Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File:                     v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier:          NUPs32K8aryOFsJ7JmaCXmhrSw0C4UNCAlhK9ibh3uY=
Subject key identifier:   CF:66:36:5E:9C:87:69:5E:2B:B3:40:FC:D4:71:F8:0A:5A:1D:84:59
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer:       /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial:       01962F06FDAC01F31AD31D0509DE4CDE5ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: idgepXLlrREH-xoC6R-XHWqyAro.roa (hash: m88a+GTZ/SRnSaetSuTlX6BeBnowd2dvflLVRuisI/M=)
                          2: sHogSH7MHx4Qu4ypnCQXNOyx8fA.roa (hash: ptV6L9rz/SLZs+uwk6ZFS7KAyp+pD16DhDUF4x5zX1U=)
                          3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: lZPSxLv7t8XoxkwWZiS6As4eXd8Vj8Fv2cFBYi5WA4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fd:ac:01:f3:1a:d3:1d:05:09:de:4c:de:5a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=cf66365e9c87695e2bb340fcd471f80a5a1d8459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b6:d4:e5:3c:c1:5e:73:b3:98:55:3a:63:95:
                    7d:d0:8b:4b:8b:8f:1c:dd:dc:5e:da:c1:bd:47:3d:
                    07:59:32:1c:2c:3e:e1:1d:a5:9d:b5:78:10:fe:7e:
                    15:f6:87:22:a8:bd:b4:07:2c:19:df:e1:5d:f6:6b:
                    5c:65:9d:48:22:56:5e:55:1e:fc:a6:c6:18:e3:b1:
                    be:41:04:74:63:3c:3a:4e:95:6c:01:45:87:32:e4:
                    e5:ea:c9:e9:a7:5e:21:b8:98:e8:c7:0f:ad:3b:80:
                    cf:d2:40:ea:cd:1f:13:3f:d5:a4:ee:2d:e7:cf:91:
                    c8:21:1b:e3:39:5d:0f:70:ae:3e:e3:00:39:76:b5:
                    f1:aa:b4:b3:fd:71:e1:7c:23:5a:ae:18:b1:bb:de:
                    10:05:ac:e2:da:30:dc:88:6a:d4:35:f0:fb:ad:65:
                    a1:36:73:a8:f4:95:a4:d6:b2:4d:5f:73:4b:a0:71:
                    74:1a:a3:15:6c:f9:67:c2:0d:bd:0e:8c:bb:f8:f5:
                    40:40:92:02:c9:34:ed:e1:6f:7e:b7:3e:30:20:e8:
                    44:cd:a1:80:57:dc:c3:34:c6:c6:5e:14:f6:62:4b:
                    9a:cb:e2:2a:10:aa:4d:be:56:82:f2:8e:59:35:fb:
                    22:1e:e5:c6:e0:e9:22:57:70:d5:0c:2e:f5:97:67:
                    f5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:66:36:5E:9C:87:69:5E:2B:B3:40:FC:D4:71:F8:0A:5A:1D:84:59
            X509v3 Authority Key Identifier:
                keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:23:8f:0f:c7:58:f0:1c:00:ba:5b:74:ec:e4:23:1e:25:59:
         7a:fc:e8:db:f7:c0:e0:f5:a5:65:7f:43:40:71:61:a0:a4:da:
         98:2c:eb:04:f7:5a:e8:66:90:e8:a0:c7:1a:e7:4a:c9:75:cd:
         99:f4:dc:a0:b0:46:25:d3:52:e9:19:f6:f2:e4:1a:8c:88:c5:
         46:5d:3d:7d:77:f0:22:89:a9:7d:8f:78:0f:e0:30:87:d3:61:
         38:fe:b9:63:0b:14:f1:35:de:08:92:97:f7:96:82:17:3b:e0:
         02:10:68:43:bb:18:d2:36:b4:ff:e4:fc:a7:e4:12:5d:c7:a0:
         03:fb:bc:be:69:a9:46:5a:4d:b3:13:07:ae:09:e2:0d:19:c8:
         05:f2:98:9f:2d:fe:fb:bf:b5:92:e9:c0:80:e6:09:95:fa:fe:
         7f:77:68:ab:e1:29:6e:31:cd:a1:99:51:45:79:41:97:5a:ff:
         ef:22:fa:de:ed:f3:c2:2a:97:ce:57:b1:56:ed:d0:6a:05:97:
         49:06:af:bc:9e:83:78:a2:1a:a7:aa:89:5c:51:3f:2e:b6:bb:
         55:0b:07:18:f5:c2:88:9c:52:05:1e:52:6c:ff:43:cf:f8:9e:
         ed:65:fe:37:39:98:d1:30:a4:4f:6f:03:c9:ad:fd:68:fa:d7:
         59:3f:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----