Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File:                     _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier:          TTdJxcij6/XXSYnvESPmtRiRgcBJhuSNRExN4sIuu/U=
Subject key identifier:   AA:DE:C8:63:8A:2B:1A:61:4C:39:C0:1D:74:02:E1:E0:C0:6A:00:29
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer:       /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial:       01962F063E7294D02A9FD9FD55AAEDD3C3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=)
                          2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: zR54fI0apnQnE4ggl93BvIwJ6ciu5ao3KwkGWkkWb0k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3e:72:94:d0:2a:9f:d9:fd:55:aa:ed:d3:c3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=aadec8638a2b1a614c39c01d7402e1e0c06a0029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:a0:d3:dc:67:c4:a0:78:bd:65:58:23:1f:
                    d7:eb:ca:77:80:c0:07:5e:ee:87:11:f6:1e:68:65:
                    1f:dc:19:72:c0:0b:54:75:00:ab:a3:e2:ff:de:d8:
                    03:89:92:e8:f5:62:cf:30:21:6c:2f:8e:81:1b:0e:
                    1d:ae:8b:5c:1c:ba:3b:85:4c:7f:fa:ef:5e:90:f5:
                    be:69:a4:13:07:f1:34:10:a1:a3:3d:49:54:1e:17:
                    4c:b1:c7:ae:96:80:0d:78:95:96:17:6b:35:67:c6:
                    2a:96:78:5f:be:33:79:ce:69:73:a6:07:ec:08:09:
                    03:d3:ee:8f:59:d0:ca:14:02:9b:b2:bc:72:30:29:
                    82:2f:61:2b:35:77:2d:7e:c7:48:bf:cd:4a:fe:bf:
                    32:d7:49:16:1c:8f:59:5c:dc:29:7c:8e:5a:5d:86:
                    ac:fd:02:19:3a:4e:89:21:c7:fd:da:f4:9b:2b:29:
                    1a:14:40:3b:80:2b:94:73:a8:bc:88:0f:51:8c:d9:
                    2c:19:ea:1a:2f:a0:71:7b:12:b8:72:4b:52:e4:45:
                    5a:5d:74:f4:b3:f1:09:b4:46:52:1c:ba:f7:73:c3:
                    e1:e4:84:c5:18:16:78:99:fc:54:ed:c1:e1:30:59:
                    52:e8:72:f6:8d:9b:e8:2b:3c:b8:4f:4f:44:f4:8a:
                    ce:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DE:C8:63:8A:2B:1A:61:4C:39:C0:1D:74:02:E1:E0:C0:6A:00:29
            X509v3 Authority Key Identifier:
                keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:06:0d:67:6e:ae:70:f8:16:d7:1c:35:be:50:29:05:bd:18:
         2a:06:78:63:78:5d:ef:10:df:08:fb:b5:6e:40:bf:8a:59:76:
         a7:c7:4d:6b:a3:30:a9:e6:6b:56:cb:4a:9b:13:fa:b7:5a:10:
         3e:3b:eb:4d:3b:31:d3:b4:e7:a1:13:0d:7b:9e:cc:59:90:a7:
         bc:c7:6b:82:87:ec:eb:0b:62:52:db:24:09:fe:42:18:30:6c:
         9c:d6:5a:69:a9:e1:6c:4d:68:b0:9c:d3:3b:5a:f7:91:bf:65:
         7b:b9:da:c2:6b:4c:e4:f0:4a:d3:f3:7a:ed:c4:6c:e9:00:5e:
         d5:3e:af:cb:1b:15:43:a8:e2:90:45:b8:e7:3a:f7:cd:44:75:
         cf:b6:1a:9a:08:ef:f2:de:fd:f2:00:7b:8e:7b:f5:6f:78:90:
         6d:af:76:f9:40:d2:92:e4:df:5e:ae:fa:4a:d1:80:7b:45:0a:
         7a:95:20:76:fa:e3:2c:e8:4f:b0:a0:ee:d2:bd:5a:24:2a:03:
         31:6f:e6:2a:d3:4c:8a:a0:84:24:d6:3a:13:47:6c:6c:04:7a:
         2a:50:aa:e4:70:92:78:4b:05:90:45:24:5b:92:96:dc:56:cc:
         eb:9b:20:39:c1:08:53:2e:f6:2d:2f:70:07:94:b4:82:d0:b6:
         72:a9:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----