Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File:                     R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier:          3873xhszDUmFRrcHEi8zTWKtAX4HlBRhNnlNXhJKaD0=
Subject key identifier:   42:98:C6:4B:69:AB:9D:00:42:7C:47:1E:97:02:EF:E7:7E:65:EF:DC
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer:       /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial:       01962FABA14C1491ACD260A9DA35B149A4B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number:          0818
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: LAY9sSNA-YJZQYYdnmpTlhxvD2w.roa (hash: sy6paHPwN5kXrSUvaYyd2hN5gZ9nHNvT8Yp+G0CBKsY=)
                          2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: +yLC8m4JkVbdIrkNT2wgIwll+0UOb6y5wq44mJ1hnhE=)
                          3: kXlvgNGT0M_fb_-qmGB3FlkN85w.roa (hash: M89NbGfFWJGuspxS6G3ctJFxvooMQ1EluHCsGyLm9ME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a1:4c:14:91:ac:d2:60:a9:da:35:b1:49:a4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=4298c64b69ab9d00427c471e9702efe77e65efdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:40:fd:0d:7b:81:22:2f:45:90:60:bd:13:
                    8d:68:28:e7:9b:8b:d5:7d:1b:04:ca:9e:14:18:d4:
                    53:32:02:05:37:b3:86:38:c8:9b:af:7d:e5:e7:c0:
                    a6:31:75:bc:71:5c:ff:68:02:91:18:86:ce:13:fe:
                    74:cd:2e:3c:a3:62:6f:86:47:49:ea:60:74:5e:9e:
                    b2:56:49:a3:56:77:e2:07:ab:b7:c2:8a:1b:72:16:
                    d6:d6:14:69:6a:5f:e5:17:ec:e5:25:07:75:cf:73:
                    ad:b9:27:10:1d:18:0d:bf:9d:4c:6a:ff:b7:bf:2a:
                    95:e0:aa:fa:74:44:1f:10:45:a4:a4:30:87:a6:02:
                    73:33:53:57:f6:5a:ab:3e:a0:10:f9:68:d5:8b:00:
                    43:2b:1a:56:7e:5f:ce:bd:eb:5c:7b:f2:6f:f8:3b:
                    38:01:a1:27:10:1a:85:f2:68:8b:be:6f:37:e7:f8:
                    1c:b2:04:a8:bc:5c:d5:a1:69:da:e9:22:82:a3:48:
                    a4:fa:1d:27:3d:28:b4:aa:a8:2d:21:0f:fb:86:1c:
                    60:37:8c:ae:89:ce:9e:8b:96:95:46:9a:ff:9e:3a:
                    cd:58:a5:bd:ee:56:5f:17:20:02:2b:cb:87:42:44:
                    8b:88:00:40:18:3a:1a:08:78:83:88:ae:88:f6:27:
                    17:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:98:C6:4B:69:AB:9D:00:42:7C:47:1E:97:02:EF:E7:7E:65:EF:DC
            X509v3 Authority Key Identifier:
                keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:6e:01:d9:ad:27:80:5f:a4:57:2b:04:36:d2:01:12:65:11:
         1b:67:68:4f:41:89:f1:a5:3a:4f:46:be:1d:50:76:38:28:94:
         95:a2:63:d8:de:80:c2:95:0f:59:07:59:be:58:6b:b8:7b:73:
         4a:73:56:0b:7a:49:a3:f3:e4:a3:0e:3e:31:92:c7:dc:27:c1:
         1f:91:af:26:43:2e:d0:13:e6:49:c1:8c:f4:26:d1:18:66:7c:
         8a:2a:ab:67:25:6b:59:21:44:56:f8:c2:b1:0a:b7:5c:b2:a2:
         d4:44:fb:35:24:34:4d:a9:7d:bf:7d:34:e4:de:c7:6e:c7:15:
         55:8e:89:26:70:1c:f0:f0:be:1d:26:a0:ec:3f:d6:a8:e0:27:
         3f:9d:fe:72:1d:86:94:e8:42:7b:ce:46:de:5e:d3:f8:60:a1:
         61:86:e4:cf:29:91:35:64:12:f6:dc:87:57:aa:8c:6d:9a:95:
         17:d7:14:10:8e:f4:fc:cb:01:b0:e5:ba:d7:5e:d7:f4:b5:af:
         66:7b:ef:59:18:e1:92:7a:70:46:ab:ad:8e:72:48:79:33:4a:
         f3:c6:69:da:7f:51:9a:94:fe:5a:1e:e4:96:76:90:4a:88:be:
         23:c4:81:e2:52:0b:a7:3c:8b:86:ce:54:bf:59:1d:dc:b7:06:
         6f:fd:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----