Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File:                     D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier:          aPhNg9O3XOWWPNYlEpExgulkvQvXYGNPb5DXvD7cxUk=
Subject key identifier:   A4:A4:A6:CB:69:BD:92:C9:9C:B2:27:14:26:41:77:97:1B:F9:47:7A
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer:       /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial:       01962E2AD67E906F037DC31DA942CC001204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number:          0238
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: 6t_nnlmTXWp3OzIKRqSj0hcN4no.roa (hash: W90ueV41Ar0nzHXhwJLVE6WKCjLM7hges3g+HZc2lOE=)
                          2: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: 2JOzF/fawVlq3eotA8ZgFNmxwr+eGlbgUvSAM8wsufw=)
                          3: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (hash: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d6:7e:90:6f:03:7d:c3:1d:a9:42:cc:00:12:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=a4a4a6cb69bd92c99cb22714264177971bf9477a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:7f:d7:ee:d8:07:c8:0f:7f:b5:3d:cc:98:
                    76:41:08:4e:47:e5:0a:c2:9d:bb:97:e9:f3:5a:8f:
                    5c:41:4b:60:c5:69:da:e3:2b:49:3f:a9:4c:fa:b4:
                    36:e5:6c:87:cd:5f:dd:d5:73:2a:72:ed:95:1b:f5:
                    34:bf:79:50:53:4f:e0:68:f2:06:4c:11:e8:16:82:
                    22:de:9e:0f:fe:e3:ee:4e:0b:a3:13:3a:46:c5:7a:
                    bb:4f:66:ab:ab:79:04:e2:f4:a5:a3:8a:b3:71:bc:
                    c8:d7:e3:48:03:9a:1e:c6:84:12:38:a0:96:43:6a:
                    75:10:8e:62:b4:67:f2:a2:77:24:c4:75:9c:dd:12:
                    12:b1:c6:a7:21:74:64:fa:58:e3:db:a3:e7:05:88:
                    80:ce:05:d6:66:b8:0a:e3:d8:60:1e:6c:6d:27:11:
                    f7:f5:98:ce:fa:54:f0:33:1d:59:29:0c:84:16:82:
                    21:ba:72:6e:06:c9:82:6a:b8:bd:f9:f6:e9:5e:0e:
                    08:fe:2f:ee:97:82:a2:48:de:a4:5d:47:f5:81:aa:
                    b6:de:89:75:48:bf:7b:a7:60:6c:83:95:2a:5e:7a:
                    8f:96:5b:0d:74:52:9f:31:0e:c2:22:12:4b:5e:80:
                    c1:19:47:58:20:cf:cf:80:6e:36:eb:e9:f1:f6:20:
                    f3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A4:A6:CB:69:BD:92:C9:9C:B2:27:14:26:41:77:97:1B:F9:47:7A
            X509v3 Authority Key Identifier:
                keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:91:28:6c:0d:29:e0:4d:9a:e2:1a:90:30:8a:08:c9:4b:31:
         9b:a9:b0:1e:be:f4:af:2f:b4:7b:b1:cc:0d:ef:c8:dd:ba:26:
         67:8c:39:10:b9:c2:23:f7:01:88:56:2f:5c:08:9e:de:73:b8:
         2f:73:6b:87:24:f7:8b:9a:01:eb:8c:5c:b0:1e:c0:1e:3d:ee:
         01:c1:8d:a6:38:b3:21:0c:81:2c:db:a1:b4:af:16:2c:83:22:
         5c:7a:31:4a:7c:6c:d0:d4:46:cd:bb:bc:b8:49:e8:1e:89:95:
         b5:89:d9:08:58:de:d6:10:e6:4b:f4:2b:06:f6:df:c7:bf:cf:
         1b:4b:cf:8d:cd:d6:33:8c:8e:04:1d:06:f1:3f:a5:43:de:9e:
         32:5d:bd:a5:7a:41:be:cb:8f:4e:fe:62:0c:f2:0a:44:af:7e:
         05:b7:94:b9:67:a1:87:de:f5:32:a2:f6:8c:cc:b7:71:b1:0b:
         21:7e:30:eb:e1:a3:8c:a9:fd:d9:dc:08:fd:67:07:54:49:15:
         e0:92:ae:d9:9b:d3:5f:fe:6d:ba:de:4c:c4:ea:61:68:e9:15:
         41:eb:d7:58:6f:2f:b4:1a:f7:bf:dd:39:d4:30:31:cf:03:41:
         00:37:13:52:32:6d:a8:e5:33:e4:e7:00:b7:38:11:eb:73:e4:
         e6:c9:82:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----