Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
File:                     Mo1NdPJBWjV_502-BA8BVPHaz3w.mft (raw, json)
Hash identifier:          So8AfQzck4yToEBnTujYXcqyXem716LMB3/M3kjxkfQ=
Subject key identifier:   BF:7C:4C:1F:29:87:C9:C4:55:4F:D0:83:6D:1C:4A:D8:90:92:53:5E
Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Certificate issuer:       /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Certificate serial:       01962E99597C662E41F0DCC3018AE70E7DF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
Manifest number:          086A
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa (hash: HOWSSaTxDqgiwOmso54SMRF/DSbrMg9/uUoQhZYJC/c=)
                          2: Mo1NdPJBWjV_502-BA8BVPHaz3w.crl (hash: u069L6TgePmYCpoDLanCAph6eem5fV98vCINUdivi6k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:59:7c:66:2e:41:f0:dc:c3:01:8a:e7:0e:7d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=bf7c4c1f2987c9c4554fd0836d1c4ad89092535e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:5a:d7:9a:99:c2:48:87:82:b7:aa:c7:9d:
                    99:e8:74:4b:11:5a:84:52:d4:71:33:48:da:57:8b:
                    fa:e4:5a:d2:d7:68:59:a0:c8:b4:57:b8:e5:d1:44:
                    72:ca:f1:92:30:8c:e4:b7:b0:3e:4b:d1:c9:13:b9:
                    d0:52:87:54:e8:8c:1c:ba:d8:6c:65:77:c2:ea:d6:
                    d9:9f:06:61:52:28:e0:76:5b:c0:45:39:fe:b9:90:
                    52:f4:87:74:18:6f:1d:4a:2b:1f:a0:88:36:02:38:
                    69:ad:72:45:c1:a5:45:96:bb:a8:85:e1:20:9d:7e:
                    01:2c:8d:ff:58:ba:56:a6:65:1a:f5:25:d9:0a:d7:
                    4c:d6:31:74:49:6a:45:d0:d9:d1:02:a2:70:62:f5:
                    24:98:72:ff:ae:ce:76:37:e4:f3:15:ff:50:3e:99:
                    9a:33:14:8b:e4:ca:a2:57:b7:3d:99:c9:9d:5a:31:
                    a9:32:f6:3a:12:1a:6c:92:03:b1:20:32:75:99:35:
                    27:8b:8a:5d:4f:42:4e:1c:a0:67:f6:69:fd:c5:35:
                    28:95:f9:ec:5c:d7:51:d6:94:17:04:e3:c5:b0:2d:
                    a5:f1:49:38:f6:21:64:49:0b:c2:d2:a0:6e:fb:a8:
                    8c:b6:a9:44:44:01:ab:02:be:1a:2d:47:d1:22:cb:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7C:4C:1F:29:87:C9:C4:55:4F:D0:83:6D:1C:4A:D8:90:92:53:5E
            X509v3 Authority Key Identifier:
                keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:91:97:ea:e3:14:63:2c:71:92:29:0e:cd:0b:41:ac:62:ab:
         97:b5:ac:4d:6d:6b:cb:cf:f0:a8:bc:a6:7d:e4:c4:6a:06:70:
         d1:80:a0:d6:54:d6:25:9e:45:f0:20:23:a8:84:e1:e5:74:8e:
         7d:98:34:97:86:cc:76:35:f1:fd:27:76:73:66:57:1f:0e:e5:
         87:eb:d7:41:ae:63:a1:0f:5e:0e:f3:18:e8:88:aa:65:d7:e7:
         41:49:c6:fb:25:37:b1:91:94:7c:a6:ef:1d:08:38:ec:b9:7f:
         0e:cd:b3:b4:7f:a3:2d:16:9a:ac:5d:0e:3e:7a:fc:4a:2f:2b:
         f8:01:d2:f5:81:f3:b3:78:63:45:01:f1:ce:7b:e6:de:c1:56:
         02:7f:28:95:03:bf:28:7a:13:40:d5:cc:2b:8d:c2:e6:57:66:
         39:39:6e:a3:8c:20:93:81:38:6e:92:de:a4:6c:68:2c:a3:5c:
         74:5d:fa:11:32:2f:1b:47:20:98:5b:b9:83:1c:63:ab:36:43:
         54:28:9e:ed:a6:90:3d:0f:83:84:1a:83:b6:d5:57:ea:78:d9:
         da:64:90:ab:65:58:30:b1:dc:0d:5d:44:8d:54:f0:39:1f:b6:
         32:c6:2d:d3:cf:72:83:52:47:e4:74:54:bf:c9:72:07:5e:5a:
         cc:e2:46:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----