Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft
File:                     mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft (raw, json)
Hash identifier:          fuBD+VCCaWfYcZPCkIsTjijVKSSfzdVmCPmZyt3Z2Xk=
Subject key identifier:   8E:CA:EA:C9:F5:08:A7:BA:42:7F:08:24:7D:77:D0:B3:DC:07:3E:A6
Authority key identifier: 98:CC:B1:84:D1:28:38:4E:4F:76:7D:85:25:8E:0D:EA:73:F1:8E:43
Certificate issuer:       /CN=98ccb184d128384e4f767d85258e0dea73f18e43
Certificate serial:       01962E98ED46073856FFEFECD019DC30821E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft
Manifest number:          0BFA
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: XmG_f-d3gNbPjbSDpmMbIo-fVYM.roa (hash: Fqg1Y9uWeIH+04MjOxb6IraF8tekNjl9/R9LcKgfLEw=)
                          2: mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl (hash: I/avN0S+eAksTnozsqx38qzyOiC6562AeZciYixCzWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ed:46:07:38:56:ff:ef:ec:d0:19:dc:30:82:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98ccb184d128384e4f767d85258e0dea73f18e43
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=8ecaeac9f508a7ba427f08247d77d0b3dc073ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d9:1c:35:8d:99:a3:7f:66:d4:93:a2:0e:6a:
                    0f:4e:42:fc:de:ea:62:2b:f0:f9:0c:bd:50:4a:c8:
                    01:d5:23:84:d4:c2:92:73:2e:aa:40:76:5e:ea:1d:
                    e2:90:72:b4:7e:84:aa:ae:bb:f8:f4:ae:53:58:80:
                    d3:d6:b4:41:1a:5f:d1:c4:e1:f4:bb:91:fa:65:f1:
                    8b:ac:a8:d4:41:02:ff:02:69:f1:09:14:44:39:e3:
                    fb:d7:2e:0c:ac:be:e4:c1:c8:78:61:eb:46:8f:63:
                    c3:02:0f:a2:fd:af:d9:ff:39:4a:12:55:a0:b9:79:
                    88:7b:ea:66:e3:20:e5:8e:86:53:8e:5d:d5:05:f4:
                    e6:f9:bb:12:6b:1c:9a:f4:09:e5:d6:f1:bc:1e:19:
                    d7:27:d9:5b:ff:41:99:7d:4b:de:47:6a:18:af:4c:
                    e5:ad:fc:24:c4:32:eb:df:28:66:e8:0a:76:10:7c:
                    41:62:7a:33:01:b5:e3:a1:b0:01:e0:45:4a:07:e6:
                    6f:c2:0a:3c:fb:c2:15:9b:19:d4:38:46:97:e8:cc:
                    7b:04:d3:3b:97:9c:a8:05:a0:b8:28:d0:91:bc:76:
                    b9:7e:f1:b4:18:96:ce:97:e0:95:2f:f2:d0:b7:fb:
                    89:ac:35:ef:89:8f:13:af:ee:52:22:3a:1d:cd:14:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CA:EA:C9:F5:08:A7:BA:42:7F:08:24:7D:77:D0:B3:DC:07:3E:A6
            X509v3 Authority Key Identifier:
                keyid:98:CC:B1:84:D1:28:38:4E:4F:76:7D:85:25:8E:0D:EA:73:F1:8E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:07:2a:09:fb:03:82:dc:74:bf:84:1d:bc:de:fc:c9:e4:28:
         67:7f:58:eb:f6:97:0d:b0:fc:9e:eb:97:82:e7:cd:28:36:7b:
         5a:4e:d0:65:ae:b1:d1:5c:fe:2c:7e:82:1b:41:a6:2d:4f:c3:
         d6:ee:ee:36:6a:9e:c3:20:98:4f:b0:6f:02:63:41:08:83:c2:
         3d:ae:7f:d5:c0:e9:95:1f:65:3b:fe:d0:28:cc:ca:e2:cc:59:
         ce:d1:14:41:91:1c:cb:43:d6:a6:50:3d:17:f9:07:cd:90:48:
         e1:90:87:a4:a9:d7:7a:e3:99:dc:8f:00:e2:e5:fa:33:d8:f4:
         1a:0c:d9:27:40:d9:c0:fa:28:98:f8:61:ff:5f:58:33:21:29:
         e4:dd:ad:c5:39:fc:dd:7a:00:68:d1:23:c3:7d:db:48:2b:46:
         7b:68:cf:c2:80:76:79:41:77:e2:62:58:01:ac:81:95:58:dd:
         d6:3e:c6:4c:82:0e:12:a5:f4:1d:97:87:90:9e:67:14:a7:00:
         10:6d:f8:40:f2:c7:43:74:41:c8:7c:bd:13:5e:96:d8:b2:4d:
         13:ad:85:8f:c6:44:dd:86:99:37:05:3e:78:d9:4c:37:88:07:
         c4:45:d3:c1:5f:77:7e:1c:1f:31:9d:67:49:52:cc:90:5b:c8:
         ae:ee:78:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----