Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
File:                     C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft (raw, json)
Hash identifier:          oK+rxUVl5BGB55dwBesCiCYEQq5AP3ThFVxWSZx70b8=
Subject key identifier:   D2:2E:53:17:F2:79:95:FA:EE:71:BA:D8:67:52:93:F6:37:14:B9:B4
Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
Certificate issuer:       /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Certificate serial:       01962F070BB26D30422D4321A3C15731A2D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
Manifest number:          142C
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl (hash: Z62M9UZS1Fr5PnxhVEXy4x429hvpMy3zJxXxtzY7p70=)
                          2: DuaqfpWRjQCcl_wmNFLt00a2Vw0.roa (hash: rQv6lxTZYs4XDzxYfgAGiCr8L0iuSbohO7siOw9JGpU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0b:b2:6d:30:42:2d:43:21:a3:c1:57:31:a2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=d22e5317f27995faee71bad8675293f63714b9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:73:c4:d8:9d:a3:09:cb:9c:63:92:92:8d:
                    7f:14:0a:2f:4f:12:99:d2:a7:8f:28:84:b8:d5:00:
                    b0:8e:fb:3e:83:6e:ba:d9:6d:87:3e:e0:c9:2a:fd:
                    fe:64:a0:92:41:28:33:c4:dc:1f:65:ee:43:98:d5:
                    0c:a4:3b:31:62:c4:e0:2a:46:b3:90:dd:f8:ea:88:
                    0d:7c:60:e8:17:fd:35:43:19:02:4d:c9:1d:9e:4c:
                    3f:0a:93:d1:41:6a:de:16:8f:bc:c6:75:24:d6:f7:
                    50:e9:2d:21:c2:20:d3:23:38:81:de:41:91:c1:b9:
                    86:47:0d:47:fd:db:f4:9b:56:0e:41:46:16:4a:d4:
                    69:c1:4b:a1:86:63:2a:90:dc:62:8d:d4:3d:90:e4:
                    36:5b:69:8e:8e:95:72:1b:30:25:a0:64:60:95:6a:
                    ce:e7:22:8a:94:b1:92:e1:66:6b:53:ea:15:3f:70:
                    41:e5:a9:db:95:7d:87:9f:c5:79:fd:7f:55:0b:77:
                    b0:e7:c1:33:28:1a:cc:6a:a5:d6:bf:73:fb:12:92:
                    bf:a7:24:cf:50:1d:e3:88:b6:37:b2:b5:d7:32:03:
                    e3:21:96:de:98:4d:b1:18:e8:96:48:3a:8b:45:64:
                    bf:82:07:ff:80:40:f2:00:ea:79:d2:54:7d:27:7d:
                    fa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2E:53:17:F2:79:95:FA:EE:71:BA:D8:67:52:93:F6:37:14:B9:B4
            X509v3 Authority Key Identifier:
                keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9b:d3:99:51:7a:f5:2e:97:05:5c:18:02:c2:18:8e:95:81:
         bb:2e:40:51:e4:58:09:53:e7:11:7f:51:f0:a7:9d:47:54:2a:
         bb:7c:d0:78:68:7b:d9:64:e3:72:ed:50:41:8b:8c:9f:c6:c1:
         68:bd:7b:bc:5e:7f:b7:1f:f2:a7:80:4d:45:e0:df:82:cc:15:
         fc:20:b5:20:00:83:7d:f3:bc:8a:50:c0:c2:b9:56:20:7e:4d:
         8d:c9:22:84:05:8e:d0:cc:7b:0b:0e:97:98:1c:9e:16:22:0a:
         38:fa:0f:8b:5d:29:f7:19:97:d6:dc:cd:b2:0c:a8:f7:0b:cf:
         07:8e:4f:39:53:6e:b0:b3:94:d9:f4:30:8b:f3:90:62:8d:ce:
         bb:fd:20:4b:26:cf:96:92:10:ac:f5:1b:34:0f:44:9e:5d:94:
         f8:15:98:d6:10:2c:27:49:b5:5d:d3:8c:6a:13:64:6f:7f:30:
         22:52:f5:e9:87:fa:76:0d:cd:72:c7:5c:e6:98:cf:fb:85:f1:
         59:14:59:88:ba:42:0d:31:ed:65:13:ec:d3:de:33:34:fb:e2:
         8d:3a:12:a0:52:0a:71:65:d7:35:98:c5:4d:d4:a9:72:dc:fa:
         91:9c:df:7b:8f:00:e6:80:56:23:70:a4:8d:12:7f:fe:2c:07:
         8f:3d:63:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----