Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
File:                     MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft (raw, json)
Hash identifier:          bU4pTSZg3Z3R/JKHYj3CTa1/MWI3OH3XMg6rPUagdrU=
Subject key identifier:   B8:7E:9C:59:AB:38:C0:A5:88:AE:91:B6:0D:DE:A8:7B:18:09:B1:1E
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Certificate issuer:       /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial:       01962DF43B2777C4FDD2AF130A7C4B0A455D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
Manifest number:          0FCD
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: 0_5k3Z3yC7Dgba-hxI0f3sWXcrg.roa (hash: WB89xP0WXfzR4P8TznMXEjV3olpCtGvnlUvlrgb2708=)
                          2: IlfpxQ3JgfoCqimWzCChNkeOnz0.roa (hash: v1X1pYhpoaFLRUey62cJQDuZrip3GuPe3jrE1ZfGAqg=)
                          3: Lubz9xH9UjLOKMfTb8c5OFOPqfI.roa (hash: Dnakb/USAPnovO2FQ7KgeCC0e5C8lrMQersosg+FtQ8=)
                          4: MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl (hash: r88MKD/epkHu5jFDfcYah5dQHLesBDT0WSDHwsr1LRQ=)
                          5: mouRKK4_Q2E-W7kvAvNPxrpZLhE.roa (hash: ybMAN8gUri6B6wRdRo0fLl/8jSvuyoOJGt4dM0c6HXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3b:27:77:c4:fd:d2:af:13:0a:7c:4b:0a:45:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=b87e9c59ab38c0a588ae91b60ddea87b1809b11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9a:c7:dc:48:e0:2c:91:db:b0:03:ec:12:5b:
                    68:8d:42:df:14:e0:1b:68:55:98:15:63:12:1d:8e:
                    1a:f0:50:d9:e8:fa:4f:c7:f2:01:62:ce:62:8c:b2:
                    bc:ff:85:5b:17:b8:92:6a:aa:cb:46:7d:71:3c:6c:
                    11:c6:6c:1b:fd:e3:21:33:f3:76:98:29:33:3c:b4:
                    d2:c3:c8:ac:45:07:10:ef:3f:09:57:a6:c4:6c:23:
                    4d:5b:56:58:58:67:9e:63:98:f5:76:27:d8:9d:3d:
                    3e:dd:d6:7a:62:70:3e:d8:ec:bf:74:cf:0f:47:3a:
                    cc:a2:9c:f8:f9:c2:e9:ef:75:42:ed:c5:ec:8d:41:
                    a6:d1:c1:e5:32:70:d5:b9:3a:88:fe:09:6a:03:f5:
                    96:8c:ed:db:bb:c9:ee:bf:70:33:0c:72:9c:4d:94:
                    f3:59:03:00:bf:ae:4d:71:05:c4:d7:0a:23:73:73:
                    f1:c9:b8:f2:b6:2d:09:bd:42:1d:ce:85:d8:c5:6a:
                    f7:ef:93:22:11:bc:f0:b9:d0:42:4a:54:77:f7:fc:
                    2a:a2:87:ab:f6:d1:50:42:e5:f7:da:5c:52:57:3e:
                    09:50:71:0f:8c:c2:ae:16:00:0d:6e:0c:f9:e9:0f:
                    a4:dd:c0:53:f0:f5:5a:2b:75:ab:26:a4:a8:33:a3:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7E:9C:59:AB:38:C0:A5:88:AE:91:B6:0D:DE:A8:7B:18:09:B1:1E
            X509v3 Authority Key Identifier:
                keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:42:f4:7e:45:52:d4:1f:db:6e:06:c6:11:80:26:c4:95:41:
         9a:b6:5f:ba:20:ed:11:d9:8c:93:f6:b2:5a:d5:45:66:3c:e3:
         15:45:b9:3f:f9:df:c8:e8:b2:f4:38:98:e5:fb:bc:c2:a3:0e:
         57:f0:ac:ed:30:52:b9:ad:52:45:fc:6e:38:ac:f4:bc:b7:f8:
         ae:68:e7:8b:b9:e6:58:6a:e5:fa:d7:00:c4:00:68:50:11:ff:
         ae:90:9f:b0:69:cd:45:e5:d8:6d:30:f0:05:43:40:c2:fe:ff:
         84:09:40:6f:47:0e:d2:7c:fe:c6:03:5a:e9:30:a0:10:32:7b:
         2c:35:97:1c:16:d8:78:f0:da:f6:fb:6b:15:9f:99:45:45:fc:
         18:d5:b2:9f:23:45:aa:59:46:c7:2f:a6:f7:07:01:21:e2:41:
         97:27:7c:70:94:98:18:f4:a5:26:61:12:cc:5f:46:bc:8e:11:
         f9:fa:52:31:77:91:c2:06:6a:2d:a6:8c:ff:5a:59:8f:b7:ea:
         f7:49:d0:66:a9:be:99:7d:f3:05:33:79:aa:81:55:03:e6:ce:
         58:d2:c0:25:07:14:4a:62:5e:c7:14:72:ba:fe:59:a2:5b:f2:
         57:0d:8d:5b:0f:54:0c:d5:29:ee:b2:4c:e9:48:80:e1:87:80:
         2e:e1:43:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----