Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
File:                     j4aF263_sB3czmxNgql_M8BA7S0.mft (raw, json)
Hash identifier:          CGmTXMStU7gN+gYNjlARS5Nb7H0XWz2fR6CllYI+XtU=
Subject key identifier:   59:6D:DF:E6:5D:E5:FE:48:21:FC:29:F4:17:78:8C:BF:CF:19:E6:25
Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
Certificate issuer:       /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Certificate serial:       01962E993BCBE43AC58E955BED81B203E0BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: CnLBnKO7kUWDOtI_wZowil8ZDY0.roa (hash: +ZLQWoCpBdEd1GfrIrkM6Ixuxre1nfZzdo3/CXXl60U=)
                          2: j4aF263_sB3czmxNgql_M8BA7S0.crl (hash: VOwyqaAVqL03DJ4shQIxlc9gro/hXccyjx6YauvtWQo=)
                          3: sUWUQ7xVOWG88c1zTJfQJSXfUGM.roa (hash: VIZMGPKQd062ThwggTDHc4EOlVHSYbX0SY8qNlvlezs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3b:cb:e4:3a:c5:8e:95:5b:ed:81:b2:03:e0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=596ddfe65de5fe4821fc29f417788cbfcf19e625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:75:d9:fd:00:b5:e7:c9:c8:7c:36:da:c9:
                    94:c1:d6:6c:ae:21:51:38:96:d1:aa:72:49:89:f4:
                    8a:66:6c:2d:17:41:2f:ef:4b:34:aa:77:3d:e6:ae:
                    89:ee:25:6a:2d:71:f3:25:a5:39:ef:24:36:5e:dd:
                    6e:b6:74:7d:18:a9:8c:11:d6:bd:e2:5e:68:a1:1c:
                    5c:f1:1e:41:fd:4e:4d:c0:74:3e:f1:51:ac:71:87:
                    e0:2b:5b:cd:ec:9d:d5:28:9b:b1:a2:d2:c9:3e:ad:
                    2f:c5:4f:46:13:a1:43:f9:7a:e6:9c:e1:6e:4d:98:
                    ce:7f:be:fb:87:93:37:3c:a6:65:50:0f:11:b4:4f:
                    e5:43:c7:e1:7a:93:71:e8:2d:46:a3:45:d2:ef:6d:
                    74:b1:3e:80:01:51:08:aa:b5:6e:70:bc:31:f2:b8:
                    33:14:5d:73:b1:94:d4:15:8c:9b:75:1d:e2:63:58:
                    a3:c8:c5:72:47:1a:99:1a:b3:7e:f1:fc:26:ae:b2:
                    71:6b:4f:63:f5:5b:58:c6:e2:a4:8e:3b:67:a6:80:
                    d3:7c:f6:be:8e:c4:cf:03:a3:0b:ad:99:f0:a2:91:
                    f1:c8:1e:2f:67:74:a5:13:f6:b2:be:e6:9d:61:29:
                    f2:e0:e7:29:ab:81:ce:29:43:1f:08:ee:5e:f2:f5:
                    82:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6D:DF:E6:5D:E5:FE:48:21:FC:29:F4:17:78:8C:BF:CF:19:E6:25
            X509v3 Authority Key Identifier:
                keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c3:7a:6c:3f:88:f5:35:44:a1:59:c4:91:4f:9e:01:ab:27:
         1e:f7:25:37:36:a1:3d:c4:45:12:7b:6d:66:9a:d2:e5:9e:58:
         bd:e7:1e:cd:05:4e:1e:72:98:c7:01:7a:ef:0d:c5:df:14:5f:
         f4:bf:d9:90:93:dd:35:0f:18:bc:b1:52:04:7e:76:ba:b1:77:
         98:7b:c1:4e:f0:53:99:dc:57:bc:48:21:51:19:81:f4:04:40:
         1e:58:42:17:6a:74:71:78:39:03:60:ac:be:3a:a6:c1:9b:32:
         40:b3:8b:70:26:de:70:f9:10:3f:59:37:10:0a:b0:de:e1:a4:
         85:dd:83:a0:74:ac:86:07:eb:ad:e6:20:00:09:b4:f4:af:12:
         db:53:9f:40:a5:28:72:36:d2:6b:f7:a2:b3:93:a4:aa:4b:41:
         be:c2:0b:bd:a5:81:b5:4c:f6:f5:34:3f:09:fa:18:6c:e3:d5:
         be:70:71:07:63:1e:25:65:66:36:d4:f7:97:f2:a6:34:82:a2:
         ed:77:cd:da:2c:9f:09:9d:4d:a4:c4:fc:26:b3:df:15:c6:e3:
         7f:c8:f0:92:05:5b:db:e4:0a:67:25:45:d5:4a:1e:47:7c:ca:
         31:9f:23:99:08:4b:d9:5e:12:bc:3d:95:8c:6b:3d:65:d8:9e:
         f6:f1:68:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----