Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File:                     So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier:          u8Ym7uibpUDUYxbgQn3vXpKUJ7fgnVwrjvgPhWLtNSU=
Subject key identifier:   27:F2:8D:4C:9C:23:1C:CA:E6:7D:B1:58:D5:B1:5A:C7:4B:9A:C5:57
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer:       /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial:       01962ECF7FDB89675EF7335AC084788E75AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: 0Wv8atHhhinqkL8Z_4yWBd1Kqg8.roa (hash: fILNYD3epuR8fxYq9hgXxD3GgQQCM01sw2YL4pd5Wks=)
                          2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: h5jpkoPC0fB4Im6AnOMw9Ebhfi/Vb7aDM2XtTKVweuA=)
                          3: ndcYXik2c-8B-vqJArbqTb-_G3U.roa (hash: yy5P560QguXuhVFyLBs0BE4KQ8bMeN1jFaQHeK1c0oU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7f:db:89:67:5e:f7:33:5a:c0:84:78:8e:75:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=27f28d4c9c231ccae67db158d5b15ac74b9ac557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:c2:73:00:74:36:be:b0:6e:79:0d:01:f1:
                    c6:1a:09:2c:f4:1e:db:a5:01:d0:5b:73:ce:5c:46:
                    3a:38:1e:23:11:bf:4c:6b:ab:17:d0:88:0b:ee:f8:
                    e1:d0:a9:e4:49:b2:20:8c:bf:4f:6a:f7:98:ed:1e:
                    a1:f9:4d:5b:e3:21:49:c6:23:e9:a2:2b:71:4d:f6:
                    63:57:18:1f:44:fa:07:2e:08:6b:6b:ad:f5:74:40:
                    9e:51:38:dd:15:17:d0:15:d7:39:25:8b:00:58:6d:
                    e5:ca:ed:7f:18:e5:d2:b8:9a:ac:fc:36:1d:9c:dc:
                    d5:79:bf:36:b3:b0:30:08:1e:e4:ff:f6:47:c6:54:
                    1c:a6:eb:98:8f:79:71:e0:db:68:53:e0:14:65:77:
                    de:2d:af:b8:ab:0d:b7:66:c7:f4:bb:de:cd:ac:aa:
                    11:f0:82:2c:aa:ef:10:98:a2:6d:fb:c3:01:be:d0:
                    e8:a9:b0:9e:5c:b6:b1:fa:ed:e9:0a:51:30:2b:e2:
                    c1:0b:77:6c:cf:71:73:2d:b0:7a:49:09:fc:e4:fe:
                    63:c1:b3:f4:20:2e:ed:f5:54:64:8e:f5:5e:6f:8d:
                    ff:b3:3c:78:d2:45:97:67:96:c6:4c:10:3b:58:a8:
                    f4:c2:e5:19:a3:6f:8d:10:f7:cc:d9:c3:86:2c:dc:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F2:8D:4C:9C:23:1C:CA:E6:7D:B1:58:D5:B1:5A:C7:4B:9A:C5:57
            X509v3 Authority Key Identifier:
                keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d7:9f:ed:74:cd:34:28:0e:5d:89:09:c3:3b:3b:6a:8a:05:
         7c:a4:fe:a4:1c:8e:cf:46:ec:e8:58:b8:f6:70:19:16:67:4f:
         8d:e9:1f:19:d0:72:ca:ca:42:d1:ee:ef:bc:0f:9d:45:2c:aa:
         9f:99:0c:8b:7b:74:b1:95:ec:15:ce:83:21:a1:2c:49:93:7f:
         7f:18:10:67:cf:25:89:70:23:6d:1a:db:e7:bd:1c:a5:94:4f:
         2f:b3:81:ad:e5:d8:c2:04:2f:be:d4:0d:f3:a1:81:1f:b6:5d:
         44:7c:70:3b:be:d0:3b:8b:53:28:6b:a9:f4:f0:a5:6a:73:d1:
         7d:5e:c7:62:0c:69:46:71:a1:a8:a1:9f:b9:c8:59:3b:ff:37:
         76:af:0f:c0:9c:1c:db:38:83:02:d6:0c:d5:92:e9:2e:9b:99:
         db:a0:2b:65:f0:12:3e:1d:10:86:40:c3:b2:fd:96:d8:9a:7a:
         94:f3:ad:77:a4:66:eb:a1:2d:5b:58:00:af:74:10:8f:28:56:
         92:1f:c6:bd:ab:59:6e:48:4d:9f:f0:47:74:33:6d:7b:68:2b:
         64:b3:ba:f2:a5:00:d5:6f:d0:17:f2:fb:ef:85:52:e1:a5:de:
         d9:ac:80:0a:94:54:fd:21:95:5f:d9:69:c6:35:ac:8c:85:70:
         f5:5a:18:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----