Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File:                     sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier:          CS8gSFJbBXVNJ3YTAVfZSmoAiq4WuO+7nUvDIfzJEaw=
Subject key identifier:   53:B3:0F:FF:E3:4D:29:44:3A:3E:9F:A1:80:DF:A4:0A:0C:D9:58:03
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer:       /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial:       01962DF3F24E6E45D32597C69BB845B0FBCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: AUWnKCughTUHbSmmjTVn8vVnF6E.roa (hash: m1cgzZ28NmXLcFryBxDw9CaAhbB6KXsR5pNMz3ZSd1A=)
                          2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: RBVvgoKiPr3qEXO8oAgi6D1EYOLB6oZFMZil228mw4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f2:4e:6e:45:d3:25:97:c6:9b:b8:45:b0:fb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=53b30fffe34d29443a3e9fa180dfa40a0cd95803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:34:0b:f9:69:71:9b:67:cf:d0:51:2c:7f:73:
                    c6:61:83:31:da:1d:a1:ce:41:83:bb:ad:5d:5b:85:
                    f3:ac:42:72:b3:b4:22:23:da:4e:38:62:59:51:9c:
                    cf:a7:c6:98:54:79:80:ef:95:e6:b8:78:fc:3f:b0:
                    f1:a6:be:90:7d:be:20:d5:13:51:55:ee:b5:85:7b:
                    be:e9:a9:22:cf:e3:dc:a6:b5:1b:32:d4:24:61:76:
                    f6:16:a0:23:34:c5:8a:f8:c3:99:54:19:ea:8c:b5:
                    6d:78:c4:be:c9:24:3a:72:c6:7a:e2:e9:9e:fd:a7:
                    2d:a8:ec:03:67:10:97:c9:2d:95:ce:a6:7b:98:41:
                    15:06:43:e0:7b:a3:47:1b:9a:47:69:49:58:63:ee:
                    02:ca:6c:74:6b:62:7e:c3:e7:8b:32:49:d3:54:74:
                    4e:6e:d8:8f:8f:eb:6d:13:2a:f9:70:41:15:95:2d:
                    b0:84:38:1c:e1:fc:2d:79:fe:fb:98:74:ce:15:a3:
                    81:4f:a4:fe:0d:9d:1f:72:32:fd:f3:fe:63:9d:06:
                    71:02:e0:36:ea:d9:3e:51:ab:e2:e2:2a:80:17:a9:
                    09:26:99:ef:94:84:e1:ed:df:c6:18:0f:98:d7:c5:
                    2d:ce:d0:a1:d7:e6:1b:d3:13:13:c4:39:17:a2:6f:
                    1d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B3:0F:FF:E3:4D:29:44:3A:3E:9F:A1:80:DF:A4:0A:0C:D9:58:03
            X509v3 Authority Key Identifier:
                keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:11:db:37:b5:af:ae:45:d2:f3:98:22:c4:39:7b:df:16:f4:
         31:3e:da:2f:a0:a3:cc:c0:c4:dc:24:50:08:c1:ab:cf:6f:dd:
         63:21:b6:77:e2:aa:4b:f7:5b:b8:21:88:70:13:1e:a8:39:a9:
         f7:54:05:bd:6a:f4:3a:56:c8:c0:6d:4d:52:95:24:ce:8f:0e:
         9f:bd:f9:a4:91:d9:a8:a7:0e:62:12:2c:de:2a:e5:5e:fb:46:
         84:9f:96:35:96:f4:06:ff:6b:01:f1:1d:40:fe:d2:ca:e4:d6:
         42:8a:c0:69:ef:6e:c0:ad:09:0f:bf:ad:0f:ae:83:ce:88:e1:
         bd:ce:15:6f:2e:ed:08:22:b3:1d:86:05:69:f8:56:0d:a9:60:
         d6:ef:b0:9c:8f:96:86:a7:a4:7c:2f:73:56:e8:0e:ab:90:23:
         f1:f2:11:1e:74:32:db:57:57:71:81:82:40:7d:76:9a:f8:33:
         d3:b5:37:5b:d5:14:2d:6e:b3:30:49:09:64:2c:2a:53:34:d9:
         8e:a3:02:3d:ad:68:39:9d:78:cc:0b:41:5d:61:af:cf:97:03:
         17:04:b9:76:cb:5f:94:b2:ab:ac:20:60:a3:9c:4b:78:dd:07:
         7c:74:7a:c5:43:a6:ce:1f:ee:97:e6:31:2e:d5:3f:a9:72:4c:
         d3:fc:56:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----