Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File:                     MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier:          YBkiwuWiQKgaOHnLZfJwn9YAf5WWkvtUHrv38tJRecc=
Subject key identifier:   96:F8:F5:BD:17:1E:3F:3A:66:D0:BB:2D:44:F2:BD:E0:8D:A3:40:13
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer:       /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial:       01962E2AEA33FDFC5371330418BDE73E83A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number:          1288
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: LZ8uAkntmN0c-t2Y6sQNZXRHvWc.roa (hash: pnKmEkhVyamHT8q5re1u8FHw0CqLvJSlSrJsXdTnczY=)
                          2: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: L8WcqK6HFIOviR8G0WJIp+Oj9qAy2J4DT2oarwli0Dg=)
                          3: RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa (hash: mxQ53KQYRRHLBJuqI/DtJ482oAxxveSfP/pLhygbyl4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ea:33:fd:fc:53:71:33:04:18:bd:e7:3e:83:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=96f8f5bd171e3f3a66d0bb2d44f2bde08da34013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:28:46:3a:1f:fd:88:e2:71:dc:81:ce:0a:
                    86:81:4c:67:27:c3:b6:e8:40:c6:9a:ed:ef:f6:d3:
                    e0:f0:8b:88:8f:51:a8:36:22:80:d5:51:a8:b8:78:
                    47:c1:16:1b:fc:56:fa:89:11:f1:37:c5:12:09:4a:
                    6a:1d:8d:12:89:21:63:72:ad:58:6d:78:99:19:a5:
                    8a:e8:3d:c0:21:93:32:91:ba:58:bf:55:88:16:e1:
                    b9:e4:3e:2a:15:0e:7b:df:6f:ea:aa:18:f6:9d:3a:
                    d4:5d:a8:27:1d:bf:5c:45:57:c0:62:5c:f0:0d:d9:
                    a9:0f:98:0c:5a:6e:37:0d:aa:4d:c3:e2:34:e3:8a:
                    b5:4f:16:0c:fa:34:34:8c:86:9d:b8:c7:b8:ce:fb:
                    65:ba:37:7f:17:6f:cd:60:d4:5d:9b:07:00:58:c7:
                    1a:e2:a8:8b:0c:c1:0a:87:1d:9e:ad:43:15:8a:42:
                    10:7e:89:59:ff:ab:75:46:d8:a1:af:72:b7:80:02:
                    72:65:4a:ca:e4:df:30:d7:2d:14:42:af:99:7f:8d:
                    c9:e0:d0:bb:a1:17:70:5e:d3:b9:7d:c6:03:fc:94:
                    7f:e6:68:18:85:1e:3a:6a:ce:d3:2a:eb:5c:16:f8:
                    cc:e4:d5:36:c9:7c:20:9a:c7:bf:e1:d9:00:6c:26:
                    cf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F8:F5:BD:17:1E:3F:3A:66:D0:BB:2D:44:F2:BD:E0:8D:A3:40:13
            X509v3 Authority Key Identifier:
                keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:52:19:85:68:d8:58:f3:70:c6:8f:43:b4:05:12:cc:9f:44:
         e8:34:77:e4:65:b1:a1:30:5c:7b:d3:9c:b7:26:49:9f:b6:0d:
         cd:4f:13:ac:28:5b:8f:f6:8b:0f:ad:06:b7:85:c1:02:d7:db:
         ac:04:12:a5:e5:02:68:ff:70:48:4b:96:e3:b5:35:97:1b:d2:
         01:6c:f1:71:9b:4c:f3:24:fd:58:4f:e4:0e:06:46:af:df:a3:
         5f:7c:f9:a9:37:98:97:ac:fa:49:5e:2b:2a:ad:0f:3a:ac:18:
         eb:df:7a:00:fc:59:de:af:17:60:be:40:94:6d:5a:e4:0e:6c:
         fc:9c:ca:79:9b:4c:76:53:86:13:57:ad:bc:21:fb:24:2d:8e:
         25:1f:cd:4d:9a:d1:10:41:33:80:e2:d1:a1:79:cc:db:ec:bf:
         80:ef:aa:dd:cc:84:f2:3e:0c:a3:03:f1:e0:71:4e:79:45:39:
         d9:24:0d:89:7c:52:84:a0:cc:f4:18:b9:01:5a:27:c9:12:0b:
         d7:6f:4a:fb:a0:5a:3a:0c:74:f6:18:eb:cf:7f:f2:09:ac:6d:
         04:94:8e:0d:a4:e6:9e:c6:27:7c:f5:a7:42:06:60:1f:94:0c:
         5e:d8:2a:c6:26:c7:1e:db:aa:73:0e:af:ce:1c:73:f6:56:bb:
         7d:f2:6c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----