Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
File:                     MJAbMGF-hmq8nOULrb6IRl048Dc.mft (raw, json)
Hash identifier:          7J4m8Tr0wQuX45ydwADYheaq32r5RZN2O9D8T7id23g=
Subject key identifier:   FD:AE:8F:12:C3:DC:BA:41:24:CF:CB:EC:11:D9:9D:AB:B1:6D:E8:76
Authority key identifier: 30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
Certificate issuer:       /CN=30901b30617e866abc9ce50badbe88465d38f037
Certificate serial:       01962E61710631D72EEA38C0E6423969745C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
Manifest number:          0389
Signing time:             Sun 13 Apr 2025 09:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 09:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 09:00:59 +0000
Files and hashes:         1: 2qX7OdgapT1BAlqvcn-h20H3SjY.roa (hash: mYdYSfl5U26j0DpruXdVtTOn2QH2B7ImuHJ/Oabup60=)
                          2: MJAbMGF-hmq8nOULrb6IRl048Dc.crl (hash: 5qmfJwI4jZMsiKzre697PzJBmhGmoTqYT3ot3+vd9TU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:71:06:31:d7:2e:ea:38:c0:e6:42:39:69:74:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30901b30617e866abc9ce50badbe88465d38f037
        Validity
            Not Before: Apr 13 09:00:59 2025 GMT
            Not After : Apr 14 09:00:59 2025 GMT
        Subject: CN=fdae8f12c3dcba4124cfcbec11d99dabb16de876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:7f:af:dc:79:b9:74:00:35:96:2a:26:de:
                    f6:79:bb:9b:28:cd:03:f6:b6:8e:88:19:2e:c8:67:
                    77:59:fa:de:e6:1d:e1:a4:db:46:eb:a5:3d:94:c7:
                    5d:07:81:a6:4a:eb:1b:4b:42:c0:47:fe:dc:cc:30:
                    3a:c6:83:7d:9a:01:93:30:16:7c:0a:15:94:1f:cb:
                    67:21:66:38:a2:a6:ae:4e:cc:d6:7f:9c:00:bc:bc:
                    6e:7c:09:c3:66:3d:1c:d3:e4:58:64:78:d2:d1:9d:
                    ff:4e:83:b8:f4:14:f5:fe:6f:05:45:ba:45:0c:1f:
                    76:f8:f5:15:65:d1:20:d4:3f:c9:2d:95:13:29:fb:
                    db:59:f0:ce:57:e1:9c:82:5b:4c:c9:fa:e5:ec:90:
                    1a:44:c0:09:24:c4:14:88:98:2f:3c:29:48:e9:11:
                    18:98:a4:97:bf:17:64:68:7a:5c:18:7c:d9:ef:ba:
                    06:ed:50:ad:06:d9:9a:8c:a8:f7:89:f8:1d:95:07:
                    1d:06:a8:56:eb:fa:e6:ee:53:4d:50:20:71:e1:04:
                    09:fb:cf:35:64:9c:d5:12:3b:11:4e:ab:aa:23:f4:
                    46:f8:e7:08:85:b0:de:e0:73:09:69:e4:9c:0d:25:
                    7b:32:fd:a0:a6:86:4f:ae:2e:cd:60:50:9e:27:f4:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AE:8F:12:C3:DC:BA:41:24:CF:CB:EC:11:D9:9D:AB:B1:6D:E8:76
            X509v3 Authority Key Identifier:
                keyid:30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:ac:c3:26:b4:f1:f6:e4:57:47:5d:eb:d6:9d:ec:9e:e8:c8:
         cd:31:b9:c5:d2:90:20:aa:b7:a9:a8:36:77:a5:99:cb:6e:f9:
         10:bc:cf:99:70:af:df:4f:26:0e:c3:a8:2d:ed:f7:d9:5d:5d:
         05:e7:ea:29:d7:eb:cb:36:70:42:8e:07:b9:d5:25:9f:0a:96:
         7b:9c:d7:37:32:88:95:1c:01:0e:4e:8b:6c:5f:f0:1f:c7:c2:
         7a:79:4d:f7:9b:73:af:87:03:29:66:16:5d:bb:44:93:d7:cf:
         5b:d6:00:42:a5:40:dc:62:4c:92:be:9e:75:c5:e4:68:44:b0:
         06:9f:d2:ed:b1:4d:5f:82:d8:75:7d:1c:a0:91:bb:a6:03:cd:
         d0:81:17:10:21:cd:84:a1:37:ec:7d:c2:10:ee:33:b7:ad:5e:
         47:fc:97:b3:97:5d:b9:b4:b6:06:0e:b3:29:07:23:24:f6:01:
         4c:5f:8b:53:c1:b3:52:4b:df:41:3e:6b:0d:17:cd:27:9a:51:
         63:d9:ac:81:b0:e7:4b:a9:06:d1:0c:cf:71:80:ff:85:55:80:
         d2:34:9f:db:e1:44:78:47:d3:25:8e:2b:f5:21:9e:30:49:0b:
         4b:b8:05:44:e8:b6:77:ac:7f:5f:28:0d:11:53:29:91:14:dc:
         eb:72:7c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----