Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File:                     cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier:          c7Bi7vpE3vEJdDpDfP5EUgcB6tJ+YRPAv+sCzvfyfGY=
Subject key identifier:   19:19:28:7C:D6:B0:18:A0:FB:14:0F:F6:D1:36:4B:AC:02:F8:4E:15
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       01962FAB40EC0EF39F5F73FD6C93ED4BD194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number:          0890
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: 9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (hash: 1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=)
                          2: ZfBqOoXHUKYwFm0K2P3L8CqH5jA.roa (hash: jcJ7i7ei55IV/pz5UmYFU9DxZXbxNv804qhavPYLYSU=)
                          3: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: W8H7eig5mWT8pehDQfxavJTLe7RW7n6H0I+iel+25JU=)
                          4: u95K4fV2qtYCciDZ9UwzIFzAw5A.roa (hash: ayZrkho31pPxiVCGyzfE95bEFSC8qkDwrF+lSVt63SM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:40:ec:0e:f3:9f:5f:73:fd:6c:93:ed:4b:d1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=1919287cd6b018a0fb140ff6d1364bac02f84e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:91:ae:7b:db:b8:aa:54:20:dd:db:ee:9f:
                    40:7a:4d:62:9c:23:3e:16:ba:50:56:ff:c3:04:9c:
                    10:a8:03:3b:f6:54:c2:cd:3d:3e:79:b0:01:83:20:
                    95:be:99:27:41:b0:27:2d:e7:d8:f9:7f:b3:cb:56:
                    4c:0f:d9:f0:c6:dd:ba:4f:6d:e2:39:a1:a6:4b:a0:
                    a5:63:dc:3d:eb:3a:36:40:13:9d:e3:aa:f4:f8:10:
                    92:e5:27:f7:31:ae:51:94:fe:81:ec:44:9f:32:d7:
                    6a:b4:61:ba:d1:e8:34:a1:85:be:19:4a:d3:c6:8f:
                    17:0c:5e:ce:1f:c4:7b:cf:45:2f:39:53:4d:99:4a:
                    b1:4c:e8:5d:54:b1:a0:43:14:c2:b4:ec:da:27:2c:
                    2e:81:32:92:a7:f6:2d:62:21:a6:9c:41:0e:77:c0:
                    9c:d8:4a:a8:3b:98:e5:4c:01:e6:6b:0e:b1:4c:d7:
                    2e:59:a1:ef:ba:b6:46:e1:98:ad:e6:6c:e2:55:41:
                    e5:c6:cd:6e:82:e7:84:73:29:91:30:66:90:e7:9b:
                    aa:9b:1c:f6:0d:ef:4b:30:75:95:e2:cc:70:2c:58:
                    36:c7:a7:99:18:a0:8b:c6:47:53:93:cf:41:34:8e:
                    91:b2:4a:45:2a:c8:14:7e:6c:77:f9:cd:6e:08:49:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:19:28:7C:D6:B0:18:A0:FB:14:0F:F6:D1:36:4B:AC:02:F8:4E:15
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d7:5e:c1:4d:a3:c2:16:1a:fb:76:ee:80:d3:93:f1:00:02:
         2e:57:33:5b:8b:2b:74:ad:db:ff:16:29:f0:d4:e1:d0:2f:9b:
         54:8a:b5:73:96:d0:d9:f1:b2:c1:16:2e:14:80:7a:41:88:ca:
         c1:cb:92:92:a7:ea:55:55:c5:6e:96:96:2f:94:f3:b8:d9:0d:
         3c:b7:c2:6d:2d:1d:b6:0a:1c:33:03:6d:81:2c:b0:84:93:f2:
         d1:2e:d6:a7:3a:51:cc:e8:34:9e:89:55:af:15:15:f5:8f:da:
         0d:7b:16:32:de:ba:82:95:d3:d2:58:05:b1:da:de:8c:8b:7a:
         cf:92:66:f2:a2:c1:cb:1b:b8:fd:c7:d6:c0:e7:bc:73:52:b3:
         de:53:cf:52:95:97:de:ad:76:34:af:a6:ee:e3:5f:d2:e0:6f:
         3c:53:09:40:13:c9:0c:fb:1c:18:31:70:46:ab:7e:5a:f7:54:
         89:b8:d6:2b:e6:8b:db:63:70:ab:11:fd:c1:b5:f6:5b:aa:42:
         42:f6:2e:39:03:bb:ac:cb:f7:04:29:d6:62:28:2e:a7:36:fd:
         4e:2c:50:1d:22:be:4d:3d:68:99:5f:fc:45:e4:b7:ad:59:84:
         5c:6a:b6:21:73:25:aa:42:6a:8a:b6:53:94:3b:ce:53:f1:e3:
         3e:0f:6e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----