Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
File:                     rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft (raw, json)
Hash identifier:          reR1g6BoLWlQQL3pMhOjE2hp5QB32hpIWBUvKR86xTI=
Subject key identifier:   23:2F:D2:2B:B4:FF:8B:D8:E1:34:EB:26:6C:4E:5B:0F:7C:6C:38:36
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Certificate issuer:       /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial:       01962F749E00569EDB3808427FAFDBD4795B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
Manifest number:          1503
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: 1xef8JB14kgVdYbFNM-Oq6W7NWA.roa (hash: 2TgMpFsN8snCYIhnDbb3K1R/JLwOpv09B4vLRv33njY=)
                          2: 30aIeplMe8B5nuWPNxNW6K-OtBY.roa (hash: 3pRxuzSCfGIU8i4yLQxNrHj04RZktWd0aRH2mX3pOUo=)
                          3: 5R2_zC5O_WNYOAGlu7by2_fhzYo.roa (hash: Eq+hBI8YGdr0edeJFDWardc1U5Cf7U1rPC+h2snaoOY=)
                          4: mG-NGr5UJw8Bdsm31xr0LARp3LM.roa (hash: Ez+x2KZ41CLnIqO9c7EUA1U/u9pzX46TWaq6peZ65/4=)
                          5: nqdZW8VS3cJABsENIPnwko2Hihc.roa (hash: IhzETIut1wHzF58gkob1Irj0rHur1kgwouWb5+riuAI=)
                          6: nrBcJclJWWQmSFgHdkkN2rl4iMo.roa (hash: LHzeWYsmA5iX5RkIBuodpJrYuHeqFeRrX4/36Bp1azQ=)
                          7: rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl (hash: w8TuYdQJwo4w3HE8spQN/t+0DUiCqc4AtsMeTpsK6YY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9e:00:56:9e:db:38:08:42:7f:af:db:d4:79:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=232fd22bb4ff8bd8e134eb266c4e5b0f7c6c3836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:bf:ce:44:3c:d6:6c:76:ed:0f:05:31:c6:
                    cb:8b:cd:d4:d2:4a:52:45:45:cf:f8:2f:70:37:ad:
                    cd:e0:9c:1c:bf:fc:f1:37:96:0a:b6:d6:c4:d4:4a:
                    d7:d4:13:e5:7a:5c:a2:9e:af:d8:7f:d3:f4:8d:61:
                    0b:7e:c3:a0:d3:51:cf:e9:d9:53:a6:49:58:12:9f:
                    b0:0f:06:73:b7:d8:88:42:1a:5a:d6:b0:30:84:d5:
                    43:c8:1d:fa:ce:f5:57:e5:cd:66:ac:32:fa:77:5e:
                    43:f6:31:98:54:b9:a0:1b:5b:01:81:0b:31:e6:b0:
                    a2:73:bb:ba:67:56:ff:d8:40:86:01:f9:d5:0d:10:
                    86:66:24:5d:4e:30:bb:0a:e3:c6:a5:41:9a:02:75:
                    37:95:dc:b8:20:88:d9:02:7c:b0:4c:0f:41:3e:13:
                    4b:e0:92:68:57:81:f3:af:de:c1:b2:36:07:65:e1:
                    1f:82:e8:ea:b7:87:ad:a7:95:fa:d4:6f:7d:c0:9a:
                    9a:40:e1:b1:ba:c4:01:24:be:75:d0:4e:c8:e1:1f:
                    04:6d:6e:a1:66:e4:ea:b2:fd:7e:b2:c5:a3:78:32:
                    63:2f:71:eb:3a:a5:38:3e:0c:c0:26:bd:1e:17:30:
                    96:0e:30:f1:c6:5e:12:77:26:15:40:a2:bd:38:a3:
                    8d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2F:D2:2B:B4:FF:8B:D8:E1:34:EB:26:6C:4E:5B:0F:7C:6C:38:36
            X509v3 Authority Key Identifier:
                keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:45:54:8b:00:fe:8e:cc:97:f6:bd:ac:e6:21:67:70:54:66:
         b5:14:5e:bf:80:8b:7a:ec:28:c8:5f:08:0e:d0:5f:c7:09:d2:
         49:45:32:a2:2f:a4:e1:94:29:26:b9:f6:fe:02:6b:2c:d4:ab:
         66:ff:c7:0c:12:ff:76:a3:f7:59:70:4c:53:89:1e:da:05:69:
         c7:ed:20:a9:4e:8a:b7:12:1b:0a:a5:d4:6e:ab:f3:92:20:38:
         3b:1c:6e:86:8c:67:c9:eb:ab:f3:6e:85:54:89:d5:93:8a:b2:
         e3:6f:30:9c:b8:4c:a4:8e:10:37:0b:38:98:11:4f:98:f7:45:
         60:19:fc:6d:66:7e:12:31:ec:3d:11:49:89:63:0f:d9:64:c5:
         1e:5c:fe:75:49:9c:5d:ee:e8:4a:e0:95:69:2d:55:b6:68:06:
         b3:19:06:70:a3:77:54:8a:c8:d3:9f:33:a5:7f:7e:fc:0d:38:
         ed:b9:c4:69:70:44:88:57:2b:d3:f5:82:dd:9e:4c:5d:f6:fc:
         a3:a3:04:b6:ce:ca:99:6f:13:33:d5:c5:0e:8b:89:0c:8a:a6:
         b0:e6:b5:d5:a4:4e:c8:2f:da:d3:e0:8d:01:03:7b:3a:4d:5a:
         7b:6c:28:77:5b:5a:b5:9d:94:c8:d1:ff:7e:6e:9a:ce:fe:b6:
         b6:29:60:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----