2:b5:e1:77:0e:35:0a:7d:41:9e:b2:9e:39:60:1c:
                    18:a7:e6:df:0d:5d:c5:b7:68:6c:65:6f:d2:a7:f1:
                    43:0e:06:6a:c1:cb:7c:93:6f:97:7a:ca:a5:2f:53:
                    33:f7:01:56:ee:46:ca:a2:8f:ae:cd:26:38:de:a0:
                    af:da:51:43:da:06:80:68:cf:68:fc:7d:08:f3:d7:
                    24:6a:df:7d:27:1d:27:ad:b2:98:1b:89:77:21:08:
                    12:0d:6d:94:1f:95:e8:38:ed:db:dc:47:09:cd:a7:
                    c7:7f:29:ff:8d:a4:4d:ad:60:72:df:cf:29:6a:34:
                    d6:8c:91:84:f8:4c:25:47:db:a3:c5:27:44:07:50:
                    3a:0a:89:e9:2a:dd:e2:63:d5:12:e0:4a:09:05:5d:
                    e1:52:9c:1c:6a:c8:15:ad:a6:d7:d8:b0:90:d8:f5:
                    3e:41:9f:dc:16:37:6d:3d:af:ad:68:aa:26:e2:05:
                    a7:47:1f:31:2f:c2:b0:c3:f0:46:b0:38:af:4e:c1:
                    af:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:68:98:5D:EB:74:23:87:B3:46:EF:75:DF:CE:A4:8D:D7:D4:B9:03
            X509v3 Authority Key Identifier:
                keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:bc:db:2a:cd:1c:93:47:7e:f8:6a:4a:10:3a:ae:64:27:98:
         99:46:4b:83:f1:d5:e9:d6:d5:27:28:71:7b:9f:b4:2f:84:cf:
         7a:c8:7e:7e:cd:57:f5:59:61:91:ca:c9:cc:fd:dd:64:ba:08:
         d1:9a:97:53:a6:d6:6c:93:33:6b:67:26:fe:d4:4e:f7:47:c7:
         61:41:25:63:7d:a2:ad:38:1a:25:b5:32:f3:4f:12:ac:01:7d:
         c9:b3:5c:35:45:ee:1c:e0:3b:11:a9:96:4c:bc:e5:aa:5e:76:
         67:e8:0a:82:d3:32:d7:2d:1a:81:7e:7c:99:ee:e2:a1:d2:40:
         af:c8:2b:ba:dc:db:63:48:49:ce:94:08:67:4d:98:85:d9:99:
         31:50:ce:f4:f2:30:a4:10:be:fe:97:bb:aa:e8:38:a7:39:93:
         30:3f:53:46:c6:5a:96:b3:a7:18:d5:87:60:6e:9a:69:bd:04:
         97:ec:88:81:58:0a:69:b8:a9:ae:ce:da:91:3f:46:e0:82:50:
         4d:d7:d4:29:89:d0:3a:79:e0:6e:d7:45:3a:f8:44:88:94:d5:
         21:85:14:a8:28:64:c5:4b:f2:6b:96:ab:de:52:54:8b:24:a4:
         36:5c:a8:f6:8a:5c:5d:7f:43:80:48:52:a8:52:b7:de:a3:10:
         0d:cf:d6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----