Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
File:                     APTMQSzDD7L598N8PjkL7F5iVrA.mft (raw, json)
Hash identifier:          2Ew4QDmiKFAOU57PHLdCnRjPF+tyzfjENWtuIDZViUQ=
Subject key identifier:   99:B2:93:EF:62:31:71:05:63:B0:5C:E7:37:84:2A:2B:C3:6E:0F:00
Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
Certificate issuer:       /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Certificate serial:       01962F3D968AD638D04E27EBB97DA37A088C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
Manifest number:          1417
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: 5BciwgNYwMNFn5eFGl4Ow7HBSis.roa (hash: 3UceDm6E5z2xuYBvrfaNWIIbAo66nrZeoQOIOFL2Trc=)
                          2: APTMQSzDD7L598N8PjkL7F5iVrA.crl (hash: blEsZOzMdmM8UuGzx8SRoo4BxbYyjaBzW40l0Vb0cis=)
                          3: M7SEgufvftwnRCkx-25asjtCovc.roa (hash: U57VYWY1ePii662SbirLo+F12wZ7w8+u4EylfllvMp4=)
                          4: ebqyf5BiDM6j62bVjaE6r-bdVhw.roa (hash: +MzGy+AsjXhbDBl5ZXZ0wbyW9k0Dlt1wZj2p77zu+Lc=)
                          5: hoKOermCUGUXPhGJMB3htCGxKbo.roa (hash: C2bDkxfzxHRN/J0tOztxhLbDgje2XNYFfUjponmFTcE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:96:8a:d6:38:d0:4e:27:eb:b9:7d:a3:7a:08:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=99b293ef6231710563b05ce737842a2bc36e0f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:7b:29:71:9e:36:7b:f1:1c:d0:ec:90:cb:
                    86:16:7d:30:34:39:c3:48:a1:9a:83:ed:60:93:ac:
                    10:62:d1:71:f1:42:65:ca:dd:74:37:ac:59:24:f4:
                    fb:6f:fb:ef:8f:80:70:c1:c7:4d:7c:83:6b:86:9a:
                    82:ea:ec:42:47:04:91:71:e0:76:2e:b1:53:a0:c1:
                    53:e6:61:a8:09:bf:cb:d4:78:1e:35:3b:68:05:bf:
                    80:b2:07:c6:fb:11:ea:d7:61:d5:f1:76:cc:cb:72:
                    08:30:e5:cf:f3:5d:4a:5c:e6:46:3d:20:39:1f:20:
                    c8:30:92:cc:e6:13:28:71:35:ed:fe:92:c6:af:ff:
                    0b:79:73:02:5a:ea:63:22:0b:c1:28:e4:0b:33:89:
                    12:ad:a9:f5:99:6e:dd:be:11:27:64:c4:7c:7b:a4:
                    76:b7:7f:5e:2d:1e:4e:1b:6c:6e:fb:ab:fb:a8:04:
                    81:c7:3f:e2:93:ee:0a:35:c0:63:1d:25:4a:35:6c:
                    20:b2:58:4a:3a:94:3d:7a:4e:c0:36:6a:6c:7a:6f:
                    b0:1b:6b:19:cc:e9:67:6a:7c:3f:c4:37:e5:0d:91:
                    b5:d7:d9:19:c8:e8:09:26:68:dc:12:7a:45:58:e3:
                    48:c4:58:28:b5:bc:bf:5c:69:48:ce:85:78:16:b3:
                    bd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B2:93:EF:62:31:71:05:63:B0:5C:E7:37:84:2A:2B:C3:6E:0F:00
            X509v3 Authority Key Identifier:
                keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:dd:d6:37:a4:2b:36:28:ea:9c:65:9c:4b:41:96:a6:70:70:
         a3:31:30:3e:0b:9a:71:97:5e:6a:df:9e:b2:ff:7d:30:c2:72:
         a0:90:43:22:cd:b0:e3:76:d5:15:41:9b:f4:df:eb:c0:8d:e6:
         cd:4b:08:20:5f:9a:1f:c0:73:63:d1:4e:6f:39:46:31:f1:72:
         9d:2e:0d:b8:d2:80:96:c5:77:ed:20:f4:aa:b6:4b:96:61:d6:
         94:51:f6:dc:f9:b8:25:8c:7f:c1:d0:fc:94:9e:61:5f:4f:9d:
         a1:85:77:01:f1:36:34:ee:13:20:1d:28:2c:5e:75:3a:b3:a4:
         d5:5e:cc:a5:9f:f3:1f:6b:4e:4a:15:37:79:2a:b7:5c:ac:76:
         3e:44:87:58:5f:c3:61:7d:b5:17:ce:30:c3:04:9f:97:7a:92:
         39:e6:cc:41:0b:6c:2e:70:f4:ce:4d:68:34:44:af:95:9a:75:
         cd:74:a3:0c:8e:1b:f3:b5:c5:17:aa:36:35:ea:4e:5f:8a:27:
         dc:f2:63:bb:1c:51:01:17:05:a3:13:06:7c:f8:6b:83:8f:04:
         fe:83:30:58:84:17:b5:36:48:f2:ef:d0:32:ba:80:87:2b:dc:
         4e:d8:e5:01:0f:07:f6:ae:c2:d4:97:61:94:9e:7f:97:ad:21:
         6a:5c:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----