Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
File:                     P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft (raw, json)
Hash identifier:          OvjM6uF8pQFgyALJMUAinc+KgF9YqTjt5ZfwCWqRZDQ=
Subject key identifier:   2B:B1:19:23:4E:C1:A2:5E:E2:50:D2:F7:59:5D:C8:D1:47:F8:68:CE
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Certificate issuer:       /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial:       01962F063F6C0F1661A5BB663190001AC032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl (hash: NDIjryyuWw+ZOZJiagqFXtoclP7SCwGWkyRNqqVUtGc=)
                          2: T32ivR4pPT16GdJvEk3qcae9a-0.roa (hash: Ar4IuLNK/JbYrWnO/0jZmTGQAGYJO2SXqHxbBEnLR+A=)
                          3: uXJUN0yqzJ3TaQzP9cjAtVVx7hs.roa (hash: suoYCzad2UWOr/Nnpp8SMjjTemdQYZDDmDi97rBzGqg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3f:6c:0f:16:61:a5:bb:66:31:90:00:1a:c0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=2bb119234ec1a25ee250d2f7595dc8d147f868ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:a5:e8:23:86:85:c8:93:ea:77:4b:6e:96:
                    34:1e:ea:f4:18:b1:78:04:d1:d8:50:a8:fe:09:b0:
                    8c:e2:0a:47:cb:c6:f4:af:7c:6c:56:c8:03:a2:b2:
                    76:d3:18:df:18:64:b6:85:9c:7c:f1:1a:e1:49:24:
                    cf:30:00:f5:17:05:7c:66:13:cb:86:f9:a5:de:e7:
                    74:e5:df:c2:2c:35:ee:dc:bb:74:77:f7:77:cf:5c:
                    83:9f:c6:d8:90:39:48:38:e9:f9:6f:9a:df:a2:db:
                    26:d6:83:2a:4a:94:b9:8b:15:35:79:f2:c1:4c:28:
                    49:a9:1e:26:db:de:6c:4d:4a:fb:31:0a:31:48:7e:
                    23:72:40:b9:5f:03:b3:04:87:15:72:9d:72:c5:1a:
                    1c:b9:36:df:c1:c2:b0:f5:ef:4e:75:79:1c:ba:3d:
                    0b:3a:e8:33:46:5e:ec:64:5c:0a:8e:75:01:ae:77:
                    be:a0:ae:16:90:2a:a1:8e:bd:5c:38:9e:f1:65:ce:
                    05:17:70:94:7a:e8:bd:aa:00:6a:7f:00:04:de:3e:
                    67:17:ed:76:2f:7d:49:d4:5e:19:33:5e:60:22:d5:
                    34:2c:ef:63:f8:00:a7:72:93:52:db:ac:da:a7:ea:
                    2b:95:07:3b:2b:19:04:a3:fc:e2:f1:5d:a4:f2:04:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B1:19:23:4E:C1:A2:5E:E2:50:D2:F7:59:5D:C8:D1:47:F8:68:CE
            X509v3 Authority Key Identifier:
                keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c6:a3:b3:3b:8f:78:a8:70:48:91:8e:91:a7:1c:60:b7:c5:
         b4:81:19:25:bc:dc:12:0e:52:f9:24:70:71:9f:bf:ea:58:ad:
         cc:cb:b4:e5:0e:b6:e8:0d:cb:1d:00:69:e4:b8:a7:c1:e5:1c:
         28:3e:c8:46:3e:95:54:36:fb:e1:7e:da:60:e4:12:c2:a2:17:
         c7:7a:37:88:f0:d9:72:64:66:98:09:63:a9:8b:e8:cc:e2:57:
         15:fc:38:e6:f0:09:24:34:db:ed:ec:e5:f9:a9:b7:46:06:ed:
         bf:1d:9d:4d:34:aa:c9:9f:bf:b3:62:08:c9:ea:93:36:ca:93:
         2b:82:f3:c9:e3:48:b5:4f:1a:b0:50:ed:2b:2e:e3:12:3d:97:
         00:80:82:ef:9d:61:b2:09:3d:f5:4f:e7:a8:10:5a:17:93:5c:
         1c:42:6b:7c:d2:fe:1a:e6:db:3b:3e:06:6d:8b:79:3f:87:2e:
         74:45:46:11:3a:a3:ca:92:4d:b6:6b:5d:9b:8a:bd:59:3d:9f:
         c5:86:cc:03:ed:85:9f:9b:2b:d8:a7:53:54:79:a7:d6:e9:bb:
         4c:40:6f:f7:29:cd:25:2d:8b:ca:98:67:b8:5d:79:2c:2a:f0:
         0a:0e:61:87:56:4e:72:c5:5c:b0:15:e8:2f:74:3c:9a:05:44:
         c7:44:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----