Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File:                     xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier:          jvahMYfrlg3tWg2BUBeNs/fvsueivcR18ku7nlBUmQY=
Subject key identifier:   72:00:E6:34:5C:63:ED:CF:61:65:8A:1B:D0:8E:8B:69:1A:10:77:6A
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer:       /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial:       01962E99AA59DA9D1C87F42DACA61DEDCEEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: MPJbxNfI4E3-o9R3b5LoavuNf_M.roa (hash: YmpwW40yFr+eOmaR9up2PE3Zd5XCNeKEz4dO44qxY0o=)
                          2: dRZw3Usb2yz3p3d9m-6XMO158wI.roa (hash: JliEihs4bCSiKbM0gL/JHcl4AanPExI+3YUAO/UsNWk=)
                          3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: h5qv+Exo+OZcVld3rm67m9agOVTI4V+oR6dZBmaaGiY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:aa:59:da:9d:1c:87:f4:2d:ac:a6:1d:ed:ce:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=7200e6345c63edcf61658a1bd08e8b691a10776a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:cc:92:6d:da:b3:22:8e:e8:55:54:36:91:
                    17:15:0e:0b:34:be:e0:7b:56:58:2b:b1:1a:2e:cb:
                    ce:db:95:e6:6a:24:7c:c9:2d:c7:97:9c:c3:20:04:
                    73:36:93:fc:da:59:a0:87:f1:dd:45:7c:9d:a6:f5:
                    41:f4:eb:81:0d:a5:ef:5a:e4:b8:c4:b9:ba:f7:cd:
                    b3:26:34:f4:4c:3c:6c:aa:57:35:83:40:ff:8d:de:
                    ab:61:ed:71:30:1d:b9:55:d0:4e:22:d2:3a:4b:1f:
                    1f:e8:05:e5:c1:f8:34:59:4f:e4:7d:33:23:46:38:
                    3e:98:ce:24:84:18:db:98:e5:0b:de:f6:de:4e:b1:
                    26:55:19:07:6b:a0:0b:a7:f6:aa:f5:8a:a2:06:65:
                    b1:e2:1c:7e:d1:7d:46:fe:dd:84:71:b5:a0:59:5d:
                    d2:79:a6:02:70:19:f7:c8:8b:1a:5d:5a:c5:62:1c:
                    83:dc:c3:3c:c8:e2:d3:18:3f:38:a3:80:ce:8a:cf:
                    9d:e3:f1:03:f1:22:3a:f7:81:dd:e7:f1:1b:cf:36:
                    6d:56:3a:9f:40:d8:31:25:c4:cb:b2:86:e6:3a:b2:
                    dd:33:01:a2:9e:54:3f:d0:ac:44:75:8f:c4:bd:a8:
                    78:6e:63:62:7a:01:c5:93:98:ad:e6:7b:f7:f8:bf:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:00:E6:34:5C:63:ED:CF:61:65:8A:1B:D0:8E:8B:69:1A:10:77:6A
            X509v3 Authority Key Identifier:
                keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:bc:04:d7:98:5a:b9:da:a8:d9:68:05:f1:68:fc:d0:d1:00:
         14:68:61:d8:f7:6b:2e:e8:bb:db:13:2d:e0:6b:eb:33:4e:36:
         b7:26:05:89:64:dd:2c:e9:e1:90:d2:40:b3:87:10:37:1d:42:
         04:44:95:89:2e:47:7a:3c:fb:9c:c0:ba:88:31:26:d4:05:08:
         13:88:af:54:d3:0e:21:c7:4a:b6:13:94:39:9a:fe:6c:b7:89:
         5a:41:16:37:3d:0e:74:82:e7:e9:1d:fb:77:30:48:6e:c7:f5:
         8e:69:a0:45:00:7c:e6:9b:2f:fa:5b:00:92:a6:f4:b9:bb:99:
         d6:10:6f:6b:7d:5e:f6:e0:40:db:d2:3f:22:67:49:9f:78:f5:
         b0:4f:41:12:c3:81:0f:fd:47:4d:84:79:68:c7:a3:49:b2:38:
         9f:ea:0e:d4:32:68:35:24:fe:8a:23:e2:74:d2:c6:a4:60:a9:
         88:1a:ed:39:45:59:ab:c3:3f:04:0c:d6:1e:77:3b:53:da:9f:
         d6:a9:0e:52:0c:9e:f1:0f:6d:c0:d8:a9:0d:a0:ea:1a:fa:db:
         00:66:70:b0:a3:88:2e:16:69:87:6f:65:05:55:16:3d:86:9e:
         b9:13:b2:41:c6:c2:bf:76:5c:63:c7:51:d1:fd:ff:19:6d:e5:
         84:fb:f5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----