Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File:                     mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier:          ssqoh+6vDcNozo9DPlRq7gwGimxQL91MiboyCfvSLS8=
Subject key identifier:   AF:B0:55:0F:83:9A:34:BE:04:FE:8B:4B:8C:3A:BD:63:23:DB:3B:70
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer:       /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial:       01962F072230F4A791D639B9D2EA20E2644B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number:          0A77
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: 8bKL0IbQOSgAyNHMsOTwdqXxmBA.roa (hash: SiMZDaqzDjVBWVjWC+CfQKEVMp/aAzgNg3WOueNrYnY=)
                          2: TOZ32S2cTtEqOAugUTe4Diokmjc.roa (hash: ZfLvnSZb+3P/Lwkuj8mzNGrvWl0G71GHwv4eE3pKqaY=)
                          3: aWPrtGmH1Yyr9JygOmf8I8XXZSE.roa (hash: rxPNfyseh9mYpYa5sMESZMtb8GzaNyszUYWBRocITXE=)
                          4: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: XClGAcMlAYkN71Wd/ctiJtU8Czk+ibtRBS24Qi0Q2lY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:22:30:f4:a7:91:d6:39:b9:d2:ea:20:e2:64:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=afb0550f839a34be04fe8b4b8c3abd6323db3b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:84:dc:9e:86:27:a7:06:69:7d:bc:6f:2e:d7:
                    03:6d:47:5b:1d:4f:58:d3:b3:90:de:ff:89:b0:89:
                    de:49:9f:6b:33:e9:25:87:15:3f:f4:44:1f:fe:fe:
                    22:46:97:07:e1:3d:70:d1:50:81:ef:47:64:33:ce:
                    0f:eb:a3:3e:33:0e:df:e2:75:79:16:db:d3:be:0f:
                    a8:60:4b:ff:9a:e1:1d:54:da:1a:c8:66:ec:eb:6b:
                    ec:f3:d2:60:e3:fd:32:fd:14:14:50:f0:00:37:01:
                    13:3e:8b:17:a5:ae:a3:bb:ba:c2:32:3d:2b:76:46:
                    c4:8c:c1:90:e3:ce:e5:8f:ac:55:8d:c4:48:15:68:
                    fd:95:fc:c2:11:15:0b:81:1d:92:04:96:9b:7e:74:
                    be:95:b3:cc:e2:4d:8b:7b:9f:77:88:67:8a:4f:1a:
                    ed:83:79:39:73:c3:c5:e3:4c:7f:16:1a:c6:cb:07:
                    f8:aa:e2:1c:2d:37:9b:5e:eb:a9:7e:41:13:40:3d:
                    9d:37:1b:75:96:99:b7:10:10:29:af:9b:d6:35:23:
                    91:b4:35:13:7b:83:42:8c:69:87:a5:ec:7b:a8:7d:
                    f6:53:60:58:2f:d4:97:92:85:76:cc:13:b3:8a:d6:
                    df:a1:46:8e:29:20:3e:c3:20:fe:38:1c:41:8b:37:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B0:55:0F:83:9A:34:BE:04:FE:8B:4B:8C:3A:BD:63:23:DB:3B:70
            X509v3 Authority Key Identifier:
                keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:04:97:20:bc:ee:40:29:28:5b:46:89:da:23:44:f9:5b:
         79:2d:56:fc:75:36:08:f5:ce:12:01:47:d6:a4:15:9d:d5:5b:
         14:80:ea:d2:c8:f5:ca:fd:ae:4d:f8:e3:c2:da:b5:3c:3b:67:
         34:02:2a:b5:95:0c:e6:af:6c:50:41:60:4e:78:a9:60:44:f8:
         f0:37:7e:2e:71:e2:32:97:18:a7:9c:99:82:7e:c9:37:a8:44:
         c7:73:87:96:7c:b4:32:be:18:e6:b4:91:8d:e0:34:f0:a3:36:
         c7:9d:f6:f8:f9:81:3a:6f:d7:bc:78:0b:d8:c5:77:94:76:33:
         ff:5c:1f:6a:cc:ae:94:82:41:4f:55:b5:3d:43:ee:a5:be:23:
         98:36:e1:bc:88:ab:5a:b6:55:64:ca:b0:78:9d:99:f2:85:8e:
         5a:50:67:c2:19:96:f2:f9:c2:b6:b6:ab:46:70:ba:ff:8b:0b:
         41:21:a1:ae:af:fa:5c:a2:3b:c1:63:4c:9f:6b:19:fd:5e:a9:
         bc:53:9e:71:b0:41:4b:32:04:93:fc:82:97:2c:92:6f:07:42:
         fa:f9:30:ed:62:c2:28:20:ae:9d:4e:14:d2:80:5a:35:4a:0e:
         ee:0d:fb:91:5d:11:77:2a:87:99:ad:d4:4d:81:50:17:5b:bf:
         1b:c0:cf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----