Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
File:                     1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json)
Hash identifier:          aR9T9FdYH3MxAwr9ogmPWYbBBfYpvm/4AXJvdztJXRA=
Subject key identifier:   F6:7D:D8:F2:E6:40:59:66:62:32:5D:D8:43:99:37:F7:26:1E:C2:D5
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Certificate issuer:       /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial:       01962F06ADD310CEF51253DE63602202025C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
Manifest number:          10BD
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: 0cg-ABQ5F07wo1zUc9k0K5Ly8to.roa (hash: Rkj4lRwYBqE7QsZIcMHOzWOT71EQLWq7kKtekOL+dc8=)
                          2: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: hxAAG7E2FEr2r5urSO1+H7UlQ11BSljlhlV39R1h0/Q=)
                          3: BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa (hash: h3wwdJrizfCgG4S/e0JuPLlbVsXDFB1J+2NlIEyZmsM=)
                          4: TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa (hash: U/d+Fv7E47cWBLg/rWP1IbXjQkA8lalBfzHWx2kVZS4=)
                          5: Wem4R1HhiLTH9JF3d-SZOmy37u0.roa (hash: 7MdQgNFI/gw33JrzBz7PAxkDLsGz7qoxKurvzPVxBTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ad:d3:10:ce:f5:12:53:de:63:60:22:02:02:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=f67dd8f2e640596662325dd8439937f7261ec2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:49:9f:42:81:e3:0c:1e:af:39:42:1a:c2:
                    6c:ac:63:68:20:4a:2b:88:1f:06:7d:82:d2:c3:63:
                    6f:4c:b6:49:2b:5f:ef:a3:40:72:83:64:dd:bd:dd:
                    ce:a0:0a:3f:21:b6:48:fc:0c:42:64:ca:00:4b:e5:
                    70:e4:65:72:33:78:3f:87:fd:1f:39:df:fb:8f:67:
                    53:80:76:39:53:64:de:ac:08:80:ba:cf:a0:91:dc:
                    ed:44:64:a3:e3:f0:28:9f:f4:e3:90:58:13:e9:bf:
                    54:10:85:ab:23:bb:fd:d0:83:4c:af:28:44:78:59:
                    23:c7:02:b7:04:bd:8c:70:21:40:0e:fe:08:d6:df:
                    41:64:b2:b4:d0:ed:3f:2d:bc:c9:52:97:09:77:9b:
                    23:30:83:d1:5b:16:d4:2f:27:68:56:0e:be:f2:64:
                    12:05:e5:01:b2:b5:83:78:d4:61:4d:6e:e1:ab:70:
                    9e:60:6b:57:5f:41:49:e0:f1:1c:4e:33:47:62:1d:
                    a7:a8:ef:61:8e:20:b1:7e:3e:5a:37:bb:94:05:c7:
                    00:b7:04:37:08:0e:22:e5:dd:f2:ce:dd:34:94:3e:
                    d2:92:e9:31:8d:77:6d:31:f3:72:10:ac:34:24:95:
                    28:04:98:8e:90:71:e0:6f:92:80:dd:3d:a0:ed:cd:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7D:D8:F2:E6:40:59:66:62:32:5D:D8:43:99:37:F7:26:1E:C2:D5
            X509v3 Authority Key Identifier:
                keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:57:e0:8c:10:3a:15:99:2d:46:7a:11:11:30:a9:af:d7:04:
         ad:02:6b:ab:89:46:34:b4:cf:17:3b:f0:52:a9:b1:67:47:63:
         be:36:5c:db:b4:18:d7:30:49:a5:3b:7b:53:aa:bf:eb:bb:9f:
         e0:13:97:59:87:dc:d8:6b:40:46:27:01:c2:7c:9c:35:1c:69:
         cf:b1:f8:4b:27:a9:d6:f8:d0:02:25:96:5a:d7:31:84:07:7f:
         42:dc:dc:c3:98:a8:cd:4a:81:ac:81:17:eb:fd:a7:f5:06:0c:
         9a:26:58:3b:22:87:05:ff:2a:5b:26:52:d9:9b:b5:74:df:3a:
         ff:1b:1d:c7:c6:2e:1c:4e:40:f5:70:25:6b:70:fc:ad:54:d9:
         94:16:bb:3c:a1:1b:9d:38:aa:40:4f:85:b5:d4:02:8f:bd:d8:
         d8:80:ad:cb:35:51:15:fb:96:4e:d0:9e:c5:73:01:a6:31:f6:
         7c:37:75:29:a3:85:2b:2d:57:96:28:71:b8:6f:44:ae:71:b1:
         1d:85:31:ef:60:b3:83:d2:62:e6:ad:5b:3f:19:b6:67:43:a8:
         e2:37:ee:d4:31:5b:47:67:f3:22:c7:6c:59:a5:f7:d1:05:76:
         2a:45:89:3e:cd:63:54:59:ca:df:7a:da:6b:41:1a:da:72:6a:
         09:21:6b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----