Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
File:                     fOl4IyXTBUy2lWrSJwRTDekqDwU.mft (raw, json)
Hash identifier:          hxq6GsdWR0lzRhnfYNrE6iRxwnJ3pzsuEXtJlnuDTPI=
Subject key identifier:   0D:FD:67:9A:31:DA:47:62:7F:03:DE:1E:48:D2:A5:0A:7B:A9:67:9C
Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Certificate issuer:       /CN=7ce9782325d3054cb6956ad22704530de92a0f05
Certificate serial:       01962F3D37A949F485D452EFE27A9DF03E6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
Manifest number:          044E
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: 2DvVU95orox5IeGSdibufOYyF_M.roa (hash: zYc2kejhvwZAMUP9rtgZ0VImRS6xXrZBfW+6RhgOP2c=)
                          2: _vBlwHfpCbgKUBFoqSs3ggu60nI.roa (hash: AsAILNa2VMgTcOZ13cTcAxG+d9Mwo5a4AZ6ZUVGbk/c=)
                          3: fOl4IyXTBUy2lWrSJwRTDekqDwU.crl (hash: b2tpX7q6vX9rE3oe0nt/MD4+AKonoQs9+HbehUTlPaE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:37:a9:49:f4:85:d4:52:ef:e2:7a:9d:f0:3e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=0dfd679a31da47627f03de1e48d2a50a7ba9679c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:e3:f1:57:a9:dd:b0:cb:a6:f1:c0:4e:b2:
                    34:54:b2:ff:e1:9e:3e:d2:9a:20:7e:44:52:15:ef:
                    ee:d2:07:e1:5e:2a:ee:fa:c2:0a:b1:b3:5a:56:bf:
                    31:f9:b0:ea:c7:a3:5e:a3:dd:43:a5:7a:50:f8:8a:
                    92:f5:2a:75:ae:83:f7:6c:35:8d:71:be:2c:8f:01:
                    2b:8c:fd:98:d4:23:24:7b:95:45:bf:8a:e8:f5:02:
                    af:da:c8:c6:d2:46:75:86:54:cc:5b:7c:07:9d:32:
                    f2:fb:f9:c7:37:af:e1:b9:9f:db:0a:84:0c:a9:fc:
                    f4:5e:a0:ae:0a:6d:1e:44:f1:1c:44:f9:24:64:c5:
                    1c:f8:8c:9b:59:a1:0c:3e:3a:7f:59:74:08:03:0f:
                    66:b1:66:43:94:c7:73:0f:84:b7:6a:7b:36:bb:fa:
                    53:d7:0f:44:b0:60:7f:13:79:29:94:fe:56:e4:f4:
                    eb:07:12:a0:5f:3f:89:ab:1a:4e:81:7f:26:0f:8b:
                    68:d7:50:2b:4b:31:5e:cb:dc:bb:3b:8a:d3:9c:f4:
                    b2:69:e0:db:c5:e4:a1:bd:23:be:22:51:04:74:50:
                    5b:01:5e:77:a0:bd:77:89:e0:df:90:f5:22:bd:7a:
                    d0:bb:49:77:ee:da:ce:49:d4:97:b6:5d:01:17:d0:
                    6f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FD:67:9A:31:DA:47:62:7F:03:DE:1E:48:D2:A5:0A:7B:A9:67:9C
            X509v3 Authority Key Identifier:
                keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:80:2c:82:76:f7:bc:1b:58:60:bf:1e:a3:68:dd:24:4b:68:
         c9:62:b4:bc:f5:bd:26:ee:95:42:1b:bb:97:b7:a3:c9:6b:48:
         20:78:e8:d5:90:e6:e9:5c:73:cb:fa:ed:65:14:7f:1b:82:07:
         72:28:07:6b:eb:10:fd:49:b9:37:2b:7d:70:21:bf:79:51:8f:
         02:04:11:59:56:fd:d5:94:c0:fb:9c:86:a5:a4:f8:d2:0c:d2:
         3f:53:1e:81:4e:49:ec:7a:11:87:0f:bd:18:bb:67:c6:0e:72:
         d1:a6:e3:58:d6:5d:a3:d7:81:05:04:13:31:f3:3e:9b:58:be:
         42:3b:c5:2e:00:d7:92:d3:4c:9e:33:0c:8d:2b:5b:d7:80:3a:
         5b:bf:a4:2e:a5:31:e3:fe:de:89:bf:56:aa:6f:cd:1e:af:db:
         37:f3:cc:40:47:4e:89:e5:46:8c:e1:3b:fb:dc:4d:55:81:f1:
         fb:02:e1:a2:24:68:be:42:aa:0b:b8:55:e0:20:20:25:cc:4b:
         32:2c:e8:e1:82:41:2d:bd:b3:4c:b5:b0:de:9a:c9:d6:65:28:
         43:ce:dc:5e:e7:40:41:2b:73:c8:a8:e9:dd:93:a4:05:d6:3e:
         9d:a4:81:88:c7:5f:c2:f5:60:ed:b6:c3:a2:f6:3a:ad:92:97:
         43:61:88:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----