Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File:                     RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier:          BF1v+6ozYpZlQHRgz8mdCDf+kphkrfahzh6Hz1sY1Rs=
Subject key identifier:   F5:8D:D5:72:36:5F:42:D6:78:09:73:4E:B5:5D:3C:48:BB:86:D1:A4
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer:       /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial:       01962F0652A22F1E734BC907DBD91683984A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number:          04BB
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: 85JP1EmlrjP9cMbgQ-NLAJZsWYU.roa (hash: MO0sgGxlXYh61dJ8SPvOD77mPT9iIScGfPHBaJnXid0=)
                          2: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: a2xRgj6CsIAcHvHeEQ8Kgpt08nmLNiXH85u+Fldhed8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:52:a2:2f:1e:73:4b:c9:07:db:d9:16:83:98:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=f58dd572365f42d67809734eb55d3c48bb86d1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:47:ae:ad:b3:ec:d1:22:7e:00:73:90:30:
                    1d:4d:2a:e7:93:7c:72:4a:08:03:24:34:4b:8c:c2:
                    f1:08:6d:f0:c6:46:cd:51:05:d8:58:f0:c0:0b:16:
                    53:10:9c:e7:9d:e2:80:12:d8:3a:32:22:31:b9:0b:
                    6e:66:6b:1c:5f:1a:2d:65:18:91:25:2b:ab:3e:24:
                    3b:eb:f2:7c:88:4f:75:57:31:8c:5c:ce:71:e9:6e:
                    01:a3:bd:e7:2e:f5:83:af:72:64:22:79:ce:be:cb:
                    ca:c9:2e:2b:b2:71:f4:6f:52:63:d3:f1:af:6b:15:
                    4e:ae:c6:91:a5:32:2c:e9:f9:88:13:2c:54:1f:10:
                    43:a2:72:0d:27:14:93:14:f7:c3:48:c6:37:44:2d:
                    c8:2a:a3:ae:a1:d8:b1:df:4b:bb:72:83:da:81:bf:
                    ca:2d:d1:92:26:f5:28:5c:3b:a0:c3:f4:05:1c:b1:
                    b5:cb:5a:84:de:c7:51:82:12:d8:46:d0:3c:50:26:
                    d9:f0:4a:93:67:8f:8e:b7:82:db:a8:1e:b0:31:77:
                    6b:89:a8:d8:c0:b7:4c:b1:89:93:fe:8e:e3:99:4b:
                    7c:63:d2:ee:3b:44:f5:c4:4b:9d:58:69:59:e2:fb:
                    8c:60:d3:7b:3a:b9:2b:81:4d:96:1c:85:db:c0:a6:
                    06:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8D:D5:72:36:5F:42:D6:78:09:73:4E:B5:5D:3C:48:BB:86:D1:A4
            X509v3 Authority Key Identifier:
                keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:68:e2:e5:04:b2:ea:c1:b1:f7:18:92:53:ef:87:cf:bf:47:
         c3:6e:94:19:90:aa:09:8d:02:af:18:d0:bc:4a:db:65:c7:e7:
         1f:1b:d5:0d:cb:c4:e1:45:6e:38:a2:eb:7c:0f:2c:14:e0:42:
         e1:00:ee:52:b8:f4:68:09:cb:dc:d7:ff:6b:b1:7f:81:c5:96:
         0d:9d:a3:3a:f8:e3:b9:d3:34:9e:9a:e2:88:a4:22:e9:ac:07:
         dd:4f:8e:32:8d:ed:e7:1a:ac:be:26:83:77:21:24:84:7b:bd:
         b1:c8:b7:56:c2:13:b0:ef:74:b8:b7:75:bf:40:a1:8f:13:76:
         ab:8a:25:bc:1c:5c:42:f1:b3:f2:10:b9:e6:39:3b:08:52:64:
         11:16:f4:58:65:90:49:32:a7:44:20:17:05:3e:10:f8:4c:01:
         b2:01:f3:8d:02:3b:9d:14:42:ca:e8:50:00:37:4b:b4:76:14:
         fb:a2:16:6c:ba:fe:22:49:d6:f0:88:ed:47:3a:0a:30:e3:4d:
         a0:f4:31:78:7b:90:69:db:84:bd:b7:06:65:ce:9c:db:dd:79:
         87:b9:ee:b0:42:67:89:d9:ff:81:df:26:ae:cd:b7:88:68:5a:
         ca:b3:98:0a:21:a3:5d:5e:e6:c5:6f:3c:38:ec:2e:c0:16:5a:
         f4:b2:aa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----