Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File:                     h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier:          YM7cibdY6ZfSeAA09q0sb0lml+l2jV5S7iDtix4/zk0=
Subject key identifier:   A4:8E:28:D1:5A:42:5D:0B:42:B3:C4:32:14:7F:49:DA:C9:A3:B4:47
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer:       /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial:       01962FAB23084229C9BB102B6DB9CF1205D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: FsLVTd1Z_Y1_QKD3XsSC6T-7WSc.roa (hash: MfqtShshWzvZLLqxVYU/rnjLf5/rPRnD2xrlVc90HQU=)
                          2: O26SvIi-iLlAArpGPoL_kcRMLz8.roa (hash: x6EwUP7G9se/ub/wgAs57oTYgG0nrtLTkuveOv5jyO4=)
                          3: eXFZQO35x46hI1_B-kM0oX7ba3w.roa (hash: IKEAMPDMrBLKazuRwlONi5mwZJ2E45qg/Wd4/iF4QYg=)
                          4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: 1s3heUgwQfvWdPCjEQXBta1s+9JW2+P5aA9l0xhD9IQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:23:08:42:29:c9:bb:10:2b:6d:b9:cf:12:05:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=a48e28d15a425d0b42b3c432147f49dac9a3b447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:d4:63:e7:3e:14:83:7f:37:ab:38:cf:ba:
                    24:02:f7:61:62:4d:11:8d:f4:60:4b:24:d6:14:9c:
                    d6:c5:c0:13:a4:ab:b2:43:97:31:6a:09:42:c4:e7:
                    33:f0:cf:16:d2:d0:c3:10:0a:9b:b0:92:86:01:19:
                    14:cd:2f:be:88:22:98:58:8d:d4:b1:23:ea:84:b1:
                    5c:11:21:c1:19:c4:06:b5:eb:91:1d:3c:61:3f:75:
                    93:80:cc:b7:c8:ba:26:21:a0:7f:fa:b4:0a:00:e5:
                    6a:2f:77:20:24:c6:4e:01:d8:1d:62:b1:01:88:5c:
                    dd:da:b9:3b:1f:ce:ad:40:d0:c8:4a:7f:34:fb:8c:
                    30:22:a5:fc:04:d5:62:84:1c:25:f5:74:3a:c7:9e:
                    7f:8f:33:5d:40:cc:e6:b4:15:f8:7e:74:d5:5b:97:
                    18:18:f1:23:2e:f4:b2:1d:d3:0c:62:31:f8:ad:3b:
                    d2:2d:7e:c3:71:ac:f4:a3:8d:18:65:6f:b9:31:87:
                    c1:ff:f1:1a:56:10:54:03:84:e7:04:e7:86:76:af:
                    a4:4b:6e:ec:47:09:16:5d:d0:81:ad:b0:47:5a:40:
                    43:29:78:4a:85:5d:8f:a7:9b:0f:9c:84:c8:f9:6f:
                    a1:ae:1f:25:2d:0e:b8:97:bc:d5:da:1e:95:df:d5:
                    99:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8E:28:D1:5A:42:5D:0B:42:B3:C4:32:14:7F:49:DA:C9:A3:B4:47
            X509v3 Authority Key Identifier:
                keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:69:e6:d4:d4:be:74:28:6c:35:51:f4:a9:7d:21:89:7c:cd:
         73:e3:75:40:25:94:43:a1:c1:77:30:a1:e4:ad:6a:2a:6d:4d:
         7e:f3:1f:16:ad:44:47:91:11:5a:ba:c4:6a:d2:ca:b7:d0:66:
         3e:76:a5:f1:bf:d0:1d:6e:d3:ba:4e:4b:4c:5a:82:42:8e:f4:
         a3:22:89:61:e9:a1:96:fe:d1:3e:20:a0:53:05:5d:fd:63:2c:
         72:d7:a4:64:e5:f9:ac:d2:52:25:0e:ea:2a:1f:f1:ff:45:73:
         e5:cd:71:ed:74:2d:be:34:ae:21:29:7d:b9:a7:99:dd:7a:08:
         78:87:4c:ed:37:05:5c:d5:9c:bc:04:d2:b5:9c:5c:e7:88:e0:
         5c:0f:a0:05:69:41:15:50:78:1f:c5:37:c4:ef:df:f1:9c:ee:
         7e:3c:a0:d1:0e:a8:1d:cc:ca:21:bf:36:e9:41:cd:9e:80:2d:
         a6:88:99:17:9e:9f:f4:e5:be:f0:66:3e:89:71:38:a4:e0:78:
         d6:e7:77:a7:cc:48:60:17:4b:62:4b:2b:30:8f:f5:21:79:cc:
         19:61:e3:11:bf:11:5b:af:a0:5f:92:8c:4c:be:64:28:64:f3:
         90:4f:e6:d6:08:ac:b6:e9:99:f5:3a:b0:17:02:1a:a7:6a:dc:
         96:53:ed:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----