Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File:                     0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier:          NVLSqlMmHGUmGOn8U5btFhUvJeIC4FVRk3vlZb8Pu/g=
Subject key identifier:   75:F7:ED:E2:42:94:8E:5A:95:A4:B7:3E:E6:E7:D6:C2:B7:36:84:A4
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer:       /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial:       01962E98D2AAD80F0012C3FED9FF80F28480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number:          13C3
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: qWzWD0Ukm+fBAgXgSyzfQvHO59RK2U/FlGQy4lKB8ws=)
                          2: FIvNNxujkeosaQmK-8zL99U8I-8.roa (hash: xdptKNwYHkOXesPFH1LxyuhIbU4UE4ZRfmuf1MyhTcI=)
                          3: Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa (hash: KQQ09ojl8xnv8sB90M9HtEN2nEY3TEzVcMAwOp9asR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d2:aa:d8:0f:00:12:c3:fe:d9:ff:80:f2:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=75f7ede242948e5a95a4b73ee6e7d6c2b73684a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:96:84:a8:8f:0c:0e:b7:8e:bc:22:62:f4:fc:
                    82:b5:a4:c3:18:77:3b:37:62:1c:9a:8c:9a:f0:e7:
                    e7:b2:b9:be:c0:7c:be:e3:54:f9:5e:e4:63:db:75:
                    a5:8f:e5:00:f3:59:2f:a2:7b:ab:1b:9a:58:d8:72:
                    79:58:75:93:54:7a:fc:55:83:8d:a7:ce:04:6f:f0:
                    a2:5c:b6:a4:6c:d6:2b:04:b9:4d:66:2c:b0:02:0f:
                    93:15:24:7a:4e:a7:28:1b:41:7f:1f:1e:99:18:1e:
                    8e:72:21:c5:1b:d3:23:95:19:e5:12:cc:c5:10:e6:
                    f6:62:7e:16:18:3f:6f:4c:7a:c8:03:a5:c1:82:62:
                    f7:18:9b:08:b9:50:3b:3e:59:72:78:28:c7:7e:db:
                    15:7f:20:eb:c6:d1:b3:68:89:8c:15:07:6d:b1:7c:
                    4f:8e:89:6c:b3:bc:70:6b:63:b7:47:72:12:e2:0f:
                    bc:c8:6d:0b:95:5e:2e:49:4d:b5:6a:26:ce:33:6b:
                    71:43:1b:5e:42:8b:54:7b:e5:47:19:27:01:5a:8e:
                    74:67:a8:a9:5d:6d:c8:a4:8c:2c:d8:24:68:eb:64:
                    be:67:ef:97:69:e7:fd:9e:c4:f9:10:d6:ad:34:4e:
                    2d:0e:4d:cc:93:f0:78:07:74:cc:f0:ef:9e:78:b2:
                    7f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F7:ED:E2:42:94:8E:5A:95:A4:B7:3E:E6:E7:D6:C2:B7:36:84:A4
            X509v3 Authority Key Identifier:
                keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4d:71:1f:e3:92:4d:59:09:f3:1a:d4:2e:d7:6b:76:bc:5d:
         5b:5b:b8:75:e7:e8:22:db:59:93:04:cf:2e:8d:45:f7:60:93:
         9b:3f:d1:0f:1b:85:27:40:c7:fe:e1:15:1d:81:ac:57:2a:95:
         4b:20:b5:13:94:84:42:9c:2b:57:5b:9a:b1:18:10:b5:93:80:
         d8:42:9c:24:25:f1:0b:f0:35:03:95:43:d1:77:53:c0:59:80:
         87:2c:7e:8c:a1:14:82:03:d3:7d:f2:b0:e3:f9:7e:80:6e:7b:
         8b:53:89:ac:30:d3:9d:39:7f:7c:63:e6:9b:c0:c9:62:93:98:
         32:66:ea:6c:1f:86:57:15:35:3e:c3:35:12:b0:0c:b2:72:18:
         82:3f:8a:68:90:35:f5:5c:d1:11:8e:aa:82:87:ca:05:7a:b4:
         cb:a2:6d:0e:12:cb:62:ab:44:d0:b3:5f:5b:6d:bb:70:cd:43:
         a1:71:5a:ba:24:ec:d3:d4:de:5e:f3:12:3f:16:f3:89:fb:52:
         98:04:c7:ca:4c:8d:62:d7:96:a9:a2:ab:c5:ef:9e:d3:43:83:
         52:cc:92:d5:62:81:5e:9a:0f:f0:2e:e2:94:c7:01:d2:d4:eb:
         ea:19:86:b6:e1:47:aa:29:ec:f3:b1:3c:06:34:28:13:48:75:
         52:9c:d0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----