Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File:                     v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier:          xuRG4JihuTjJ/Wxk6QyhW9exi2SScaNMcM0Bli1Mc3E=
Subject key identifier:   10:0D:22:4E:80:C6:44:0E:E2:5F:D8:41:8A:28:3B:62:7D:2D:A2:40
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer:       /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial:       01962ECF72DCDCF7F1E68164581B320F400A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: WxyFMVLPaoedm2KunMSjCPtRmII.roa (hash: Ungr4kPsfNHZcdD5CyaeCkdVZRH3x9Cj4Xb6OMIiqY0=)
                          2: ekd0T-pWjR2fdJhmt79rFrJVVFk.roa (hash: SlYmHx07GpRwdPchZU3v+4uB8eJO2LbmRdoWgdkR9QQ=)
                          3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: hu92R9VPg4kjmd5kOzuFdWdu0cgI4vxiwXcM5GdO3yU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:72:dc:dc:f7:f1:e6:81:64:58:1b:32:0f:40:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=100d224e80c6440ee25fd8418a283b627d2da240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c4:30:66:78:fa:15:81:43:80:f3:3a:07:20:
                    0e:ca:16:6c:b0:9a:58:99:e2:6b:d7:2d:c9:27:0e:
                    83:03:31:7c:fb:a9:eb:ee:f8:72:1d:98:1d:04:02:
                    57:f3:94:c4:c3:bc:df:8b:0d:0f:a5:b5:96:2e:db:
                    1f:d4:4e:60:ec:4b:f0:07:69:ef:48:e5:b4:4e:26:
                    d5:79:79:c8:d2:04:22:71:47:e5:9b:a9:01:56:b6:
                    33:1b:8a:1d:ec:8d:7d:f6:92:d4:b3:0b:eb:ab:9f:
                    ae:09:20:18:cc:db:20:71:81:c6:9b:42:d9:ff:1f:
                    b2:d8:dd:68:27:ba:d6:55:a0:c5:1e:a5:fc:1f:93:
                    fa:3e:83:51:84:16:d4:61:02:e4:b7:97:f3:63:aa:
                    26:1f:4e:52:08:76:6a:6a:a1:d8:b1:fc:45:ae:0d:
                    49:95:fb:35:da:8d:9a:95:99:fd:70:d1:e6:98:c4:
                    47:e1:33:83:06:99:f0:6d:a8:33:ac:cf:00:7e:3e:
                    46:ff:f3:99:2f:69:5e:f6:be:b2:9d:10:62:c2:7f:
                    43:4a:df:25:1a:9e:67:46:aa:a6:0c:1d:9f:be:9b:
                    38:98:67:37:1d:ea:b0:2b:d5:ac:04:c0:40:41:23:
                    41:5c:9e:5f:61:97:7f:59:56:7c:ec:71:f3:2d:f4:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0D:22:4E:80:C6:44:0E:E2:5F:D8:41:8A:28:3B:62:7D:2D:A2:40
            X509v3 Authority Key Identifier:
                keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:69:12:62:02:bf:ff:6d:ba:7b:c1:79:7b:96:3c:42:da:34:
         30:ad:d7:3b:cc:f5:60:5f:37:77:3c:6a:48:70:ae:18:0e:29:
         d8:89:a5:06:3e:e6:64:5e:52:8d:ae:f0:67:8d:cd:94:8e:96:
         9e:24:a0:ca:9f:ff:7f:c7:c8:4e:f9:d5:48:17:36:1d:28:96:
         3d:17:dc:dd:7b:b0:db:c6:cf:c7:d0:5c:b5:75:3c:ba:e7:a5:
         c0:12:69:f6:85:ca:5d:86:ee:72:7e:4a:e8:86:39:06:a5:83:
         e9:71:f9:55:33:58:19:23:ac:75:47:f5:77:d7:6a:72:28:75:
         1e:24:2c:c7:f4:30:b5:28:34:a7:47:71:f3:5b:46:18:e6:a8:
         44:4b:75:40:0e:23:30:87:35:5d:01:2c:39:31:a3:e9:0c:38:
         62:53:5d:a7:62:77:da:3a:cb:e8:ae:f3:6f:32:f9:49:73:54:
         64:db:79:27:ee:f1:57:84:2d:6e:15:9e:9d:6b:a6:c5:1a:55:
         64:48:93:0a:62:62:35:e4:7c:e8:40:46:9c:a8:77:11:4a:f1:
         9b:5c:8d:e5:60:03:4d:6d:ff:8a:ec:c0:4a:b6:11:6a:ba:e0:
         9f:be:ed:59:7d:85:6e:a7:b2:05:4d:65:4d:29:d7:8d:68:60:
         34:50:7e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----