Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File:                     i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier:          IrtbSWE74BpFpNps0lEn920Ns9LH7F4uK41fuYoRor0=
Subject key identifier:   B0:97:3A:CB:B8:63:47:32:8F:EF:D1:A7:FD:11:EE:6F:56:25:75:36
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer:       /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial:       01962E61AFC662702F3E1D877B5EE7D242FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number:          120F
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: LJ7hoCqQnwfHChqeU9U8SkKdeqI.roa (hash: 8CqH09siYzyZJ5O1vmsPNnnOW14dzrYfcCdsDYcxu10=)
                          2: VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa (hash: 1ItZnIffXoYbRBfY7mSWO6cvW2p6OOPwlCKSIhvogDA=)
                          3: Zrtik5m7bnw4gbxdEJLGgHXAz9o.roa (hash: ztZ7RR7wyKUwf1RAErkEUuWfC4cJblHm2hjCh/OBgRU=)
                          4: as57UZV986n6VRNtG6RRqjdPhF4.roa (hash: bAxzeajNU06FeyC+mfOJtGJLhcgc+9AxJO6pNZ7A/CI=)
                          5: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: ZvPQP9e7ylZI1iXDMl/qGGm4DKv4e28a8Q6akg2jWe8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:af:c6:62:70:2f:3e:1d:87:7b:5e:e7:d2:42:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=b0973acbb86347328fefd1a7fd11ee6f56257536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:af:71:7c:f5:1b:11:5e:b7:cb:2e:86:1d:f1:
                    f5:0f:60:7e:41:a5:28:f5:81:88:35:bb:e3:da:5b:
                    41:f5:e7:4e:c4:7c:80:6a:17:c3:0c:bf:29:1e:60:
                    43:e1:57:2f:04:85:96:b6:9d:70:7b:5f:f5:48:c0:
                    9f:42:ab:b1:14:9b:aa:17:9b:c8:94:0d:96:21:c1:
                    9f:a8:c8:ab:5e:9d:ea:1e:f3:a7:72:f0:d8:a9:b8:
                    05:a8:e7:90:b2:fe:13:91:96:1a:fc:cf:8f:ab:37:
                    cd:40:cd:a2:f8:eb:ca:10:0c:9e:ca:e9:01:96:12:
                    4f:5b:4e:32:27:15:9a:b5:80:1b:6f:fa:60:23:ce:
                    86:19:cf:39:b6:bc:7b:d6:b0:84:28:53:f4:3d:4a:
                    65:83:cd:03:23:00:92:53:f9:2b:c0:3f:3d:0b:9a:
                    a0:c7:4a:14:c8:d3:a9:44:83:65:2a:58:a5:e0:b7:
                    0e:1f:00:a8:cb:ab:91:78:2c:64:a4:3c:f6:27:c8:
                    ad:64:d9:03:fb:f4:f9:c1:ed:ff:c5:d9:af:84:b1:
                    ee:37:e7:39:42:86:d4:e6:05:71:c1:f7:1a:d0:ed:
                    59:32:c0:73:50:8f:e4:3a:f3:50:eb:15:b3:ed:75:
                    06:bc:48:3b:6b:d4:d3:87:80:ee:1f:c7:86:86:70:
                    75:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:97:3A:CB:B8:63:47:32:8F:EF:D1:A7:FD:11:EE:6F:56:25:75:36
            X509v3 Authority Key Identifier:
                keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ff:b3:d8:2b:94:e3:f8:6d:21:67:f5:1a:b0:9a:1f:1d:af:
         90:68:40:26:6c:5f:e2:33:0e:07:ff:59:62:91:76:fa:88:00:
         68:83:cf:7b:fb:2e:7e:be:58:ef:ee:a5:05:8c:5c:9c:57:90:
         87:07:3b:ca:27:34:40:dc:fd:ea:05:c5:fc:88:b9:76:05:26:
         91:76:8b:8c:d7:26:12:7e:b8:0b:7b:90:c4:aa:a7:f8:71:5f:
         45:39:cc:e8:6d:96:eb:2f:04:1b:fd:4e:78:ee:96:22:3c:06:
         30:94:45:c2:0b:81:84:2e:e6:c7:b9:84:d6:fb:2b:90:2d:bc:
         f9:70:4b:73:af:64:aa:05:28:39:31:ff:32:23:30:44:ec:78:
         3a:dc:e4:b8:e5:5a:7e:b6:a4:3e:38:2e:9f:db:a9:70:40:1a:
         ea:e5:2f:e4:10:2c:e8:17:93:8b:4c:bd:6c:70:0e:13:98:a2:
         9a:ca:37:a7:c7:57:9d:d2:8a:5b:04:7e:fa:5a:fb:06:9c:e2:
         02:26:fe:a5:da:6f:39:c8:af:9a:6c:7f:9c:b3:a2:69:ce:37:
         47:0a:51:be:3c:5e:95:69:30:7a:3c:df:f1:12:88:fd:d1:c2:
         38:33:ef:83:d7:68:16:98:63:fb:44:6c:cb:63:f5:55:39:1e:
         c5:f8:c3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----