Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
File:                     m-02rxPaSC_feftUA-UHSGDuzQ0.mft (raw, json)
Hash identifier:          MBcQi8nE+zrT5ri56CGj50LDV+In/k+1NREYMpMkw6o=
Subject key identifier:   93:52:20:F2:83:F3:FD:CA:23:FA:CD:F6:95:B2:9C:24:07:52:37:1E
Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
Certificate issuer:       /CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Certificate serial:       01962ECF7C61EB480CF7114D98FBC6B04A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
Manifest number:          0FCD
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: gME55grAdW0csfpDqI4X-z1lPB8.roa (hash: Yk24RuTuN+kQwIiTqSqW+TjwkayeuH80Y+g3ReFhIuE=)
                          2: m-02rxPaSC_feftUA-UHSGDuzQ0.crl (hash: 5bkAShWRcLgOqT94N6W2w8an1jXntDsw8L7P/ztN8mI=)
                          3: oAMq7eOSrrg7QzHYvuiclu2pDcU.roa (hash: 0Dq9HT+D04Msgy5j4AI+QE/myTwZkQVZ5ZeJBagVuyM=)
                          4: rPUiYOwFFBXwEbG0rI7AP5flCD0.roa (hash: fpp2fjiduFcCROlP6+vFm2e63EILUjHK8HyGsStaukM=)
                          5: tsiU7azXEn11ZU6Xi_XUw-9XI8A.roa (hash: zObDmeFB3M8dfzRuyTAH/oAzX2g0/cCu39kU8lAYB64=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7c:61:eb:48:0c:f7:11:4d:98:fb:c6:b0:4a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=935220f283f3fdca23facdf695b29c240752371e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e4:7d:ef:81:45:df:ff:ef:a7:c0:f8:d1:59:
                    0b:ac:0b:0b:77:a2:ae:a0:ef:03:66:a8:d9:00:d0:
                    32:5e:f1:67:03:4f:7c:f5:e8:ec:53:a1:f9:9e:75:
                    a0:1b:8e:60:2b:c4:c3:ef:03:ef:16:dc:dc:c8:48:
                    a3:6d:f6:b0:ab:9d:68:9c:f6:98:40:82:e8:a4:bc:
                    82:5b:1b:2e:fc:c8:93:7c:17:7d:d3:a4:b3:17:12:
                    3a:12:13:93:15:3e:61:aa:5a:75:27:b2:ca:8f:21:
                    12:5b:24:66:85:38:51:7e:2f:87:1a:f0:01:63:46:
                    93:34:d4:12:e9:f0:bb:a1:ed:5c:68:7f:7f:55:bc:
                    a2:19:b5:de:8b:72:50:74:c5:67:85:92:9a:98:72:
                    c4:39:dc:b8:2f:ac:e8:11:8b:b0:e4:47:ff:87:4a:
                    76:68:48:a8:25:3c:88:4d:5b:c1:2a:07:b5:6c:23:
                    f1:23:8c:bc:14:07:e2:36:6f:ca:f0:75:a3:54:70:
                    b3:44:e0:91:2f:59:89:74:72:df:cf:67:f2:bb:f6:
                    83:84:3f:cd:59:bb:bf:71:d0:d7:25:92:26:71:96:
                    53:87:d8:a3:e9:7a:73:a2:23:eb:d0:7f:44:b0:64:
                    bf:4d:fb:06:37:60:d0:91:40:98:16:ab:b1:e6:42:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:52:20:F2:83:F3:FD:CA:23:FA:CD:F6:95:B2:9C:24:07:52:37:1E
            X509v3 Authority Key Identifier:
                keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b3:99:92:eb:10:84:48:e1:f1:08:d2:37:19:5a:3b:33:69:
         56:42:06:85:27:72:53:0f:99:73:a4:de:bc:7b:88:51:a7:6d:
         86:0e:dc:f9:e2:30:1e:01:87:a8:fe:9a:f0:bd:84:6f:ad:4b:
         62:7e:2c:32:f4:6b:9e:eb:07:73:22:5a:be:6e:d2:a9:b8:a9:
         c7:aa:c9:f7:c5:fa:ef:5c:33:aa:13:7a:0c:e9:16:fb:cd:37:
         55:54:23:d0:85:0d:ff:b4:75:df:8c:80:f6:49:34:46:18:4c:
         b7:24:12:21:c1:f8:a4:b6:c2:c1:cb:2c:f8:71:2c:9c:da:99:
         21:e9:44:6b:69:d3:37:6d:2a:9b:6f:48:08:8a:5d:a7:13:48:
         4f:6f:c7:a3:19:78:3a:cf:7c:96:cc:b0:d0:f9:3c:83:51:0f:
         1c:2c:98:ae:d4:e6:48:25:91:4a:74:44:9a:77:4b:e5:1a:70:
         84:79:e2:99:a1:31:91:49:46:9e:05:78:9d:ca:30:cf:00:96:
         60:f2:f5:b4:53:ad:93:6d:91:31:6a:23:79:53:9d:c5:8e:f9:
         6a:d0:c4:75:d1:2a:0b:f6:9a:6a:e3:ea:93:d0:66:06:01:59:
         32:f1:50:60:cb:81:4a:7a:2a:10:f0:40:ef:1e:42:31:d8:ed:
         cd:50:d4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----