Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
File:                     Mg58DOtLoqb0uW_EuuGruFMDWro.mft (raw, json)
Hash identifier:          FJWtmc9HmR10y+ryaLkqRPpwQSEdxoU/ReP0gCKCxMg=
Subject key identifier:   AA:2D:06:EF:D4:50:3C:A3:FB:75:45:74:9A:B2:A9:03:19:FD:1E:CE
Authority key identifier: 32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
Certificate issuer:       /CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Certificate serial:       01962E61B186004CC71DA7CA0BC75A73EE51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: IqkEA-rqe3obsi9U0tATjcGiORw.roa (hash: pdv/Uop5nT0xWWcfbMOXH1ucooA/J/I4hHoF5p2oy/A=)
                          2: Mg58DOtLoqb0uW_EuuGruFMDWro.crl (hash: dWXoVlSnr6EO58VPvQ4eq7s/CR/cmf9/R7xs0e0QD2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b1:86:00:4c:c7:1d:a7:ca:0b:c7:5a:73:ee:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=aa2d06efd4503ca3fb7545749ab2a90319fd1ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:f7:da:fe:98:d6:df:d9:b6:c8:88:12:4b:
                    8a:9e:6c:c8:bb:12:f5:58:a9:c1:87:de:b1:02:5d:
                    43:df:87:1a:3a:9e:d5:1e:e1:e0:ee:ea:a4:11:cb:
                    95:47:b3:11:5f:c2:d3:9b:4f:a6:e2:21:38:b7:85:
                    c9:3c:ed:b0:61:c6:af:27:bb:34:81:89:35:73:86:
                    bd:dd:9f:af:0c:06:ae:d6:53:dd:96:e4:0c:5b:1c:
                    f5:57:17:1c:64:c9:64:cf:d3:42:42:9e:f9:7b:27:
                    ff:c7:63:8d:b8:35:51:6f:6c:87:8c:6f:cb:f6:7b:
                    c5:34:f3:64:68:5d:d9:01:82:24:84:10:6e:2f:f6:
                    14:1d:19:a7:96:b0:a4:61:85:10:44:88:27:a2:80:
                    53:6d:4f:31:3c:c3:65:03:b6:d6:8d:c0:af:5b:ce:
                    e9:d6:92:14:83:e8:0c:2b:46:a0:a3:2b:f5:99:31:
                    c2:14:f1:86:b7:9b:f0:ae:c4:94:60:5c:41:b5:ad:
                    2e:b0:24:cf:a2:8b:97:3f:bf:61:0d:19:7e:8a:99:
                    21:95:47:ff:34:ee:5e:11:0d:39:95:af:3a:54:0b:
                    2d:18:49:28:be:4d:a2:97:34:58:e0:20:bf:51:6d:
                    74:3a:25:1d:88:9c:71:16:f6:36:ba:39:4f:75:60:
                    37:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2D:06:EF:D4:50:3C:A3:FB:75:45:74:9A:B2:A9:03:19:FD:1E:CE
            X509v3 Authority Key Identifier:
                keyid:32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:f5:69:1a:d1:28:7e:45:c8:41:7d:69:1e:6e:ee:94:99:d9:
         0e:ef:3b:28:9c:5e:fa:2f:fb:25:46:65:23:bb:2d:cb:10:78:
         32:8b:93:b9:ba:f1:60:91:f1:3f:53:4a:a6:b4:7d:fb:38:55:
         44:56:d9:16:39:f3:91:a3:d6:47:03:95:f8:33:6b:41:3b:d9:
         3e:37:1a:f1:4e:83:3d:76:a5:ea:29:4e:17:5d:97:4b:e6:2b:
         0e:82:3e:07:f5:06:d3:8d:90:16:66:ae:41:3a:95:69:52:ea:
         5a:f4:3e:b3:ce:9b:28:9a:63:ec:b6:81:77:bf:fb:a3:86:56:
         db:f3:07:e2:5b:39:33:7b:e9:51:29:03:b8:46:aa:5a:7a:69:
         b3:30:1c:fe:be:6a:1a:68:f5:68:a4:f1:e4:4c:e6:3d:cb:e0:
         fb:a9:f9:f4:ff:5f:4a:80:f0:59:17:ef:46:e9:7f:33:4d:53:
         70:cf:04:97:8f:7d:1f:5b:4b:07:98:ef:c4:41:4f:2a:24:21:
         3b:76:79:7e:12:bd:d4:84:bd:a6:f0:93:04:db:cb:f2:87:de:
         8f:3c:da:02:4d:9b:98:06:de:19:42:59:5f:cd:ef:66:56:69:
         73:4b:17:a7:e2:f6:03:e7:dc:c4:30:f2:27:5b:3b:56:b3:72:
         ff:c4:94:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----