Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File:                     I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier:          T+fRBtwWOF3ytAGzTMjPTCCC5oZ6PRpCdimhOi3Zm3A=
Subject key identifier:   46:E4:5B:84:3C:4A:A3:60:83:8A:99:0E:FA:2E:53:C4:3A:21:BD:51
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer:       /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial:       01962F0698470AB8B340FBC183E0A6116D0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number:          0376
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: AgvVH_Z5ZikBFIUyEGB_f4ftLfg.roa (hash: Ii6l1o1UjR6zsFk/Ik5xPFxEIQrzvV/YcOC6UeUTh7g=)
                          2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: 0EiD/8Edvm+c3ue/OqsaPXIQV61k5mBTvUAFa/Xbz94=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:98:47:0a:b8:b3:40:fb:c1:83:e0:a6:11:6d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=46e45b843c4aa360838a990efa2e53c43a21bd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:d1:19:aa:60:be:17:dc:57:5d:a5:4d:cf:
                    64:7c:4f:b4:5e:f2:5e:c1:29:eb:bf:23:75:b9:d6:
                    58:30:15:1a:42:e0:a9:c2:50:a0:b3:1a:da:e7:0b:
                    f3:c0:3a:bc:41:33:3f:58:ea:0c:0e:c0:06:5a:49:
                    fc:18:35:4f:96:9e:fd:10:88:6d:70:f6:35:e6:9a:
                    d8:b0:8f:7d:cd:8a:5d:ed:e8:13:7c:63:5b:9c:f6:
                    cf:1f:73:ff:6e:7c:ed:6f:56:66:4c:3a:e5:de:b2:
                    81:d8:39:0e:aa:62:fd:ed:0b:75:fa:e0:61:33:6f:
                    74:1f:33:65:00:da:f8:6b:dd:48:e0:ad:75:5e:21:
                    2b:f5:cc:80:dd:ca:f4:60:ec:e0:46:17:4f:cd:1e:
                    af:d0:92:a1:c2:1d:63:8b:00:3e:aa:21:3e:2a:74:
                    92:a2:5b:57:b9:d6:86:99:36:e3:ba:d4:52:b6:e0:
                    6b:6b:56:31:ef:82:b6:9d:e4:99:08:a9:f7:b2:d1:
                    f5:bb:8c:91:e8:e5:47:94:9d:05:4a:f6:f8:6f:fa:
                    ed:4e:0f:60:35:fc:79:77:44:6b:44:ea:22:99:08:
                    d0:14:51:72:6a:0e:d8:23:7f:83:4f:31:73:bd:0c:
                    70:52:b9:7e:26:0e:09:06:8d:b7:ed:81:0c:71:e7:
                    0b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E4:5B:84:3C:4A:A3:60:83:8A:99:0E:FA:2E:53:C4:3A:21:BD:51
            X509v3 Authority Key Identifier:
                keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3b:e7:87:c7:26:a3:e8:b0:86:30:77:94:9e:f4:cb:4c:5f:
         f9:97:40:26:a4:ac:41:01:c1:47:40:cf:fc:4e:83:09:07:5d:
         95:47:71:e8:a3:af:f7:09:78:c0:dc:9e:60:ad:00:53:10:1d:
         72:54:ff:e0:22:17:37:0d:47:4f:66:f1:29:5a:cb:10:d7:6d:
         af:1d:5f:5d:de:68:48:68:c3:c6:93:00:ce:c9:98:3c:0a:60:
         67:b7:e6:67:94:75:a6:40:aa:0b:a2:07:88:15:d5:c3:5a:b2:
         89:a1:2d:89:0c:94:a5:b0:4f:8d:c0:45:65:b8:42:f7:3e:87:
         26:64:df:06:c4:24:4c:6c:76:1d:b1:96:ca:7e:12:2c:ac:4f:
         7d:9e:c9:32:ba:17:b6:42:df:79:ab:23:27:31:ef:ca:e2:ba:
         ac:9e:67:7c:86:73:a8:8b:71:a7:20:1d:47:1b:ba:fe:68:56:
         07:69:98:9d:c1:cc:f6:27:06:8a:c4:4a:95:f3:08:60:db:b3:
         f1:ed:ea:b5:6c:6d:2d:b2:f9:ea:09:76:84:4d:ed:10:85:fe:
         7e:4f:e9:b7:8f:6a:50:95:cd:e5:e6:66:1c:5b:66:02:71:96:
         88:86:ad:c8:c7:a2:cf:16:c9:ec:fc:01:a3:4f:99:9f:cf:cd:
         74:36:fa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----