Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
File:                     r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json)
Hash identifier:          BlH0Fe0lBkDCqjXHp+j+05EDo8JKWHNK+Gfn23jUUxE=
Subject key identifier:   CD:99:C2:3E:6B:33:17:B2:EB:25:13:C0:42:56:E0:0D:61:F4:FB:F5
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Certificate issuer:       /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial:       01962E99941EA7D1AF675BDBF8E87DA2ECEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
Manifest number:          0FAB
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: H4Dt1RaXNjrSuf7dIzKd6HI74Xw.roa (hash: 1FMAIN7AWHSRrarcSi8q0q/CcQ+uq+tcfRyHiGa5Hko=)
                          2: kemSd2KPq5UUT0EZWa92ek2Cwpc.roa (hash: kh0wd5NltixPwrZZXBgelPgGkebz79/WC48Vz4n628s=)
                          3: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: cdE9JQdSH47OFZ1yapLYO/u7Zza8OKf90dbm3Cv24HM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:94:1e:a7:d1:af:67:5b:db:f8:e8:7d:a2:ec:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=cd99c23e6b3317b2eb2513c04256e00d61f4fbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a6:3f:05:b3:9f:e6:3f:0c:82:4d:95:26:27:
                    b2:f7:02:20:01:c5:c5:31:62:6e:da:39:d4:d2:2d:
                    fa:ea:03:91:db:28:9e:22:04:28:59:5d:14:35:3d:
                    ba:0a:1e:e8:91:2a:bf:5a:3b:02:21:e8:4b:63:6c:
                    7a:18:0f:c5:6e:2f:93:67:ed:cc:76:d3:ad:cf:91:
                    6d:60:83:2d:fd:c9:05:28:69:a5:3f:81:43:20:61:
                    b5:1a:d3:20:47:af:b9:9e:f0:b0:5b:42:4b:69:a8:
                    da:7a:5d:75:e9:de:80:c5:36:6e:0c:9d:4e:eb:88:
                    45:31:27:5f:0a:3b:29:e8:ee:36:fb:93:05:6e:ef:
                    83:15:8e:ff:7e:50:ca:fa:88:0f:57:12:3b:5e:c4:
                    62:88:ef:03:52:66:5f:86:87:99:e3:ab:b7:b9:33:
                    bf:16:a2:1b:e9:d1:9b:4d:a8:5b:dc:10:7f:eb:80:
                    99:63:94:92:25:12:b2:47:93:c2:a5:0a:03:32:e3:
                    39:f6:11:99:95:be:7a:6b:b0:92:97:42:ff:6f:1f:
                    b7:a5:ae:05:6c:3e:4e:a3:1c:49:aa:30:67:1f:4e:
                    1a:0f:27:96:22:01:94:65:b6:04:6a:b9:86:d7:d3:
                    8f:5c:40:93:d2:18:7f:8c:bc:eb:f5:c0:9b:14:4a:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:99:C2:3E:6B:33:17:B2:EB:25:13:C0:42:56:E0:0D:61:F4:FB:F5
            X509v3 Authority Key Identifier:
                keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e4:0d:f3:d0:c3:7c:6e:fc:5b:82:29:0a:7a:6b:9b:5e:18:
         c2:03:26:e8:f3:ae:60:46:4e:1f:e5:38:3a:97:4f:d5:8d:ba:
         d2:8e:ca:ef:1f:a7:c0:73:ed:ea:0f:4a:a6:1b:d2:bd:e1:50:
         9b:2a:d3:50:53:4c:98:98:98:cc:e2:d1:b1:0d:da:22:f5:d2:
         57:6f:28:c9:23:4d:33:ce:4f:7c:b9:1b:bf:fe:e1:df:66:51:
         ce:da:4e:af:8e:b3:25:d9:3f:db:9c:86:9e:cd:1a:05:10:ca:
         de:1b:0e:f2:70:c6:2c:32:e9:ac:af:b2:70:73:ea:35:9d:b0:
         2f:28:4c:aa:cc:44:4a:15:0c:a7:55:62:ee:bb:e4:60:8d:d3:
         9c:28:84:05:77:0f:ec:e8:89:ae:14:59:b2:e0:9d:b1:f5:a0:
         71:5d:05:1a:86:34:c5:54:56:1a:27:c0:ae:04:86:91:89:a4:
         4e:86:73:ab:96:2a:95:4a:f8:8d:ce:ba:4e:79:c9:d6:93:f2:
         6c:05:75:d9:eb:9e:4a:2a:a5:c6:0c:e0:d5:8e:2b:08:d4:82:
         c5:13:d2:48:dd:db:c1:2a:fa:7c:4b:d3:18:64:a3:b5:07:a1:
         d7:39:d0:77:2d:54:93:ab:65:e0:c0:51:92:6c:c1:6b:e8:16:
         1f:48:8b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----