Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File:                     MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier:          BeSaMBo9LcOzbxpo01BukEo0MdT3w+EtWVyNr8MVKC4=
Subject key identifier:   ED:F5:37:3B:AD:2F:D3:99:38:CC:8C:15:8F:98:2B:8B:55:C5:37:C5
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer:       /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial:       01962F0697EE1A616793F0B8B26FEC059F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number:          1214
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: 9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa (hash: /I1wfagsAtpLvGcRUkgr5rbaITh/yY12WpQcMZ73aQ0=)
                          2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: K0HBcExDdcM1X6vAlx/7K9h0Fc7pKYQWSoLZ7sg+TsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:97:ee:1a:61:67:93:f0:b8:b2:6f:ec:05:9f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=edf5373bad2fd39938cc8c158f982b8b55c537c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b1:c0:fd:a2:83:f9:5a:c8:c4:b1:e5:9b:a9:
                    db:18:cf:05:9e:c4:3d:ab:2b:2c:e3:bc:fb:32:1d:
                    11:a6:2a:e1:0f:3d:59:69:2e:00:65:d6:26:59:33:
                    04:de:ad:48:fb:a4:57:1e:9f:fd:40:28:9d:c4:0c:
                    c8:8c:a2:97:37:55:ed:67:10:2a:6d:a0:5c:9d:fe:
                    76:22:d6:af:4f:7b:2b:6e:9d:e7:be:da:1d:0e:4c:
                    84:32:c6:27:1b:d0:48:1c:39:e3:5b:b0:65:73:7d:
                    7c:f4:89:8d:82:30:33:6e:d6:ce:9e:53:5f:10:e9:
                    54:db:b1:b6:62:78:36:0f:90:98:2a:c3:23:19:dd:
                    7b:61:bb:a0:a4:2a:20:07:90:f7:d1:39:e7:5d:7b:
                    fb:17:86:5c:0c:6e:ef:2a:a4:53:89:a3:e1:7c:82:
                    e1:ec:fa:13:af:06:bd:c1:58:3e:94:aa:1f:6a:94:
                    32:6f:89:4b:1a:9b:b7:63:68:d6:9d:31:71:be:0e:
                    41:a6:6e:dd:4e:d1:1d:20:1a:92:3e:0a:04:38:6b:
                    b2:6e:35:f8:8f:b6:84:10:3d:67:b6:cf:43:3f:5b:
                    84:ef:fb:6a:fd:31:00:61:32:e4:3d:3b:48:7a:86:
                    fd:ed:97:18:ba:f0:72:3a:25:95:9c:0e:42:46:8d:
                    77:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F5:37:3B:AD:2F:D3:99:38:CC:8C:15:8F:98:2B:8B:55:C5:37:C5
            X509v3 Authority Key Identifier:
                keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a8:83:dd:4c:13:b8:3b:da:f8:d8:e8:eb:76:6e:42:64:f5:
         34:f1:8e:9f:89:83:a1:2c:ea:89:2b:bd:73:ce:73:c7:38:db:
         5e:14:a1:1f:8b:06:ac:de:2b:bd:19:75:57:8e:05:34:63:e7:
         6f:ec:5d:cc:42:6e:ba:9a:99:32:30:38:0f:64:cf:28:99:43:
         da:21:65:32:75:19:44:c6:10:ab:2f:3e:ee:00:c0:c1:2d:a4:
         7c:cd:10:9b:aa:db:f5:4f:ca:8d:24:c8:99:8d:27:88:d3:77:
         34:06:e2:35:e5:96:bf:4c:95:d7:f0:72:81:d5:81:0e:4a:9a:
         90:fa:81:6f:cb:1c:96:fb:a7:16:c4:57:1e:88:91:c2:d8:5b:
         4c:f3:08:03:f0:90:55:54:38:50:da:78:7f:1b:5e:17:ea:7e:
         23:30:2c:71:39:2d:55:74:ea:b2:19:61:55:a6:08:e4:14:ff:
         94:b2:41:19:2b:16:b1:8d:6b:73:46:0f:61:8d:11:ee:a4:dc:
         55:35:c4:c0:ec:35:06:fe:35:2a:4c:4e:fc:45:3d:73:66:53:
         6f:ba:0b:36:68:27:ed:83:22:1f:98:80:46:25:60:92:42:15:
         b2:eb:bf:40:a8:0a:20:74:8f:f4:6a:c1:03:06:d8:a1:fc:a3:
         ac:f6:eb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----