Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File:                     l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier:          1/stSe0W7U+UCig19SHk01mDobIyTeRQHTwz1jwSPps=
Subject key identifier:   BD:C5:D2:17:84:91:39:80:21:14:E5:C1:AD:81:5D:1A:D7:16:1E:A3
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer:       /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial:       01962F06CC2061B688ECC0BD94FEEA7B727B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number:          0353
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=)
                          2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=)
                          3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: wkl3Q3GJNYfnw25+q5v9yoITDBkXj51ZGFhkfV9nHo0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cc:20:61:b6:88:ec:c0:bd:94:fe:ea:7b:72:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=bdc5d217849139802114e5c1ad815d1ad7161ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a0:4c:b7:52:86:4e:a9:b4:6b:e6:a9:30:7f:
                    08:b9:13:12:00:0b:d8:a2:69:a9:67:12:01:5e:77:
                    6b:66:30:25:78:d6:19:63:54:15:93:cf:50:e9:a6:
                    2a:37:13:d2:4b:50:9e:89:17:41:4e:81:13:87:91:
                    fd:11:4d:52:24:bd:06:0c:c9:23:0a:52:8a:ca:90:
                    cb:d7:18:3e:2d:f1:72:29:cf:32:7d:bf:37:a3:57:
                    1c:65:d1:85:9f:72:f5:5e:3e:4e:e7:fd:72:00:24:
                    4c:5f:99:80:0d:5d:97:3b:38:df:7a:e2:66:f0:2f:
                    a1:9d:4d:a3:16:d7:66:97:24:32:de:27:2b:9f:c7:
                    c9:25:47:4e:3b:2d:5e:3c:27:32:15:64:e4:82:d3:
                    09:5d:fc:1d:87:a5:38:84:fd:77:cc:6b:18:21:7a:
                    9f:9d:e3:13:80:d9:a1:63:62:f1:f2:fd:da:da:32:
                    30:bc:d6:f7:dd:b9:51:6f:b1:e1:54:80:26:9a:95:
                    81:7f:cd:ef:73:7c:f8:43:ec:7b:72:ed:8d:60:4a:
                    d1:12:f4:6d:a0:ba:07:f8:a4:48:80:c6:3d:53:87:
                    c1:fa:d2:a2:7c:03:2a:5f:00:f3:67:e7:51:43:4f:
                    1b:25:ac:6f:a6:1d:ea:76:7c:33:2f:8b:ba:f4:f0:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C5:D2:17:84:91:39:80:21:14:E5:C1:AD:81:5D:1A:D7:16:1E:A3
            X509v3 Authority Key Identifier:
                keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:17:2d:35:23:d3:00:60:00:b5:ac:dc:cf:6b:68:3c:36:69:
         c3:ee:fb:98:aa:a8:44:95:16:30:42:12:e2:95:04:48:06:c5:
         1b:14:1f:f2:e4:2d:91:1d:36:f2:94:1b:ea:a8:43:a3:de:42:
         c4:c2:b2:60:7e:72:94:c4:6b:ab:5c:aa:42:8e:04:f9:78:2a:
         75:4e:b5:13:7e:0d:b1:2a:2f:03:aa:6c:13:5b:76:d4:d5:cd:
         3c:0e:6f:5d:1d:9a:42:8b:9c:6a:55:34:5a:aa:a9:25:f3:ba:
         fa:ff:f5:bd:25:92:08:b8:80:f0:65:7c:f6:d4:75:29:1d:3c:
         ad:ee:35:71:4a:b8:85:d7:0f:9d:5f:33:24:e1:2a:ad:7e:1c:
         d4:5c:7e:ab:c4:54:5d:55:e1:5f:b1:e3:05:13:47:44:be:a4:
         92:18:7d:13:1c:dc:d1:87:14:56:1d:5a:15:2c:87:c9:6d:f3:
         a1:bf:40:64:4e:65:3d:f0:d3:68:cf:1b:af:f0:20:1c:52:b4:
         f7:5b:47:cb:f7:74:5f:60:cf:64:92:9b:e7:34:9d:cc:0a:0d:
         3e:e4:a0:ea:62:1f:43:f4:42:f7:1f:cd:1e:61:76:0e:62:5f:
         34:55:b7:36:9e:2f:35:d2:ec:d6:45:5a:3a:59:32:d8:1a:96:
         6f:b4:36:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----