Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File:                     B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier:          h9LRe75CAY9j/JGWbpIU9Qi2Z1n9BY09tjuwkc6yrdY=
Subject key identifier:   1F:2B:D7:70:2A:8E:0E:5F:F4:C1:0A:03:E5:A8:EC:34:AB:3D:0A:27
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer:       /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial:       01962F067C310E220DD7F9D4283C1B07F9E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: a3l9vtKA84yrmpZPUjkDyzGtDO6YPtF0+T/Xx0vs6vQ=)
                          2: HNB1sDrF9WUErSCuLUa0aVt_L3Y.roa (hash: EEUhMDLd8LaCLpdh0d8yAfmLAD7g/8SwACNlTGSymQI=)
                          3: cGnWsTG6_HuBPIKsK-FAxem4vS0.roa (hash: PlfTsNs/Znlb07VC2B9dZOKYLjXkQ4SWFGFGxZnDFiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7c:31:0e:22:0d:d7:f9:d4:28:3c:1b:07:f9:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=1f2bd7702a8e0e5ff4c10a03e5a8ec34ab3d0a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:63:1b:e5:38:3b:c3:52:7f:d8:e8:42:aa:e0:
                    a8:31:d6:7a:ca:9f:7e:a9:3b:6a:cb:35:28:c2:02:
                    31:aa:36:e9:65:cd:3f:db:ad:27:b4:a4:4f:b1:c9:
                    57:3e:60:d9:bd:14:ca:eb:82:a8:66:13:84:53:e1:
                    c1:d1:0b:ea:7c:cd:22:e1:9f:56:1f:36:7a:f0:58:
                    9d:f8:83:9d:95:a5:67:8c:6e:d9:0d:0e:1d:d4:da:
                    19:e2:34:3e:14:f7:44:ef:4a:78:85:04:74:11:a5:
                    48:db:e5:f5:e4:8f:fe:d7:5c:fb:e6:9b:b7:3d:1c:
                    ab:33:49:b1:44:62:cd:92:14:3b:75:78:59:12:7e:
                    ec:21:d6:ed:2b:b5:91:c0:39:df:16:a5:85:50:c0:
                    c1:fc:f7:f5:5a:2f:03:60:88:4d:1e:bb:07:f2:a9:
                    40:1a:ea:73:f4:4c:84:2e:dd:43:ef:88:cb:07:81:
                    c7:91:77:6d:11:b6:8f:0e:07:3d:8b:f9:f7:d4:f0:
                    37:51:b7:33:38:9c:58:eb:44:1e:f1:9e:ad:d5:95:
                    c2:52:e1:9f:6e:61:86:87:df:1d:5d:88:10:9d:67:
                    e8:ec:28:5f:b1:6b:cc:fb:d6:01:95:4c:ec:5c:49:
                    2b:12:90:5c:9a:3a:65:29:67:c9:65:4a:a4:90:83:
                    70:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2B:D7:70:2A:8E:0E:5F:F4:C1:0A:03:E5:A8:EC:34:AB:3D:0A:27
            X509v3 Authority Key Identifier:
                keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:96:49:88:ad:a5:c0:7b:20:e1:03:95:86:f2:35:04:4b:32:
         62:b0:b8:5d:80:fd:be:5b:83:66:ff:7f:9a:dd:6a:c8:c7:e8:
         d9:59:bf:38:bf:7f:4a:fd:3e:ea:6a:d3:22:31:67:6e:31:6b:
         ea:c5:60:73:01:ef:d6:64:be:bb:bc:52:10:4f:b1:db:9c:f6:
         37:06:5c:ba:8b:63:1a:85:f2:4d:b4:dc:3b:30:a5:f1:ef:93:
         98:41:a8:3d:86:9e:51:98:b4:49:7b:14:d7:04:f9:61:dc:9f:
         9f:dd:02:bc:f9:e6:70:ab:44:2a:88:da:69:97:6d:d9:d6:fd:
         6b:5c:ff:02:32:bb:81:8f:81:0e:bd:6f:81:84:22:b5:64:49:
         27:58:15:dc:a8:3d:61:3d:85:a1:13:5a:99:4b:c9:60:e0:80:
         07:d1:f1:5d:a6:8f:45:39:38:fc:de:1b:d0:36:d8:90:c1:05:
         b9:42:70:a9:e6:b7:9b:4a:69:08:c2:4a:82:2f:aa:cd:30:64:
         90:05:b5:ff:cc:d4:f3:89:9d:a8:81:ab:8e:b9:75:39:93:58:
         3c:55:ea:be:ae:73:ef:e2:0f:c3:dc:4f:84:5f:5f:14:b0:85:
         8d:11:a6:a8:3c:08:ba:ed:90:e6:15:f8:51:68:66:38:0a:6b:
         35:3c:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----