Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
File:                     v-nxLJa6IGg6_1yVi_rY5MV39_4.mft (raw, json)
Hash identifier:          64/qw+QlaQ+kMUg4Td97pVWz+r5cANA96PDO/hFswh4=
Subject key identifier:   49:4C:68:15:9E:27:3E:1B:ED:0C:E1:72:C8:25:A4:57:41:B4:79:86
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Certificate issuer:       /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial:       0195E1900CB2771FADF8CD8F3313D7DAC683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
Manifest number:          14FB
Signing time:             Sat 29 Mar 2025 11:01:08 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:08 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:08 +0000
Files and hashes:         1: 6U6uH5_BB0lYonMuN6DdE6G62V8.roa (hash: 3dhstjEPIvNtG7SGXX1eIao46IwAVAGktngzzklpIJQ=)
                          2: DnIZzoqhty_tg2bYNrh_vDtOBCw.roa (hash: UOVHlVipqtCkCU4NWu9RPIeuEbJNMZ2hNXSGsc+R+F8=)
                          3: ZTvZSbWIWloIdqV37DbtQi07aIY.roa (hash: lQEka4orv2/BKmCxU3FSbBYnm+siKkoc02AVPM16hvk=)
                          4: v-nxLJa6IGg6_1yVi_rY5MV39_4.crl (hash: vekouTNLeslbTMo+pqD7bRqdAraRUaP1X5BL9IqWwuA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:0c:b2:77:1f:ad:f8:cd:8f:33:13:d7:da:c6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
        Validity
            Not Before: Mar 29 11:01:08 2025 GMT
            Not After : Mar 30 11:01:08 2025 GMT
        Subject: CN=494c68159e273e1bed0ce172c825a45741b47986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:82:fe:3d:13:62:78:06:7c:d3:a2:0e:07:
                    69:4a:0f:9a:36:5e:82:96:7d:bf:1e:76:3f:65:31:
                    60:2e:00:92:e0:3c:c2:a4:4d:4b:90:49:93:dc:8c:
                    01:04:be:10:cd:81:ef:f0:2c:ea:e0:7c:42:0f:f7:
                    d2:6d:53:97:e3:60:23:f2:71:b9:df:2e:88:e0:06:
                    8c:90:3e:68:01:72:cf:14:12:a5:72:fb:c1:e4:13:
                    e6:05:6c:20:36:8d:b9:e9:b7:84:eb:8f:4e:fd:3f:
                    b3:b8:68:42:77:20:8f:f1:de:3d:ca:d4:58:82:2e:
                    11:44:b3:9d:f7:70:7b:ab:22:36:c6:d3:8a:6b:ef:
                    9c:58:01:7e:c2:b9:20:82:de:96:0a:6d:1d:f4:e3:
                    9f:57:19:a9:48:66:4c:56:e2:9f:94:39:03:41:6a:
                    a9:36:95:72:3f:3e:80:79:c6:f0:73:25:48:aa:db:
                    e6:1b:52:f6:03:4b:1d:1c:39:c7:8a:19:d6:f6:3c:
                    2b:bb:6b:84:90:2f:ad:9b:59:c8:c5:f5:8b:70:66:
                    8f:8a:2c:49:1d:67:9d:70:00:eb:57:35:b8:60:40:
                    98:8c:47:8e:e6:57:30:54:83:4b:94:1b:45:3e:f8:
                    e6:7c:31:58:0a:24:b3:70:66:c7:b5:1e:5b:f9:8f:
                    84:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4C:68:15:9E:27:3E:1B:ED:0C:E1:72:C8:25:A4:57:41:B4:79:86
            X509v3 Authority Key Identifier:
                keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:61:9c:f4:af:66:f6:27:48:14:24:87:92:4c:d1:72:97:06:
         ff:d8:1a:5e:e5:65:fe:3e:97:64:b5:bc:cb:c4:38:9f:a0:6d:
         42:44:a3:d2:ce:f3:db:f4:9b:01:75:6c:be:f6:8f:8b:62:5e:
         e0:b2:2a:70:f4:d0:e0:40:98:66:4e:9f:93:22:cf:d3:9c:a5:
         25:62:73:b1:67:b7:10:3c:b2:41:2b:62:4c:e2:f1:1e:44:6c:
         a6:b9:38:f0:29:16:66:7a:f3:04:3a:f9:cd:d4:7b:4e:e7:7c:
         b9:90:a0:b3:cc:ca:ca:a0:a4:b9:4c:00:6b:89:4e:97:f8:b1:
         f9:14:61:4c:eb:6b:32:52:0f:37:d2:3b:e1:3b:a8:c1:09:fe:
         c5:e3:cb:2d:35:db:f7:7f:14:c8:02:d8:16:d8:b1:a3:bb:1f:
         2b:7b:80:09:1b:d6:7a:6d:e1:8a:85:fd:6b:12:b5:58:b7:ed:
         97:25:ac:02:bf:26:f8:db:2d:a2:4f:9b:b1:c1:e6:9c:e3:42:
         80:04:ff:dd:dc:08:c2:ba:28:e3:a4:e9:0e:07:53:f6:3a:6a:
         9c:b8:47:36:22:96:21:73:11:28:54:f3:e9:f8:04:3b:8c:e5:
         7b:e6:44:70:72:da:30:53:3f:3c:a2:ac:3a:b5:f1:80:d9:a2:
         e7:c0:bc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----