Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File:                     xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier:          9iNuP0jW+FLy4dVPX6U77gssZ5mmEYJNnUStsRo6JMM=
Subject key identifier:   30:DB:36:31:13:8A:4F:BB:64:ED:3B:66:8F:9F:BB:CB:CD:87:B8:20
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer:       /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial:       01962F3DA796D80C470965CDA0EFFF6DD8BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: 0PsILassVkdjO3YLqLzhDep43F0.roa (hash: BTuwwmqm+lVoIfqGdzicWWpXk8ZLAGxFDZrA6HPrjFA=)
                          2: T00AB9xipsEuuuK1wmFSrgJa6EQ.roa (hash: h2lLCAhcvRlcJCiD1oieS2PrcXQxs+tKUD+48vFOxxo=)
                          3: ZB1bFwuNv6eWdiv8dDMsMnuoFfs.roa (hash: +Mo9nvZ4p8mpAlYTdnVEDmvUa5mEw+oncE82//f49Ts=)
                          4: j4_7U96IEPffvwOTiMn9moiTZAE.roa (hash: Z8Hyt/Bq5aoXLuGUE36BT9I0Ee4e3qh5AvVB4wMCsaI=)
                          5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: GJxZ1nHVUUBYAmfrHp8er9gjtVaF27XXIY8ldFtlDhU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a7:96:d8:0c:47:09:65:cd:a0:ef:ff:6d:d8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=30db3631138a4fbb64ed3b668f9fbbcbcd87b820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:e1:63:76:84:42:b6:cc:3a:37:5b:db:ef:
                    54:84:ac:26:d9:86:cd:63:82:15:ff:31:72:9f:4e:
                    8e:f8:e3:cb:13:fa:8d:6b:b1:d9:5b:10:3d:c4:80:
                    f4:7e:86:7a:25:54:d4:82:1f:61:84:25:5c:e7:c0:
                    e8:d9:f8:28:70:0c:b5:fd:ce:65:ba:a5:ac:d8:14:
                    3a:54:08:fe:b1:ab:4c:89:69:70:09:1e:07:26:e4:
                    d7:a7:16:c2:56:c9:b6:2e:b4:a6:90:64:79:61:d8:
                    a9:52:f2:15:e0:a6:79:67:a6:62:c0:cb:67:7f:37:
                    c7:9b:92:6e:53:c0:a5:dd:c6:6b:43:e2:54:d0:81:
                    7e:2f:b2:88:ad:2b:15:42:ce:6a:cb:ec:0c:b5:18:
                    e6:a4:8e:b4:28:e4:e8:be:57:87:91:30:1a:4e:d2:
                    45:8b:35:cf:a4:dd:85:5e:bf:ff:4f:ad:f5:cd:c8:
                    9c:ee:88:e1:58:6e:63:dd:b7:ac:91:1d:23:0f:96:
                    f9:bb:61:c0:72:20:aa:65:60:b2:f7:96:0d:8d:e2:
                    48:e3:64:87:72:40:13:51:74:9f:57:ef:fd:a7:e9:
                    08:4d:c2:ac:3a:6b:e5:29:ed:a0:98:56:3f:bf:28:
                    1b:5e:d4:db:d1:b6:87:89:ff:b7:ea:a4:d8:7d:17:
                    da:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DB:36:31:13:8A:4F:BB:64:ED:3B:66:8F:9F:BB:CB:CD:87:B8:20
            X509v3 Authority Key Identifier:
                keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b1:6f:8c:39:ff:ca:9e:e5:ef:bb:6e:a3:a3:ab:ab:45:0a:
         67:6a:0f:a5:3b:87:85:00:ab:32:df:33:53:8f:d2:7a:5b:d6:
         9a:ee:fe:87:86:8e:04:85:72:38:c1:f6:f9:55:89:ee:b9:bb:
         8d:8d:25:f0:44:6f:84:e8:7e:50:fb:74:48:22:01:68:7b:e5:
         13:b5:39:38:cf:de:d6:13:ce:ee:e9:ec:67:5e:8a:87:9d:1f:
         f4:13:23:ec:37:6d:22:1f:21:8d:db:7c:44:00:b8:73:c2:33:
         47:63:fd:b5:aa:45:5b:57:68:a5:e7:01:cc:45:4b:f9:ac:4c:
         8e:ab:2b:37:d5:8d:51:a7:62:79:66:3c:4e:51:0b:a5:77:d3:
         93:eb:fa:69:30:a0:f5:d3:cc:28:81:7b:61:80:bd:52:53:97:
         12:e3:54:37:f7:95:cd:de:9a:16:e2:bf:c2:a4:da:3f:3e:e5:
         c4:b0:ce:d7:8e:f7:d0:6f:72:28:da:86:67:55:91:af:19:77:
         49:85:4b:87:5b:b8:ba:57:52:2a:30:52:67:47:a9:e2:88:23:
         85:54:c5:4e:27:21:08:87:17:48:ad:b6:67:23:31:ff:74:a1:
         e5:a8:48:bd:50:ab:92:a1:11:8c:f7:ea:aa:5c:f9:a8:c7:80:
         1e:a8:d1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----