Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File:                     h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier:          zYNsTysEHoVa6UDqPN7T93tm/Tr1jGJu88YwrJRR2bs=
Subject key identifier:   98:05:B8:40:3B:96:F9:67:8F:8B:E8:E0:0E:66:01:82:1C:AC:A9:43
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer:       /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial:       01962E993004B1EA2125B1D23833DE03F1C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number:          0872
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: M5PtAUB6C0YQZ-t3ZklapHkEf_k.roa (hash: HXU2DQvPMIqoZLirjVORFRzXbGSClbgxExOEkxTMUAM=)
                          2: go-J-JwBrpAVGCsK-19AMahhYuM.roa (hash: +GNiaHGQJG90H7ohhR5iHSqVdKCjsbU2hGuORBme6Qs=)
                          3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: N6ATjqTd9PJMHMp//iSkF6Tdw6fQ/xHrQ1lr+ZkkrRo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:30:04:b1:ea:21:25:b1:d2:38:33:de:03:f1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=9805b8403b96f9678f8be8e00e6601821caca943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:62:8a:51:09:a3:d6:b6:96:52:71:dc:0e:
                    e0:6a:8a:26:b9:fe:2c:5e:5a:b6:06:c7:0b:d7:d6:
                    68:82:f8:3c:a3:09:89:74:c1:71:0b:ba:84:17:b6:
                    fd:42:1d:b5:95:f6:6c:7b:6a:41:83:af:27:97:d2:
                    0b:c7:8f:38:db:30:96:aa:0f:9c:53:ae:cb:16:49:
                    2d:14:49:d8:26:0b:34:a7:f6:02:cf:04:f0:66:a1:
                    c9:7e:ad:6c:83:b0:b4:15:59:ef:de:47:20:7e:77:
                    9d:14:ba:f3:79:6c:5a:97:d6:38:29:8f:77:3c:9a:
                    84:bd:d2:9f:7d:1a:7c:80:6c:40:c0:db:e7:8d:0b:
                    0a:6d:2b:a1:e9:44:57:2e:90:97:12:7b:b7:ca:6c:
                    12:2c:4e:aa:fe:f3:97:c6:5c:b6:63:31:48:62:fe:
                    ca:48:6e:1f:06:00:8c:21:03:da:a0:28:06:2c:4f:
                    3a:c3:d9:77:73:af:3f:a5:fd:67:e6:af:2a:55:0e:
                    3b:66:e4:48:55:23:0c:e0:19:40:97:7c:d9:30:89:
                    34:ad:77:af:5b:6e:bd:49:cb:ae:db:be:d1:a5:bf:
                    eb:68:a8:cd:9c:80:06:89:65:67:1c:88:5e:03:c4:
                    40:18:e5:59:32:51:56:95:eb:6e:f2:e9:63:7a:8b:
                    7e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:05:B8:40:3B:96:F9:67:8F:8B:E8:E0:0E:66:01:82:1C:AC:A9:43
            X509v3 Authority Key Identifier:
                keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e0:36:03:9d:2f:15:ce:54:88:43:9d:c9:9e:01:20:b6:c2:
         b9:c8:2d:e1:1b:74:82:d1:63:a4:ec:00:d6:64:87:91:95:b0:
         f5:7c:d1:73:b6:9d:c4:a7:d9:0d:b8:08:d6:e2:15:37:0e:1b:
         51:c4:e4:a8:47:56:50:cc:b9:18:ed:f2:fd:ea:93:a0:15:41:
         fd:d0:90:bb:17:dd:5c:20:3a:85:33:31:63:28:ce:02:2b:e1:
         59:a2:86:ac:d0:74:c1:e7:99:42:f2:3a:9a:4b:ce:dc:5d:20:
         e6:b2:83:6a:df:4f:1a:e7:a8:c7:33:22:1d:9c:ca:7f:6d:54:
         8f:6c:de:77:26:ec:cd:a1:c3:17:62:e0:8c:2d:43:cd:f8:30:
         74:a2:88:d1:ae:52:ad:c7:e5:eb:5e:9c:ec:4b:cc:12:91:26:
         db:99:4c:a3:dc:76:c6:85:b9:1e:c0:1f:78:22:39:91:af:26:
         36:fc:0d:25:79:4a:e5:4b:9b:d8:42:be:7d:39:6c:3f:78:05:
         a5:3d:52:83:b3:a7:06:ca:42:de:c0:4c:06:b7:79:8e:46:72:
         57:8e:98:2a:2c:a0:18:62:39:f0:51:75:77:e5:dc:4c:50:db:
         b4:eb:2d:51:30:49:6e:0f:65:72:6c:a3:c7:5a:6a:ee:a7:f2:
         56:1f:34:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----