Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
File:                     MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json)
Hash identifier:          nGvbd8606yHOzNF7fHQLZPdQafLNuGC0RT59vJlj+I8=
Subject key identifier:   F2:C7:98:1E:18:C2:09:4B:92:08:D6:61:E6:E5:CF:1C:BF:A1:E2:2D
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Certificate issuer:       /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial:       01962E619922B57FD9552C9AF4E6CCD8B384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
Manifest number:          1577
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: 7g1UwiwWgWmfdzsfq2_nM6OnGY8.roa (hash: ZYwmQQtabWzHCr8QKyMRnDvZXsiCEimSnMIySNLvaCg=)
                          2: BEWUUb6Sb5YAERA7Rm-cdwFsmF0.roa (hash: +Qt2yDKsz2L2j/WArrE4B6qzTe0DbfXxEvpfQa5HyZw=)
                          3: LlMngn95TdQ9s1lobSIfFiaxwMc.roa (hash: WeKn9zwaRRHjlRd4WIjiQWXgKdTTEMZ6BTo5nLZ3Ai4=)
                          4: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: fvCNScxA8zSV7n514bmSTIec9j2u/gDFVvEsC3WRM8k=)
                          5: QqT-BvbiqSOYuM4Lk4hz0YSVQ1I.roa (hash: F9VEIK5Zux7AgHQDn3EERLEADA0kYEbfVteSN7+buqQ=)
                          6: SeWVIKVcFZf5OfSUSvJx8xzrGmw.roa (hash: R1Xjt4d6fbhtdYnW5OsTMCBTcoqdj84LM2GJBD6GMIY=)
                          7: SuAwx53ztZ8nH6iQDl-exiTpB9U.roa (hash: OW4UNz0fPDN3E3BkjgDIvFCnQ13CpXoOp18yw+GY/do=)
                          8: aQ0BCg7T0qvdq_rjilld2qmDCCA.roa (hash: FUk+EtDI/Bw1Ith6izcMbGQJ0XgwGEmYYqaLt5/+JX8=)
                          9: e9kzaC5aK1AvC-cHsDdx9haP07k.roa (hash: QuaA/YDvF9Gcy4o2L6hDN/avQ+2ifpi3IVCtvCyZW14=)
                          10: kexkh65vQ7bMWtG8mnCvje3Zp-w.roa (hash: Pg9AL21punrl7WTntjhvGX0o4iTm5IvkXrJIfPr6Vw0=)
                          11: rELDabhnIWczGPpdcFPbIHRUmiM.roa (hash: C3tLRE4vf2kTivHGIZ50gcjmBmCNhZmWayfOhcglSbg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:99:22:b5:7f:d9:55:2c:9a:f4:e6:cc:d8:b3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=f2c7981e18c2094b9208d661e6e5cf1cbfa1e22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:f0:ec:6b:c8:58:61:26:81:2a:f3:5d:30:
                    b9:bd:54:38:2a:d5:fc:50:c9:10:70:14:c8:d2:9d:
                    61:42:d4:75:da:c9:31:cd:77:b2:e1:f2:d9:99:04:
                    08:c9:bf:8f:68:bd:85:49:fb:ed:88:52:0b:f2:30:
                    5a:55:94:21:fe:2b:36:74:65:0a:50:0d:b3:7d:2e:
                    8a:20:44:e7:74:38:b1:dd:2e:73:07:c6:36:87:4e:
                    72:84:ad:20:d7:5a:5f:1d:2e:70:67:ab:da:0b:5c:
                    86:ac:75:0c:9c:30:62:82:51:d7:75:5f:1f:15:05:
                    47:d5:16:52:7b:fe:f2:52:fc:5d:34:82:cf:55:8e:
                    ee:95:d6:3d:c2:19:60:e3:5a:b7:91:41:30:a8:b6:
                    11:0c:3b:c5:7b:28:56:91:49:e0:85:c9:c5:2c:7c:
                    83:3d:6c:89:92:5e:f1:a3:33:2c:1a:89:9d:fd:71:
                    64:e1:3e:00:e0:86:f0:3d:b5:ac:f5:57:4a:85:55:
                    3a:4d:7d:cf:e0:65:72:8b:e6:f9:f8:17:ac:76:1d:
                    8a:48:d2:6e:52:ca:28:cb:d0:66:4e:b2:ca:fa:51:
                    f2:7b:9d:b3:5c:83:13:7f:6e:25:dd:d6:b6:ec:c9:
                    ec:e3:bc:8c:85:69:73:17:55:dc:56:4b:2a:94:d7:
                    ba:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C7:98:1E:18:C2:09:4B:92:08:D6:61:E6:E5:CF:1C:BF:A1:E2:2D
            X509v3 Authority Key Identifier:
                keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:13:22:ec:3b:6f:10:12:43:fb:3d:d5:2e:08:31:fc:ef:0e:
         52:86:87:87:8b:37:4a:74:9e:3a:1f:1e:b9:d0:1e:21:47:7e:
         72:45:3f:28:bb:6c:81:2b:23:cb:63:8c:c2:c8:d9:2e:23:b2:
         ad:fb:b6:de:0f:50:9a:61:28:16:1a:c5:16:d4:c1:e2:6a:08:
         7c:eb:6f:84:70:7b:27:5d:02:35:6d:b5:a4:44:80:b6:8e:10:
         c4:d3:67:71:4f:af:76:dd:3f:42:26:be:4e:59:6a:59:d7:72:
         f9:73:5a:06:48:28:42:ca:e1:af:b4:17:5d:8a:bc:88:4a:81:
         26:c5:a2:ff:25:8c:7a:f6:76:a2:87:b1:71:7f:da:58:97:66:
         0e:28:44:80:09:ef:7c:eb:20:82:6a:90:44:e6:20:9a:20:75:
         39:81:64:6d:ad:3e:91:da:6e:8e:18:53:df:f6:1e:e5:00:c3:
         38:dd:c7:fc:f3:bb:82:2e:b6:b7:a3:a5:a2:ae:1a:1f:e0:f5:
         be:e0:f2:9e:86:8b:ae:7a:bb:4a:29:97:d5:19:d1:dc:4e:76:
         22:be:02:ae:3a:d1:44:1b:69:0d:78:3c:df:e7:bb:27:da:57:
         90:6d:ff:f0:1b:4b:01:ab:30:0d:bc:88:06:23:86:01:d2:50:
         45:44:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----