Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.mft
File:                     voSufAUDrEUJNMn2z_OaFTelEm0.mft (raw, json)
Hash identifier:          Z1/FdtB37aJxnGtccSZxEZt7qzLKrkIvOH7wKo++4CM=
Subject key identifier:   BC:3F:DF:30:42:68:70:BB:16:BE:C6:5F:28:FF:DE:51:3F:F3:F3:82
Authority key identifier: BE:84:AE:7C:05:03:AC:45:09:34:C9:F6:CF:F3:9A:15:37:A5:12:6D
Certificate issuer:       /CN=be84ae7c0503ac450934c9f6cff39a1537a5126d
Certificate serial:       01962F74394BA1A1052DA0F82D0283D9EA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.mft
Manifest number:          0A1B
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: 7tAdH0jHIQZMhV2UXE5ju7GPX5A.roa (hash: ke2Pze70Vmc4RLIsbKXkz5KaIKimvkLBsr9cynVUelM=)
                          2: E4Y4DgvrfMZRFfkDU7J3hEu8W_c.roa (hash: gT4d1PLwEsIRw1GbBV27XBOZHFPpkUIPaPpaZOuGe8U=)
                          3: F9qaVGz01AdMhMbIvPmIjAGmLWg.roa (hash: iH6Wxnfnga3Klxx1nQ3eob/Ronz6FDXwS1cDuUlEdSk=)
                          4: voSufAUDrEUJNMn2z_OaFTelEm0.crl (hash: OW5iWDBd757ZGMBXIDOU9SJkwjV5xpsKHtA1jkWVEro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:39:4b:a1:a1:05:2d:a0:f8:2d:02:83:d9:ea:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be84ae7c0503ac450934c9f6cff39a1537a5126d
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=bc3fdf30426870bb16bec65f28ffde513ff3f382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:46:ff:10:5c:47:27:53:7e:37:f8:5d:5a:
                    04:b1:7c:b1:c2:01:19:3c:f4:e4:98:11:39:b2:42:
                    00:e0:0c:38:c9:a7:a2:92:85:66:5f:56:03:a9:e4:
                    4d:e7:d9:00:e5:b0:18:95:2a:27:ca:47:c5:6f:ef:
                    a5:01:43:c4:49:5e:4d:4f:1b:5c:68:f6:99:24:1d:
                    41:64:0d:25:72:7b:78:c1:bb:76:99:9d:2b:d6:f4:
                    e8:cf:f6:a8:0b:58:ce:3d:f1:d8:8f:df:8e:ab:79:
                    43:f6:c1:3e:56:75:d0:2b:3e:a3:b1:28:f4:d0:c6:
                    d5:95:5e:d8:97:55:cb:92:e6:c7:e4:b8:bc:f6:2a:
                    84:1a:a9:3b:cc:9d:d0:ba:8a:75:9a:0b:fc:8c:ff:
                    3f:c7:1a:ba:a7:84:1b:68:cb:86:e9:7e:d0:20:24:
                    db:3a:df:ab:3a:fd:aa:dc:08:ca:d0:1e:59:9b:8b:
                    fc:db:be:7c:02:78:c8:51:d2:1d:80:b4:1a:fb:80:
                    53:68:bc:c1:ed:5c:8c:01:4c:f3:4d:86:eb:16:a9:
                    a3:05:b7:7c:37:10:ef:8f:df:09:5d:28:8e:71:c1:
                    1c:e3:bb:11:da:e6:52:86:7b:32:43:dd:15:8c:c6:
                    06:6e:54:60:fa:9f:c8:da:04:5b:9b:b5:7f:5b:a0:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3F:DF:30:42:68:70:BB:16:BE:C6:5F:28:FF:DE:51:3F:F3:F3:82
            X509v3 Authority Key Identifier:
                keyid:BE:84:AE:7C:05:03:AC:45:09:34:C9:F6:CF:F3:9A:15:37:A5:12:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:84:09:e8:30:c9:e4:41:9d:21:4b:6d:d3:1a:a8:93:25:36:
         25:1c:be:a3:15:0d:f1:e6:04:58:ab:2d:ee:65:02:99:2c:e2:
         e3:8e:65:a2:97:8c:cb:99:2b:be:33:28:93:6e:ee:05:80:cd:
         d0:8d:0b:20:4c:e1:e5:d0:34:2c:3d:05:3b:ea:eb:1f:e8:f1:
         2d:21:b0:4e:ab:d1:f9:fb:5a:1b:c3:dc:80:10:51:e0:cf:ac:
         33:55:29:06:76:1e:d3:26:30:72:8b:c8:39:51:86:d2:d6:e2:
         2d:36:fc:65:63:f1:88:0e:91:3b:13:50:c8:f1:a0:e4:80:2b:
         e1:5f:5b:58:8a:97:95:b9:fc:84:2d:18:6f:e2:63:42:91:93:
         d3:3c:c9:e6:3f:24:18:63:78:b9:0f:f1:8e:a3:3f:c6:4d:dc:
         5f:d2:21:82:de:fc:30:96:ba:7f:67:38:26:f6:f0:7d:c4:38:
         12:05:a1:38:d6:0c:68:02:01:f4:30:30:92:29:6b:bb:18:5b:
         e3:43:e2:8a:35:50:01:5d:37:17:eb:dd:a3:4c:df:42:f2:53:
         e5:1a:77:f2:67:a9:42:70:03:5b:49:b3:ef:7d:08:e0:40:ad:
         98:cd:b8:18:46:aa:1e:11:70:2a:6e:cb:87:51:a0:d9:d2:20:
         99:9e:e3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----