Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
File:                     m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft (raw, json)
Hash identifier:          a58aTRSkWS+1cg4ocoxAyAbMgfV/xjW/NlONRS9kz0I=
Subject key identifier:   BF:04:A1:77:34:09:D2:88:9D:D1:37:80:56:3F:8E:FC:0E:1B:6E:01
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Certificate issuer:       /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial:       01962F07329816AF4ADD4AEC8F8C10484D39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:02 +0000
Files and hashes:         1: 5XHrLiIM2y02izeT50u3RQeElIc.roa (hash: m1/SMtGStEqNpySfHpmo6F8175M2nkwVOpWEiQdkpBo=)
                          2: ejmalSfr1tk53rbyCCEzLQB9ZzM.roa (hash: g7L2imx6UGUuOAuG6UHNk4qxo7a783+bs7b/1OA2UdA=)
                          3: l0wAbULeVazPwYlU9T-Fs3m4VN0.roa (hash: DZ6o3hO1cP2UGjoUI60lf4xxGDkyAXhO8s2og9CadCc=)
                          4: m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl (hash: YuRFRiVuVofoxPkndmjoIu0BNlOIidM+RM+4oJ6QyLU=)
                          5: wk5e4hIcd56Z58a_bsc7eOFpvEo.roa (hash: rW3zDMHLagp1fBqXsKbxwNvVG019sDcCbQQDsBMyiNI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:32:98:16:af:4a:dd:4a:ec:8f:8c:10:48:4d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
        Validity
            Not Before: Apr 13 12:02:02 2025 GMT
            Not After : Apr 14 12:02:02 2025 GMT
        Subject: CN=bf04a1773409d2889dd13780563f8efc0e1b6e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:81:a3:a1:8d:36:21:4e:0f:4d:12:80:01:02:
                    6f:9f:d3:67:ce:36:14:f2:5c:ea:ae:b9:73:db:54:
                    7b:2d:5c:a9:b9:a5:86:e5:af:23:2e:f0:7b:cc:d6:
                    38:e9:77:15:af:2d:57:a9:8f:cc:4a:85:d0:1a:04:
                    1a:14:70:3c:56:d3:a9:d7:4d:e1:0a:29:cb:5e:be:
                    74:6b:8f:03:c2:35:f8:af:af:ba:dc:9b:ba:a8:38:
                    ca:9f:bb:33:da:b4:d7:87:ea:84:34:d8:5e:0f:14:
                    d7:dc:b0:25:73:ac:a7:e9:83:83:37:27:c8:a9:b1:
                    e8:ac:3d:77:2e:4c:f0:c8:5a:47:9f:7a:cf:3b:fa:
                    2b:8a:0d:2b:96:cb:e0:39:82:0c:2e:d2:6e:7a:52:
                    3f:72:8a:db:79:e9:09:c3:fa:09:8e:ae:49:8f:77:
                    4b:04:e2:23:4b:9a:3d:79:51:9f:22:99:ce:11:70:
                    a7:fa:67:12:e8:a9:24:2f:7a:20:d8:37:53:eb:9c:
                    26:63:fb:ed:07:f6:14:86:62:4d:f7:35:e8:eb:2d:
                    18:39:bc:5c:5d:67:cd:f6:2b:1f:bd:0b:a5:28:dd:
                    da:ba:a2:53:53:5b:8e:ba:7c:bf:8b:00:7f:ed:f4:
                    18:09:56:df:ef:a1:9d:bd:61:b3:f6:71:42:3d:fd:
                    ca:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:04:A1:77:34:09:D2:88:9D:D1:37:80:56:3F:8E:FC:0E:1B:6E:01
            X509v3 Authority Key Identifier:
                keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:15:8e:b7:1a:92:d9:b2:32:90:90:18:0a:72:0f:e4:4e:72:
         75:a8:ec:db:76:db:da:ce:b0:e8:8d:41:3b:2b:ce:c1:c2:11:
         78:0d:d8:ba:10:34:97:f1:46:74:18:d9:76:26:2b:f4:53:6d:
         6d:8e:63:5f:34:61:c3:35:90:bc:c5:ef:0a:ee:b0:d8:c6:a5:
         f7:8b:22:ac:ec:f1:dc:38:14:55:3e:d3:46:4b:8e:1d:91:f4:
         bb:d8:33:12:b9:b5:23:8d:12:22:bd:1c:c0:6a:22:4f:46:a0:
         74:1e:05:df:de:54:22:90:c8:e3:f9:81:2d:22:b8:7b:93:b5:
         7a:ab:4e:f5:37:0d:0a:ff:77:a6:8f:e2:2d:8d:f5:d5:d7:c4:
         08:3f:05:71:b0:19:32:73:ea:27:46:d4:e2:92:e9:75:e6:bb:
         3a:4c:eb:66:62:1d:c1:d2:2a:78:ad:a8:e0:c8:fa:85:3b:cc:
         01:1e:2c:fa:cc:c2:cd:16:db:95:62:36:8a:ba:1a:13:73:c0:
         79:35:25:43:22:a2:d6:0f:33:27:63:23:26:c1:33:ec:00:98:
         f8:69:f4:bf:b1:23:93:04:78:d1:1b:cc:e6:38:26:d4:4c:97:
         79:c1:3b:19:15:23:cd:4f:b0:03:7a:c6:cf:cb:11:24:0b:92:
         07:70:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----