Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
File:                     iEv4DnL1Dwm_VjST69sRo0u6MS0.mft (raw, json)
Hash identifier:          lz5MkBvjMM/kCuAUagDFz5yWWGNTy5itx26zBJ3QhyY=
Subject key identifier:   30:34:7E:67:E8:5F:BF:EA:3A:C7:DE:B6:AA:9A:6C:6A:63:20:7E:A6
Authority key identifier: 88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
Certificate issuer:       /CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Certificate serial:       01962ECFB0E6772F7BE63711DCDA8E27BA5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
Manifest number:          14DA
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: IVdpbiwp8sk6RWKPU9fU_W8afE4.roa (hash: X2lQta/XLPc+pnMfam2urh0+0omvloln8L5ZX9x6bhE=)
                          2: Npq0NgAUzPmjKDeEsxuhWw6BogU.roa (hash: z3169zTT1YiBlznFXGSnMAqWRbAhW/S4LcLq7Rxd94g=)
                          3: ZZlHpEh3xq_erGKCvTsR5cenP4M.roa (hash: C4STcediFbKih1AYZM4S/g3j+Dxm18LPv+Tu0224VhI=)
                          4: detAd7FlOFGjTsX2k3rOLy2UQCs.roa (hash: cqEU+ACySIshfpJTQIUM63m1I8ih1IEP8SdQskz8PQk=)
                          5: hEIm6b1kctKQOBdo1EnRG1VjnyQ.roa (hash: Xo1DxXqBfY11s6cBh+ynDozHMZaWken4xmavWyHXw6s=)
                          6: iEv4DnL1Dwm_VjST69sRo0u6MS0.crl (hash: gNndSS0jfwMLG63vki9vTUem4SV5ehH1I+JXMXf1s0M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b0:e6:77:2f:7b:e6:37:11:dc:da:8e:27:ba:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884bf80e72f50f09bf563493ebdb11a34bba312d
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=30347e67e85fbfea3ac7deb6aa9a6c6a63207ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:f7:b2:b0:e9:1e:8d:5b:e7:69:f8:30:21:
                    ad:e3:e9:72:67:00:df:6c:35:09:cc:47:0d:e6:b4:
                    f5:78:30:bf:8c:9b:b4:ff:32:68:da:ce:97:a0:8f:
                    2b:63:32:02:f0:91:a4:2a:c2:5a:05:73:d9:5d:6a:
                    01:d4:7d:23:13:16:dc:7f:ff:15:8f:cb:34:40:bf:
                    a0:f3:93:bc:d0:24:d7:8e:80:6f:69:21:a0:86:9d:
                    a9:05:2a:d4:f8:e4:80:33:b0:b7:3d:7b:55:eb:5e:
                    d8:b0:2a:2d:20:3b:89:49:39:a5:55:25:12:5b:90:
                    81:90:10:1c:99:62:bc:a0:fc:c0:dc:fa:cd:66:cd:
                    b9:e4:45:bf:2a:6b:7d:cc:96:97:42:cd:21:b3:1b:
                    d0:56:8c:67:1f:84:22:93:c4:4b:1e:91:f7:2f:f7:
                    aa:69:89:8b:10:85:7a:d7:f3:5e:74:f9:07:de:bf:
                    75:a2:99:10:f3:d0:7c:64:ad:38:96:e6:64:30:56:
                    c8:10:b1:31:de:b0:32:0a:b5:10:27:61:c3:2e:2c:
                    69:9f:d7:e1:17:fd:87:41:88:a7:b7:78:d2:ca:9c:
                    c4:af:c1:47:72:08:d6:a5:80:27:dd:01:ab:40:75:
                    b7:90:8a:85:15:7b:dc:9d:fc:46:86:59:6d:5b:5f:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:34:7E:67:E8:5F:BF:EA:3A:C7:DE:B6:AA:9A:6C:6A:63:20:7E:A6
            X509v3 Authority Key Identifier:
                keyid:88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d2:09:4a:a3:c7:ba:30:d0:50:78:08:be:39:be:c3:b4:ce:
         6a:79:69:44:a1:e3:1a:a8:d7:87:0e:c9:ba:00:4e:9a:c2:3c:
         cc:16:2c:c4:77:b7:a2:93:71:6f:a1:8d:b5:56:98:bc:e1:ae:
         bc:52:ac:ee:c0:e7:40:0a:94:42:ae:a6:41:d2:d4:45:46:4f:
         cf:ae:bf:37:3a:eb:9b:57:70:b3:40:87:25:47:c7:c3:c8:08:
         5d:58:37:b5:c4:4d:0a:f7:15:c9:0c:5c:19:3e:74:d6:70:c3:
         7a:b7:28:9f:dd:b2:0b:04:dc:be:48:6e:26:42:5e:1c:09:c7:
         02:a6:09:5d:c1:42:46:0b:1d:60:2e:bf:b1:b6:bf:3f:7c:35:
         6d:ce:9c:d5:fb:be:e2:c8:02:1b:f9:36:d8:a2:dd:7e:ff:aa:
         eb:c7:4f:63:fa:6d:59:ea:6e:1b:94:24:1c:f3:1a:57:8c:e5:
         9f:fc:84:9d:ca:dc:7a:80:96:b0:21:6e:98:56:e0:61:61:a6:
         36:e6:fe:66:86:4e:3a:80:4f:9d:ff:fb:65:69:2a:f1:a3:6d:
         1b:9f:0c:73:b4:a2:be:31:aa:4d:9c:2b:cf:93:ec:69:34:8e:
         51:91:4b:3c:aa:25:2c:4a:8e:87:5d:8e:e8:8b:d0:2c:49:8e:
         08:b2:62:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----