Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File:                     pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier:          Rjws5tI67MpiKAuFCoBgj2za0M+8u7XKmSjDT4Q9xKo=
Subject key identifier:   EA:22:A4:80:9D:F6:34:7C:E2:DD:A7:2E:BB:DB:4A:1E:06:AE:EB:6E
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer:       /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial:       01962E61C5084F3F8BB887FF6E10E2CDBDDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=)
                          2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: CFE1eQ0nIL1zwG0YHacuo1gDqxHgjfiLyYQ6cNhGC0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c5:08:4f:3f:8b:b8:87:ff:6e:10:e2:cd:bd:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=ea22a4809df6347ce2dda72ebbdb4a1e06aeeb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:08:12:e5:a9:d6:3d:96:e5:1f:59:c2:5d:fc:
                    d8:86:02:1d:ee:11:13:72:69:1e:a8:5a:f6:06:ab:
                    06:1e:a9:cc:a6:ef:e2:38:f6:fb:26:c8:fd:51:fe:
                    85:b9:2e:a7:d9:5f:52:b0:ba:d4:af:95:c3:2c:7f:
                    82:b6:72:18:03:5b:45:eb:3b:a2:86:8b:97:e3:39:
                    f9:d4:dd:46:3e:f2:d5:43:b2:0e:49:46:28:f9:ce:
                    5f:3c:58:44:5d:2a:20:84:f7:82:04:c8:bc:26:11:
                    f9:d1:59:df:3e:aa:d2:e1:b4:61:39:97:a9:a4:6a:
                    0a:8e:7a:11:67:9a:8d:ec:be:ac:cb:ce:58:90:3a:
                    54:0e:a9:23:f9:ff:8b:5c:b7:28:ce:97:4e:1a:55:
                    d9:34:35:8b:0e:53:ae:a7:c1:8d:a0:c9:fe:45:5f:
                    27:ad:57:28:eb:f1:0e:54:f8:c2:e8:30:08:ba:0d:
                    37:64:df:54:f2:88:21:39:4f:17:f7:14:bd:ba:ce:
                    1c:0f:72:f7:c8:52:ea:a0:5d:bf:6e:49:ff:22:a0:
                    24:f8:af:f0:2b:9a:c0:4f:bb:d1:4d:3e:dc:32:1c:
                    0e:ef:2e:9c:4e:da:c4:57:e4:9f:f7:91:46:71:7b:
                    4a:bd:0b:2f:46:b3:00:dc:e7:e8:5f:2a:cf:72:b7:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:22:A4:80:9D:F6:34:7C:E2:DD:A7:2E:BB:DB:4A:1E:06:AE:EB:6E
            X509v3 Authority Key Identifier:
                keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:12:dc:5b:ca:92:10:46:64:68:da:34:30:e5:66:5f:ae:78:
         6a:cc:bd:e7:c8:f8:51:23:c3:d9:b6:94:cc:4c:87:79:9d:a9:
         98:ef:97:4c:57:66:23:97:c5:dc:d4:bf:4d:7f:a9:41:67:7c:
         a6:48:62:50:b8:19:7d:91:c3:2a:ca:38:02:9d:37:cf:ef:66:
         bc:7e:cb:af:d8:d9:4d:ec:a8:b5:60:1b:d9:83:94:5b:ed:4e:
         47:e3:48:38:c7:66:51:35:4a:05:c6:46:67:6d:03:5d:bf:6f:
         5e:b2:51:f4:65:3a:a4:f7:29:5f:2e:9e:3a:28:83:b4:46:e3:
         8f:5e:a8:45:8c:bd:20:ea:40:76:99:5e:20:23:8b:ad:d4:b0:
         0c:59:04:f1:83:4d:56:bb:1a:61:3b:0f:98:8e:4a:2d:9c:62:
         d8:a6:61:7c:1b:f4:fe:cf:37:32:e3:bd:10:c4:69:1d:e3:7f:
         b3:2b:7a:07:1a:8d:ad:b9:84:f6:78:a8:d4:fe:9a:fd:9c:de:
         bc:f7:1a:a4:0c:7f:f2:43:f5:27:5a:8f:27:39:f4:b2:8d:92:
         04:ed:87:f6:11:5d:48:ad:32:b8:0d:02:44:01:82:cd:b6:39:
         41:a8:62:e9:23:03:ee:a1:13:f7:a1:54:b7:35:53:09:2e:87:
         05:7d:ec:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----