Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
File:                     MvbeMKm492SENE0M07bAJz6t028.mft (raw, json)
Hash identifier:          Tar6ePfMnU+GM2FhT8qLkD93UXWo1ZvhY5RxQQE/q5g=
Subject key identifier:   8C:95:65:5B:26:80:E6:EF:D7:35:EB:FE:6A:2E:E0:3D:DE:04:ED:84
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Certificate issuer:       /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial:       01962E99046CB73CCD6A76914101368FB7EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
Manifest number:          0196
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: 4h6gd-8--_DbMb2PIrFary1u45w.roa (hash: omFQCpjJiNTW/cNLim2vTaoqpmXOjD5FAaL5ZDoz4f8=)
                          2: MvbeMKm492SENE0M07bAJz6t028.crl (hash: wZWHitAUbhN9fE6Ib8SXLOyG8GnzesiFiLz7a3hbDdg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:04:6c:b7:3c:cd:6a:76:91:41:01:36:8f:b7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=8c95655b2680e6efd735ebfe6a2ee03dde04ed84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:c5:88:aa:20:f7:d5:c2:eb:7f:c2:23:be:
                    56:74:bd:43:e3:cc:f3:d8:0e:af:ac:21:24:89:b8:
                    fd:86:3d:ab:4e:19:2b:57:53:d4:25:64:ad:67:39:
                    a3:de:b8:fa:a5:cd:35:2e:60:56:55:3e:08:bc:02:
                    64:50:ce:c8:63:28:40:57:77:7f:91:75:e5:82:ba:
                    87:de:ef:6a:bb:b8:7a:14:66:4f:8b:e2:40:02:04:
                    cf:33:23:be:b4:2a:32:2b:b9:50:9b:d0:a1:73:0c:
                    72:d8:41:32:6f:51:8e:de:67:e1:8c:ad:ab:94:b8:
                    08:5e:fd:3a:86:3f:e4:72:97:cc:87:6a:3e:a3:bf:
                    75:5f:15:dd:4b:9c:83:03:bc:11:29:22:a2:2b:ec:
                    8a:48:4f:f2:4a:29:8b:28:e2:ef:3b:b6:d9:f7:16:
                    79:b6:06:d7:71:17:18:eb:1f:c3:d8:97:0f:59:76:
                    2b:5a:1b:3a:83:98:c7:98:21:10:01:52:b1:b1:5b:
                    5e:9d:94:a5:ac:61:be:c5:95:f4:8c:ec:36:92:87:
                    f0:87:17:19:e2:4f:69:22:83:b8:81:ec:41:ba:02:
                    ba:01:fe:a7:31:2b:20:52:e5:33:de:42:3a:bc:6b:
                    9d:7e:61:9d:67:57:fc:b5:db:f4:ba:c0:e1:cf:44:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:95:65:5B:26:80:E6:EF:D7:35:EB:FE:6A:2E:E0:3D:DE:04:ED:84
            X509v3 Authority Key Identifier:
                keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:24:f6:b7:2a:3e:a7:34:65:29:b9:21:23:64:08:17:d1:
         27:03:45:42:80:10:8a:e8:d3:22:ac:9f:05:a7:8b:4f:a8:3d:
         bf:55:ac:4f:7a:71:13:c4:89:4e:90:19:f9:5b:1c:74:e9:2b:
         74:cc:b9:56:6b:7f:77:c9:54:10:c9:7a:57:35:ca:49:e8:e8:
         af:09:a2:48:94:c5:53:9e:78:59:60:40:ae:a5:ea:4f:0e:a2:
         56:3d:4a:47:3b:74:7a:e0:e8:cf:eb:d6:fb:05:3d:54:25:e3:
         f9:92:21:4e:61:e9:a6:d2:e9:65:49:ae:04:08:d8:cc:be:07:
         b8:aa:84:e3:d9:60:52:eb:2a:17:3b:9c:ca:ef:25:74:8e:71:
         a5:6b:8f:15:82:bf:9a:88:3d:c2:aa:03:17:c1:c3:0d:43:22:
         9a:4e:d5:e1:f5:81:25:f2:af:34:d8:df:41:39:2d:9f:4c:11:
         31:d7:38:76:ac:df:3d:29:97:7c:5f:6a:80:11:fe:85:33:28:
         fc:47:d7:6b:69:b5:0b:89:23:ae:de:93:26:a8:3d:b1:40:88:
         a6:c2:ac:14:c9:39:af:e1:bd:20:8d:63:cb:63:f7:ac:d3:8c:
         db:af:76:e4:8f:d6:28:d3:43:0b:93:fc:57:be:a4:7f:2d:06:
         c8:10:0c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----