Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File:                     mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier:          0IbLrDpqK4rr7BNizRtrUsL0yKCYfT32HJrToZqn77w=
Subject key identifier:   0F:C2:99:22:BB:6B:11:1C:B7:41:62:D3:A6:BC:0A:05:D7:E0:19:3C
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer:       /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial:       01962E61C01DAD4D75CEF9AA2C17FA78CE92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=)
                          2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: Kva3zux9rI172yHRZCSln4ODMJ/9Wb0tkOFPFKRZ+CE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c0:1d:ad:4d:75:ce:f9:aa:2c:17:fa:78:ce:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=0fc29922bb6b111cb74162d3a6bc0a05d7e0193c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2c:c5:8f:e2:aa:3c:33:3e:0a:4d:a6:2d:ed:
                    b7:59:46:c6:fa:3e:e7:57:17:a3:e8:d0:49:db:ef:
                    c4:c8:00:95:71:f8:ff:4a:e9:3e:77:fc:d4:5b:af:
                    ef:fb:d9:f2:a5:c1:79:c6:67:34:f8:32:51:b5:bf:
                    b5:53:bc:83:75:95:67:b3:5c:86:94:4e:a5:e3:13:
                    52:dc:e8:50:bf:9b:36:43:b5:19:3f:9e:ba:e5:6a:
                    76:8f:a7:af:77:99:78:7a:d5:7b:15:c1:37:6f:ba:
                    88:d7:6f:bf:e4:64:6b:45:b2:63:ec:06:8f:df:2c:
                    dd:b7:fe:9e:31:a3:2f:aa:c4:26:42:68:0e:e8:a5:
                    c9:fd:14:21:f5:e8:c3:f0:30:dc:81:fb:62:0e:f3:
                    33:58:c2:dc:8a:0d:8f:26:1d:06:3e:fb:38:69:d3:
                    72:ef:1f:48:ef:b8:6b:2a:de:cf:9c:1f:14:4d:d0:
                    3c:b7:a3:e0:df:39:68:6a:25:43:47:d7:d5:da:84:
                    dd:e2:b8:47:a7:67:93:6d:bf:b5:2b:35:ca:85:ff:
                    65:65:8e:dd:5c:3b:6d:07:6e:8b:c5:b5:be:1d:7a:
                    06:ec:93:59:25:24:03:b3:67:a2:9c:d0:ee:7e:92:
                    af:0a:90:b6:7d:38:d2:08:38:c4:4f:79:46:9e:87:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C2:99:22:BB:6B:11:1C:B7:41:62:D3:A6:BC:0A:05:D7:E0:19:3C
            X509v3 Authority Key Identifier:
                keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:57:59:98:90:e7:2f:a1:07:20:91:fb:ca:5b:81:05:6a:6d:
         cb:ee:42:fb:9d:99:23:71:ea:f5:4d:66:e0:6e:0f:ce:b2:95:
         45:ec:56:21:63:10:03:47:dc:99:e1:64:19:38:61:3d:20:18:
         3c:ee:4a:fd:96:be:58:86:ef:dd:66:49:07:be:25:05:75:70:
         ce:bb:7e:e1:cf:26:a4:24:cc:8a:60:46:29:d8:c6:db:e2:ac:
         b1:0c:00:ce:a4:52:e6:ce:ef:35:d3:06:57:af:87:39:4c:e5:
         77:d5:82:30:96:4e:19:ed:7d:42:97:76:bf:4f:f9:8c:c3:e4:
         43:42:a3:08:c8:8c:fe:12:0c:36:12:b1:78:33:33:f0:de:96:
         d4:e4:62:0b:e5:8d:d2:fb:bc:ed:e1:8c:70:3b:ec:a4:f1:87:
         f0:9c:2f:85:ef:0c:2b:9b:82:ca:b5:14:6c:b4:85:85:a9:93:
         fc:a5:2f:b1:42:63:f6:ff:2e:c9:c6:ca:5f:65:e8:a9:9a:bb:
         2d:c0:3e:81:c3:51:93:8b:02:34:4f:11:77:8c:25:18:7f:99:
         f6:00:68:6a:a3:13:9e:f4:fa:34:45:bc:da:23:0d:38:6c:d6:
         ff:01:8e:4a:7f:93:de:8b:f8:98:2f:c2:e9:a3:20:bd:d6:06:
         9f:4d:64:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----