Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File:                     1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier:          OxKdQMBCCGIFsUIHWClei6XwHgHSR33SfGhNgumEdrc=
Subject key identifier:   4D:11:33:E5:0D:B5:D6:EA:A8:E4:C5:A4:33:76:AD:7C:39:E7:E3:4D
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer:       /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial:       01962F74C9FCFD1E1C83FCD9ED51784F7E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 0rDYOCiVnQy1wBfGsCwgf4uCy6M.roa (hash: dtebcZBA/CIRFXc0hvNHRfZk/QfKnBn3jDoKUNxXxXo=)
                          2: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: 3f+4ChYPXU4JjbObrMhRBIeuz/w8Lg16szkzgF+ibTA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c9:fc:fd:1e:1c:83:fc:d9:ed:51:78:4f:7e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=4d1133e50db5d6eaa8e4c5a43376ad7c39e7e34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:91:e8:4a:c1:ea:02:b8:f1:66:f2:3e:50:
                    8b:13:15:39:4c:4a:4b:68:84:37:c1:8b:5c:86:86:
                    9d:71:ce:3c:c1:58:28:17:eb:10:48:15:70:be:de:
                    0e:54:5f:a6:a2:39:c4:27:83:32:0e:d8:64:c3:02:
                    2f:c2:be:04:24:13:97:ad:25:24:23:2d:08:c3:eb:
                    ab:83:01:61:82:55:c6:6e:64:8e:bf:53:90:cb:12:
                    d9:f6:b0:57:68:1a:e1:18:6d:d5:67:8f:ed:3d:78:
                    68:a1:84:88:c8:2b:4a:c9:9a:6d:7c:03:f1:01:ac:
                    90:06:01:7d:ba:9f:d9:31:0a:3e:b6:cf:e2:80:2e:
                    50:5b:31:41:78:91:b3:26:b7:99:fa:1f:18:cc:17:
                    27:2d:87:7b:1b:35:8b:43:37:21:25:a0:55:a2:7f:
                    32:80:11:dc:68:f2:33:09:ee:b2:9c:9b:97:9a:17:
                    f4:4f:9b:79:ed:19:aa:b0:4b:49:b4:80:f2:4f:19:
                    bc:5a:05:c0:56:b8:79:c5:88:81:d7:04:9d:a0:6f:
                    e0:1f:22:8d:18:80:37:ec:ff:18:d3:61:1e:5b:1e:
                    65:12:54:18:3f:35:ca:29:00:27:cb:00:c9:bf:d9:
                    b9:29:c4:43:fc:a1:b3:df:72:44:57:9d:81:4d:ac:
                    ab:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:11:33:E5:0D:B5:D6:EA:A8:E4:C5:A4:33:76:AD:7C:39:E7:E3:4D
            X509v3 Authority Key Identifier:
                keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f7:71:82:e0:6f:da:c4:97:bb:09:f1:a9:f4:bf:de:9c:be:
         a6:77:56:22:8b:62:67:92:0b:bb:87:0d:d2:1b:be:38:d6:9f:
         94:3d:54:2a:3a:91:80:1c:d4:fc:2e:76:c3:0c:bd:a7:25:c1:
         8a:2b:88:c3:ef:8c:34:f2:9e:80:21:d1:76:44:8f:c4:d7:0d:
         83:20:e8:ef:d7:04:1c:4c:e4:d1:ca:32:af:1a:a2:bd:62:40:
         73:12:76:00:76:69:32:9f:af:bb:62:a4:e0:36:fe:81:7c:a2:
         1e:ce:f9:34:a8:b4:1f:bf:0e:1e:c9:3a:f2:09:25:27:4b:89:
         f3:cf:38:d1:02:54:4d:30:80:86:03:6c:66:0a:91:83:5b:8f:
         34:c2:1f:98:0f:de:9b:45:88:da:18:ce:68:09:77:42:00:3c:
         e9:79:06:40:f9:d0:35:1a:bd:bd:ce:62:b0:c2:dd:cc:46:09:
         6a:33:5d:8d:a0:a3:58:14:30:e0:5e:52:72:4c:78:39:91:ca:
         22:8e:1e:15:ea:b8:ab:be:bf:b6:7e:de:99:a2:37:77:a6:dd:
         e5:2c:a3:31:08:6e:00:d0:d7:93:25:49:e6:6c:9e:8a:d5:3b:
         f3:64:3d:a1:7a:97:00:e3:dc:73:58:c5:91:b2:31:f7:00:5c:
         3e:1f:78:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----