Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File:                     1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier:          hgkh0T4P1uvNfyYuCs9qeDGvKZJvO9kPeUMDe2mT1PI=
Subject key identifier:   F4:62:B9:7D:3C:BF:5B:0A:C5:B3:76:E3:52:A0:C2:8C:70:95:E4:5D
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer:       /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial:       01962E989A660AD50877F7B0DE65FCE2E5F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number:          13D1
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: wJbjladqn5em9WtKJUv94ArzK/fjiM2+pXSZ9TJhRLM=)
                          2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9a:66:0a:d5:08:77:f7:b0:de:65:fc:e2:e5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=f462b97d3cbf5b0ac5b376e352a0c28c7095e45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:c6:1d:e7:62:f3:b8:3c:99:95:8f:ec:cd:
                    94:04:14:2e:3c:d1:d6:40:7b:4a:a5:bd:75:a4:66:
                    b4:83:45:13:40:4a:b5:17:84:18:7d:07:5e:5f:61:
                    c4:11:14:09:fb:c0:1b:90:41:44:a7:0c:8b:15:da:
                    6c:46:f5:3c:43:18:ee:cb:a0:0c:c9:8a:6b:12:bf:
                    7e:c2:a3:72:15:11:9b:e8:f8:88:42:da:69:47:08:
                    d5:c3:d9:a0:1a:ed:07:42:9b:20:31:ec:06:35:28:
                    74:90:d6:4c:33:2c:98:c7:57:05:e4:2e:c1:08:43:
                    b0:b9:a9:68:bb:d7:34:0e:c0:c0:b0:41:68:81:63:
                    ce:63:ac:52:59:15:a4:4b:43:13:6f:3b:7e:be:26:
                    e4:4c:ee:cd:51:f6:29:d6:d2:42:91:73:d3:61:db:
                    4d:3c:1e:12:ad:80:1b:cf:77:27:b1:29:f8:aa:4d:
                    f7:7f:14:87:d5:1c:06:a4:6c:5f:3c:e9:c7:18:05:
                    ba:fb:9b:df:e5:b2:a5:2e:a2:d7:11:94:e6:36:d1:
                    f5:71:0f:a6:7e:90:6e:38:77:4c:04:05:b9:bb:e7:
                    a9:1e:20:ff:c3:8a:dc:63:5f:3a:5a:fd:c4:84:98:
                    b8:77:3d:87:18:9a:28:cc:2e:a3:03:96:f4:26:bd:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:62:B9:7D:3C:BF:5B:0A:C5:B3:76:E3:52:A0:C2:8C:70:95:E4:5D
            X509v3 Authority Key Identifier:
                keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:84:1e:8e:18:34:ae:9c:0e:7d:56:3d:fe:a4:ad:d0:d4:f2:
         b3:c0:3d:e9:9c:f1:85:1f:e8:d4:ba:f6:b5:d3:f3:17:60:a1:
         ad:e8:21:77:97:60:b5:0b:39:ba:ae:74:6b:fb:12:35:0d:7d:
         ed:a4:d5:2c:46:52:66:d0:6a:d0:ba:44:c2:70:67:8a:15:c5:
         69:49:60:7f:01:6d:ea:26:e4:7b:44:f9:59:a7:96:f8:bf:07:
         24:70:97:38:15:49:38:64:d8:72:ed:6b:8e:91:23:7d:99:2a:
         b8:b3:ac:e5:17:b6:92:1b:59:7d:38:2f:1d:c2:93:31:6f:a7:
         c5:b3:50:e7:fb:40:43:52:36:44:f7:9d:ca:ce:20:b2:58:b9:
         cd:47:80:cc:8b:fd:a7:be:89:fb:08:be:cf:f5:78:b3:aa:f3:
         3a:51:2d:63:a2:b6:8c:40:8f:91:dd:c3:d2:96:a8:b1:91:b6:
         4e:49:55:29:ce:d7:45:5d:4a:ab:50:89:2c:c2:99:25:e5:8c:
         c3:db:de:58:24:8f:d5:cb:51:1f:a4:d0:f6:d6:b1:b2:85:39:
         02:a0:ca:00:df:d1:ca:10:01:61:c2:10:94:68:63:d1:6b:50:
         9a:61:1c:4a:77:04:e0:a7:eb:35:d4:a1:d4:1c:9a:df:71:a5:
         34:b5:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----