Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
File:                     mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft (raw, json)
Hash identifier:          0o9ce/f+DR1IitpKSv8H0sE/hfjGJLZFC9pi4UqATHQ=
Subject key identifier:   45:E1:B1:FF:A6:5D:61:6E:F3:99:5C:8F:4E:69:5B:D9:3F:9B:13:A4
Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
Certificate issuer:       /CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Certificate serial:       01962E988EB04204CAAB78AD771549DE2DB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
Manifest number:          0AF3
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: Sj80T0ZscSHQioJGKuWyuIDWdMY.roa (hash: WY9jZ6uCG8EibKZZR1R4Ju7ioSD/EDvW46cJnpe1OBA=)
                          2: mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl (hash: WMcN2HD7Bv1R0kOB26xk0Vv0t0uSaoyhE/GCddtVDHE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8e:b0:42:04:ca:ab:78:ad:77:15:49:de:2d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=45e1b1ffa65d616ef3995c8f4e695bd93f9b13a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:65:29:74:ce:78:c8:20:62:10:ab:f5:93:ca:
                    98:2d:6e:51:fb:56:c4:1f:30:cb:d3:4a:41:e6:89:
                    8d:b6:a6:af:39:99:a2:18:37:02:99:ef:88:94:7c:
                    43:ba:ac:d2:17:ae:b2:05:a4:95:86:40:36:69:e2:
                    a5:d8:67:95:11:49:a2:77:4c:76:48:08:22:e4:41:
                    ad:89:47:a5:99:c9:d4:aa:c3:c1:99:77:ec:15:79:
                    0e:3b:58:e6:52:40:8c:26:cc:05:ad:ac:17:96:f1:
                    f5:78:55:7b:75:a1:92:3d:c4:49:10:07:3c:24:e2:
                    d5:5e:2e:39:36:09:56:1e:55:fa:0d:52:12:c2:9a:
                    6e:17:67:b5:64:9b:cc:b5:30:bb:5d:78:5b:bd:16:
                    08:55:01:8a:9f:b3:fa:54:3f:81:fb:9b:0b:56:d4:
                    62:e1:b3:c5:b2:98:a7:f6:70:0c:ec:f4:88:49:7b:
                    da:c1:f8:8d:f6:12:3c:63:fd:6b:5f:cc:a3:02:4d:
                    55:ed:97:de:fb:45:e5:04:a4:37:ba:ef:ab:3c:72:
                    43:fb:42:b5:9f:6a:ec:36:46:fa:5f:ce:5a:ae:d7:
                    cf:d5:63:5d:ca:2f:ed:0a:c6:a8:fa:b4:5c:8a:54:
                    c6:fb:e8:32:9a:78:82:0a:a6:ed:d0:45:45:21:7d:
                    84:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E1:B1:FF:A6:5D:61:6E:F3:99:5C:8F:4E:69:5B:D9:3F:9B:13:A4
            X509v3 Authority Key Identifier:
                keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:6d:76:e2:d6:56:11:d2:9c:69:d3:38:d0:10:1a:6f:41:b0:
         30:6e:f5:bc:56:66:79:02:6f:e9:71:04:95:84:4f:13:8c:38:
         bc:9f:fc:16:fa:69:05:a8:b9:88:09:d9:b8:65:24:a7:6b:97:
         20:96:f2:d5:5a:63:38:3c:c0:65:2c:49:7b:fc:ca:c1:b3:fc:
         a8:89:87:ec:10:e7:69:ab:97:5a:ef:03:44:d3:d2:5a:e8:31:
         70:ed:a7:3b:f7:69:dd:89:80:44:02:63:8d:06:4d:f2:cb:ce:
         4e:3a:8c:08:33:7f:d2:e0:0d:e4:fa:d2:e5:41:58:3f:00:c2:
         e4:3d:2a:52:2e:8d:fa:50:42:ac:17:d0:34:69:b5:4b:3a:16:
         bc:11:ce:ff:a8:e0:8b:c8:53:aa:d7:9c:e1:86:ed:45:80:8b:
         e3:04:db:6a:04:ba:17:45:a2:19:a2:58:f3:08:29:7f:ff:e4:
         69:0a:3d:72:09:fe:53:bf:98:5d:b8:9e:d2:cb:95:05:62:65:
         25:95:7b:72:08:98:60:e2:3e:fe:55:a7:0c:92:bd:8b:85:c4:
         99:29:4c:ea:b0:96:ce:94:c1:cc:22:1e:b9:a0:93:46:1c:4d:
         eb:c5:20:e9:06:29:53:bb:16:ab:d4:55:67:b6:df:9d:66:18:
         93:a5:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----