Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
File:                     g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft (raw, json)
Hash identifier:          udj5URbH97heUMDHAzadZB3Ax+GRxRhfP8muAuJ+uZE=
Subject key identifier:   E1:1E:4B:CD:4D:1E:55:3A:E8:B3:7F:DF:4F:59:B9:09:46:1F:38:90
Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Certificate issuer:       /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Certificate serial:       01962E2B2A1C668E773695590FF062B3C606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
Manifest number:          03FA
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: BU9JhoqrTpIQsWIouXHlxP2UwJc.roa (hash: eExBD31OYoCxpTQ9bbvDSg8Lx/R1p5NUbz4eD5SEWnA=)
                          2: PMFwvTAxfhGKJmrLSIFVTDEuW3I.roa (hash: HYp8t9eAVcEw+uZrQ21I7eKONuoQGa89OFuwBzm+DCo=)
                          3: g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl (hash: g31zEnrysxFZJmExLJXbbw0AFpF3awqiRA0VKPmWiaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2a:1c:66:8e:77:36:95:59:0f:f0:62:b3:c6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=e11e4bcd4d1e553ae8b37fdf4f59b909461f3890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:4b:42:db:20:e9:cb:5d:97:8b:64:c9:ff:
                    b7:9b:45:4a:d4:8e:2b:07:8e:e5:a9:eb:0a:a4:b8:
                    9c:6e:d5:24:46:46:38:19:85:55:d3:cc:aa:c4:66:
                    ab:fd:58:0f:00:19:95:d0:c4:8c:a5:94:b4:16:53:
                    5c:12:28:39:1d:65:90:eb:a6:a9:2a:f4:ae:4d:a8:
                    3c:15:10:79:9f:aa:22:d6:23:c2:10:5e:66:b3:01:
                    ea:62:fb:17:33:ef:88:e7:49:ae:48:c5:99:d7:d1:
                    51:73:13:97:9f:b1:01:01:e4:88:12:9d:c3:c5:c1:
                    ff:72:c6:14:55:25:a9:0b:43:58:4c:e3:ef:bb:ea:
                    1c:e3:c5:c3:7d:df:36:8f:8f:f4:fb:c7:11:d7:4e:
                    a0:10:31:04:f5:7e:f2:ab:1e:bd:1d:57:f6:a1:34:
                    07:9c:db:b7:8f:6c:c4:53:32:40:41:1d:2e:50:86:
                    82:41:05:1f:4a:a2:73:4a:ed:8e:f4:fd:fb:d5:d7:
                    57:38:3f:e8:d0:4c:3e:11:b1:71:2c:b4:e1:83:98:
                    42:ee:82:9a:e3:48:53:60:56:b7:6e:cd:73:c8:1a:
                    28:80:38:45:0e:a0:e2:fa:95:87:59:7a:db:f4:03:
                    80:79:a8:b6:9b:2f:b2:43:ac:e9:26:20:ab:8b:93:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1E:4B:CD:4D:1E:55:3A:E8:B3:7F:DF:4F:59:B9:09:46:1F:38:90
            X509v3 Authority Key Identifier:
                keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:cc:8a:1b:1a:48:96:d5:91:12:2b:34:a8:d8:78:b9:bc:a9:
         8c:e8:28:1a:7a:8e:2d:2e:f6:24:14:2a:eb:c2:29:6c:66:db:
         b2:ac:13:5f:b9:ed:92:54:dd:7d:49:4f:06:b3:25:b4:ad:38:
         10:5d:d5:1a:64:46:44:1f:47:c8:8d:f2:1f:0c:9e:c2:b2:4e:
         92:a0:f1:37:35:27:14:d3:ef:00:61:a2:64:46:d9:37:b8:81:
         44:17:37:8d:be:32:4b:74:6c:5a:6a:9f:ef:b1:18:6e:12:82:
         06:bf:df:79:06:c4:0a:e5:f9:c5:8f:6b:68:0e:65:5f:7a:2c:
         84:eb:59:91:37:43:eb:73:1d:d4:b4:38:1e:32:a5:c6:23:8c:
         3e:9e:eb:10:2b:98:55:40:d0:01:2a:c2:ca:66:d9:ee:f1:92:
         65:a6:f5:e2:1e:49:cb:d0:b4:74:ed:fe:1e:04:2f:00:8e:0a:
         f9:5a:86:8a:44:f4:fd:45:48:1f:f3:8c:10:dd:da:6d:a7:79:
         99:03:16:e9:aa:7d:d6:db:0b:80:6d:a6:76:d9:8a:01:9b:8b:
         67:f8:3b:6b:6a:66:94:2d:72:7b:20:a5:bc:25:98:05:b7:13:
         d8:ca:e4:02:c6:2e:c9:fd:7f:bb:62:33:05:7a:4d:b8:07:3d:
         19:a5:48:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----