Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
File:                     mpLTBwi51OjHwoyX-AN8gCcUTEc.mft (raw, json)
Hash identifier:          jkNMB1uOdPngQ15lBvqDafvUMGc4IYMmE2fHIOdGilw=
Subject key identifier:   B0:48:4D:72:78:6B:A4:36:E9:01:D8:08:8C:A8:7E:C1:95:8E:41:AD
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Certificate issuer:       /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial:       01962F74A89ED6BE97B5B702518DE8D807A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: Od-Up9G1FWem-yoSr_pXW5rnVIA.roa (hash: vWn4KDX8+1TqyTBBcDwsTTYdGzuVvyYM5vL1dIvw2nw=)
                          2: mpLTBwi51OjHwoyX-AN8gCcUTEc.crl (hash: kcVND/DkDQNbR5uy+6V7d+40xCks2m31GC7dzn7MzcM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a8:9e:d6:be:97:b5:b7:02:51:8d:e8:d8:07:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=b0484d72786ba436e901d8088ca87ec1958e41ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:89:91:4b:be:e0:69:a0:50:9d:f4:78:25:3f:
                    dd:55:1d:02:ed:11:c4:00:3b:3e:72:6f:ea:4d:f1:
                    dd:0a:8a:ca:50:a6:f4:12:0f:1b:e2:5c:1e:6f:39:
                    d8:98:68:ed:68:85:88:da:27:05:11:dc:11:b9:9e:
                    4d:eb:6e:a5:8d:3c:89:db:34:de:c6:e6:a2:af:07:
                    29:b8:89:86:b8:7f:eb:2b:c3:71:26:14:1b:eb:b0:
                    37:62:1c:29:39:ec:03:6d:2a:2a:e4:49:1c:18:d0:
                    de:39:46:3a:47:49:1d:f5:49:89:54:46:1c:d0:c9:
                    9e:37:55:f7:03:b0:c4:0c:ad:49:bb:ba:a0:ab:5a:
                    f3:fc:28:41:ac:6f:56:1d:5e:6a:06:c7:a9:03:af:
                    f3:07:64:bb:3d:dd:ed:01:43:61:88:79:d4:1d:a8:
                    f7:59:e2:47:e3:fd:77:83:1b:d0:35:ca:8c:ba:33:
                    2c:52:46:cf:c4:88:9f:6c:de:66:72:e7:88:ab:31:
                    a1:a1:56:b8:0a:ec:a7:3b:23:12:c8:88:11:7d:04:
                    c0:44:00:d0:25:19:2c:75:6a:8c:92:f2:42:8e:24:
                    30:8d:ff:d8:9d:54:91:78:11:5f:e6:91:2e:6b:c0:
                    ac:ec:5f:0f:33:e4:a6:7f:25:44:82:17:ca:e7:e0:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:4D:72:78:6B:A4:36:E9:01:D8:08:8C:A8:7E:C1:95:8E:41:AD
            X509v3 Authority Key Identifier:
                keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:5c:1b:33:50:64:8f:fe:da:2a:ac:ad:19:1e:97:d6:eb:65:
         f6:32:f7:f1:9b:31:40:ea:05:d8:a2:42:90:cc:a3:6a:5e:53:
         6f:6b:26:61:09:96:ef:a2:22:b6:0a:ff:a8:b4:09:57:03:29:
         b8:cd:3a:d5:08:1c:98:e6:52:3a:e2:33:86:64:53:b4:e7:1f:
         1d:88:fc:4b:ba:2e:96:46:20:d6:ea:4e:0e:66:b4:b1:75:2b:
         f0:28:1d:5e:f2:01:c4:f1:6d:38:69:b7:33:32:33:ad:a2:dd:
         fa:e3:c4:a8:0f:7b:8c:3a:d7:9c:90:02:38:e4:f8:47:49:ce:
         5b:95:bc:14:a0:1e:31:4d:23:37:aa:40:1d:3a:18:24:d1:9b:
         8f:44:88:f0:a1:a1:19:03:61:18:be:b5:10:2a:a9:64:98:f0:
         f5:89:c6:74:d8:02:07:dd:e7:44:c0:c6:29:a7:c4:4f:84:46:
         e3:0b:82:fb:e1:61:ef:75:68:4b:a5:f3:9e:7b:70:b0:3f:ae:
         4b:31:9a:c7:3a:cb:2f:0d:5e:83:fd:e6:ed:2c:92:22:76:a5:
         45:c3:b5:53:e7:24:4c:7a:62:f4:df:02:92:97:ad:52:c6:95:
         a3:fe:c6:8f:89:22:78:84:8e:df:73:2f:d4:7d:af:83:ac:8e:
         f5:32:e8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----