Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
File:                     r633xfgtvAsdujKChi1T7Ih9XGY.mft (raw, json)
Hash identifier:          QwoxRNZfYKOSdHM04X/Uv21IBKP/hlfmhyJ7ZsgNzzA=
Subject key identifier:   C8:91:29:D2:C9:3A:65:80:71:8F:F8:4C:0C:0D:47:D6:52:54:34:6B
Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
Certificate issuer:       /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Certificate serial:       01962E98D503CE96B645C55BEACBC71867D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: G_uyP800qF9xq38CufvzcASfUJk.roa (hash: wXXcLrJ9H/mm6fOwDIgDVncWMj2oRMLhDL41bJPAtPA=)
                          2: r633xfgtvAsdujKChi1T7Ih9XGY.crl (hash: Xhvk8P6jltoSQKf/mvOpvA3c5Xu+GLih/JONCYO61UE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d5:03:ce:96:b6:45:c5:5b:ea:cb:c7:18:67:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=c89129d2c93a6580718ff84c0c0d47d65254346b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:42:e1:31:17:b5:51:79:71:52:0a:aa:b2:e2:
                    39:a7:9f:1d:12:01:79:31:79:a0:09:6b:a2:65:55:
                    6d:13:ea:df:b7:91:49:28:c5:7d:db:04:e1:d6:4d:
                    0b:ec:d2:95:bd:e1:dd:61:34:3c:64:9c:d8:9e:ea:
                    2f:36:72:91:39:71:87:67:29:c5:4f:55:20:8c:a8:
                    c9:8f:4f:2d:9e:95:3f:92:94:ad:0a:1d:d6:bc:66:
                    43:d0:d5:e2:20:e6:4c:49:8e:42:e6:7c:d8:ff:74:
                    61:75:32:1e:67:1c:e3:ad:53:85:ca:b9:09:fd:cb:
                    eb:48:ae:d1:ba:07:eb:ce:63:38:8f:01:28:cd:d5:
                    f1:b5:3a:1d:01:7b:d0:f3:75:54:99:82:69:9a:52:
                    f0:d5:dd:b5:a5:96:91:a9:fb:60:24:fd:b3:31:a2:
                    e4:35:fb:b4:71:2e:9e:30:57:fa:ca:0b:1f:fd:be:
                    d4:6c:70:e7:c0:ce:31:2d:a8:b9:c9:46:58:42:89:
                    a7:03:4d:04:86:f6:e6:dc:7f:33:2f:e3:69:cf:e6:
                    db:a0:ec:09:1e:53:38:b6:36:80:55:56:59:e2:65:
                    38:ad:a7:53:ec:ed:24:45:86:38:36:32:4b:d3:a7:
                    16:52:c6:0a:fd:93:f4:8c:c9:9f:0b:bd:fe:da:de:
                    9f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:91:29:D2:C9:3A:65:80:71:8F:F8:4C:0C:0D:47:D6:52:54:34:6B
            X509v3 Authority Key Identifier:
                keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:df:7d:f7:e1:fe:2a:9d:aa:7f:47:ed:1c:ae:71:16:75:f2:
         55:6e:92:ee:e1:7d:7b:85:b8:4b:c1:54:06:5c:b6:a5:a9:4e:
         b4:54:06:34:7e:bd:8c:81:05:2f:55:19:ec:7e:8f:11:a0:10:
         1f:42:ac:9b:f6:52:53:b0:33:72:a2:30:89:a9:ef:52:57:f5:
         5c:0d:64:00:3f:99:1b:d2:03:1f:50:aa:76:b1:df:be:8f:1e:
         7c:1c:27:69:6f:ed:c0:af:4f:83:52:c1:91:b1:73:ad:51:dd:
         4e:aa:ed:29:d7:2e:ea:2d:18:e8:27:41:22:3d:db:55:55:dc:
         9b:16:13:a0:67:de:6f:99:11:f3:52:94:5e:d2:59:b3:c3:3b:
         f6:06:ea:85:62:2d:e6:b4:f6:d4:49:a7:01:7b:2c:54:a0:34:
         d7:12:71:cb:3f:a2:a9:e8:09:59:2a:2c:1f:b2:18:6b:4e:d3:
         76:ce:1c:4e:77:11:ac:ae:13:33:7b:b3:3c:f8:e8:b2:9b:8c:
         f8:74:87:94:52:01:df:0c:bf:cf:6d:23:09:7b:62:d4:a2:09:
         50:fd:66:78:49:f2:71:04:ac:db:e9:06:96:6b:5e:95:68:08:
         21:62:ab:3b:2d:8f:76:a9:83:b1:72:90:8e:bc:2e:22:87:4a:
         71:99:18:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----