Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
File:                     t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json)
Hash identifier:          WrmYwFneYKtoHlkC68rXZ553XbYP+ieMmOA6Et+92Vs=
Subject key identifier:   0B:18:5B:3D:28:86:8C:ED:61:B6:48:B6:54:6C:3C:28:F8:27:39:5A
Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
Certificate issuer:       /CN=b795aaf033004c92d7a26c236c14d32552d78d94
Certificate serial:       01962F743EC95C77BD4B9EA0BC75A9806A14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
Manifest number:          0EB6
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: oAZxYtQ4Og3cgsl-3lYamhsa7e4.roa (hash: 3ae/XOyTNvdp+V+oKgkV4BxFv5zwWxKjx15ZyehKjvA=)
                          2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: conrW47rm8ccwCAoBlbl9h4tYLqOr7aQqfopOJ6HwTk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3e:c9:5c:77:bd:4b:9e:a0:bc:75:a9:80:6a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=0b185b3d28868ced61b648b6546c3c28f827395a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:94:8e:4b:b4:5d:fe:04:ca:a0:33:76:c0:2f:
                    d1:35:89:18:3f:1d:09:2c:a8:83:76:4e:b1:68:be:
                    05:99:0a:07:d4:81:60:b3:8c:8b:4c:85:27:0b:ae:
                    3c:ce:41:f1:ba:c1:b8:1a:5b:fe:c6:aa:f9:1b:c7:
                    8a:06:13:b0:42:0c:1c:4e:6f:52:7f:db:51:66:bc:
                    93:36:ee:eb:99:72:db:58:2c:52:17:d3:80:16:b6:
                    4b:c2:ab:5f:7f:52:8a:c7:01:d2:aa:2f:92:92:9c:
                    80:64:9b:0d:e5:75:c6:83:be:69:4e:d8:7f:7d:45:
                    b6:1b:cd:bc:2d:8e:58:ba:fb:da:b4:38:08:e8:32:
                    8b:21:8c:e8:99:82:cd:6f:83:30:b5:60:52:ff:9b:
                    6a:ba:4e:0a:f8:03:27:22:fc:18:d4:9d:a1:9a:ca:
                    31:ce:32:69:3a:c7:fd:28:cc:97:53:50:6f:05:78:
                    00:16:9b:a3:a6:32:c6:22:e7:54:28:83:d4:42:2c:
                    4c:69:4a:71:75:81:51:6a:c9:d1:e3:a9:1a:e0:71:
                    69:df:50:b2:ef:03:a2:70:44:5a:67:51:da:4d:d3:
                    56:33:58:15:e2:91:21:ed:43:ee:d1:7d:be:98:7c:
                    28:45:01:bc:6b:58:a3:2f:4f:58:93:2d:14:ce:fc:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:18:5B:3D:28:86:8C:ED:61:B6:48:B6:54:6C:3C:28:F8:27:39:5A
            X509v3 Authority Key Identifier:
                keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:48:5e:6f:5a:55:00:c5:42:56:8d:02:03:5e:35:da:00:3d:
         24:16:1e:9a:db:42:07:a5:16:c0:a5:e5:8a:e1:f9:f8:6b:97:
         87:44:18:ff:2d:52:10:e9:29:f3:84:17:37:bf:05:7e:f0:84:
         96:8f:79:b2:6d:5a:b0:81:6c:4e:1d:21:2d:6e:03:d7:ec:2d:
         a3:10:2e:43:5b:64:67:4c:65:64:37:00:66:4b:81:db:37:7c:
         f7:3a:38:74:24:3f:91:2f:cd:ff:b4:a6:e2:e2:bd:6c:0c:b9:
         34:7a:ea:cd:40:12:53:10:3a:28:de:90:73:34:e7:99:e1:05:
         5b:bc:35:df:7e:5f:1a:8b:88:b9:7e:38:16:c4:ea:24:b2:15:
         a0:e7:8d:84:9d:34:80:3b:f1:cd:de:64:5d:25:52:7a:22:6c:
         87:d4:2b:47:3d:01:f4:e9:28:8b:e8:06:a1:5e:b6:94:fe:c2:
         07:26:9e:9b:e3:d3:5b:b0:7a:9c:56:f3:26:e6:ea:ca:ac:e2:
         9b:37:22:4e:60:a9:3d:68:13:90:cf:f5:16:2b:32:3b:21:94:
         9e:39:7b:3e:41:d8:3a:75:2c:5a:29:bd:c9:68:fe:45:b3:01:
         2a:e0:df:a5:42:db:3e:a5:f5:aa:6c:7e:64:81:7b:65:d0:cd:
         f0:93:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----