Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File:                     MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier:          oHenI6qOKIvgKy+Mhh7pdoVwlEUe2dzNRaUmhhvB++o=
Subject key identifier:   8C:0D:05:58:A8:74:E4:D3:4C:75:C3:F9:16:44:7D:A6:6A:BB:F5:52
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer:       /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial:       01962F06D82AB16F4D6D8EA9D66D71438F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number:          0949
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: Ly1MWymIvXOCybb36lr4yOkjsU8.roa (hash: VpBFbk8tqcALSJaD09pM7y3kJlzVLbs+HEbBlDB9T94=)
                          2: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: fYqYM/0UrgI/6DiADQ0SHvrS1MHqC8l7UiR8xvEBPGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d8:2a:b1:6f:4d:6d:8e:a9:d6:6d:71:43:8f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=8c0d0558a874e4d34c75c3f916447da66abbf552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:86:b9:f7:56:19:c5:ec:bf:43:da:99:b1:
                    bc:8b:29:09:a8:29:93:50:7b:61:90:3a:c0:ad:ad:
                    88:f9:6a:55:32:6a:ac:f3:65:5f:40:f9:f9:03:12:
                    fb:ad:e7:55:36:9b:cb:f1:f0:56:9e:62:a2:bb:97:
                    f6:f8:fe:6e:93:fe:4a:65:59:1a:8c:ab:4a:95:ca:
                    09:be:70:93:08:df:1d:3f:ea:46:17:a6:99:3f:57:
                    5c:59:04:ea:ce:d6:98:7c:27:aa:05:67:9b:3f:d6:
                    ed:8c:fb:21:54:f1:f3:06:68:ef:aa:0a:10:94:14:
                    35:9f:ca:2d:c7:66:30:a3:12:2c:24:b0:05:3b:65:
                    c5:cc:66:84:1f:25:e7:49:18:c5:81:82:b7:a2:5a:
                    cf:06:b9:81:75:64:1d:77:69:30:b0:b2:9b:74:d5:
                    a1:0d:4f:e1:7f:ac:ea:6d:6e:2e:09:5c:1e:33:90:
                    b5:66:fe:e1:65:19:28:93:97:8e:e9:f7:3e:7c:9e:
                    50:9b:81:e9:0f:87:27:2f:19:02:7b:f4:79:23:cf:
                    6c:e4:4e:53:70:a1:82:26:45:10:b0:a0:3a:52:53:
                    2a:ca:51:a4:75:c9:1c:e6:12:43:7e:34:fc:53:54:
                    fc:b9:ce:70:43:df:19:cd:54:f8:82:0c:20:eb:23:
                    b9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0D:05:58:A8:74:E4:D3:4C:75:C3:F9:16:44:7D:A6:6A:BB:F5:52
            X509v3 Authority Key Identifier:
                keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e7:85:4c:77:4d:22:05:a7:b3:76:3a:5b:2b:5e:a4:ce:e4:
         45:3d:1a:3b:cd:14:de:11:83:d5:51:59:1d:7b:34:b4:2d:ab:
         15:f6:21:f4:db:df:76:eb:dc:27:81:0f:30:3a:24:fa:f3:e8:
         3e:63:d4:f8:88:ae:ee:f5:0e:c5:9b:c6:4f:19:55:70:0e:c1:
         8e:73:86:b0:6e:7a:8b:ba:ae:15:19:5d:ca:f3:4b:d9:6b:9a:
         b0:07:8b:83:c1:e1:f4:ff:0d:c0:83:60:c9:11:df:06:76:db:
         35:e9:47:d7:69:0d:fe:08:b3:35:10:dc:62:7c:be:f2:c0:ee:
         69:f7:54:6f:27:f0:76:af:78:3a:a7:78:2a:14:7a:48:32:9d:
         81:15:82:22:7d:4d:e9:32:a3:2c:5d:e1:65:7a:90:2d:90:c4:
         96:77:6f:cd:d7:bd:7a:15:7e:77:ba:97:63:72:8b:18:49:bf:
         c8:3d:ad:2c:63:80:5e:b2:79:2c:44:03:42:0f:8e:6a:1c:cf:
         fc:c4:8d:81:18:78:05:1d:7d:70:46:2b:c8:e8:cc:ce:04:68:
         a8:dd:24:1b:e5:98:4f:82:a9:0d:a1:9a:be:f8:b1:58:ca:b4:
         ce:7f:77:7c:fe:d1:ce:38:cd:95:b7:ae:e6:65:0f:45:e1:2b:
         fc:07:6a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----