Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
File:                     1V5WEXiBQrMVQorlH2fLus-At-g.mft (raw, json)
Hash identifier:          HNifJ20YDVIKDdmo8GQ0y4B/BM7FblHqGPIhaEWhGV8=
Subject key identifier:   A9:94:4F:F4:5D:34:57:6B:5D:29:3E:F3:AF:95:E4:72:A9:40:E5:5D
Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
Certificate issuer:       /CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Certificate serial:       01962E98947AAA413CD049636C1F6DA10A2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
Manifest number:          023D
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: 1V5WEXiBQrMVQorlH2fLus-At-g.crl (hash: u8OcUdFxgBkbt19t/JTYXOIKYIT8YfaGvYuS5KmUXrA=)
                          2: y49JuAVDoy-LfsHdEc6QYgh16LA.roa (hash: lgV8xv23uaL4oGyw+8u8NKX5nD6V6ZzdAGMuEZqxGwY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:94:7a:aa:41:3c:d0:49:63:6c:1f:6d:a1:0a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=a9944ff45d34576b5d293ef3af95e472a940e55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:16:a4:1f:dc:df:b6:8d:51:f5:8c:07:ca:
                    60:6c:3d:90:10:54:11:f2:0f:12:6a:d2:e4:b2:0e:
                    b9:df:51:8d:07:b4:f1:54:c0:62:9d:0c:92:f1:40:
                    d4:bc:61:78:b9:37:80:f8:8d:7f:c7:cb:34:23:57:
                    e4:98:b6:92:79:05:dd:9d:b7:19:26:b2:b4:26:e8:
                    4e:a1:14:c5:f3:0e:50:35:aa:61:ab:36:09:54:1e:
                    fd:e4:e2:cd:a3:57:f8:72:b8:f7:48:80:68:37:50:
                    1e:28:fc:21:60:3b:d0:a5:0c:f3:89:e8:21:a8:d0:
                    c6:04:ff:fd:3c:4a:aa:c0:84:7f:80:ed:1b:a0:ac:
                    a9:58:85:f3:9b:9c:1a:5c:79:4f:03:a1:55:9e:fa:
                    59:ab:00:b7:48:98:0a:a7:ee:09:45:87:5b:43:0c:
                    5b:56:f6:08:be:73:d5:bd:d2:fd:1e:7a:ab:95:ef:
                    53:e5:ce:b8:71:ec:99:1b:92:02:78:c3:c3:36:f5:
                    7c:ab:61:11:28:ed:ba:95:cf:5a:13:86:f6:1f:1b:
                    68:74:1a:c9:da:e2:6b:be:de:36:43:8c:9c:a5:e2:
                    b4:16:3d:5a:53:ad:da:d2:cb:90:c9:5a:e7:5e:3a:
                    ea:bd:8e:2d:93:e8:1f:3e:bb:49:08:fc:f5:26:8e:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:94:4F:F4:5D:34:57:6B:5D:29:3E:F3:AF:95:E4:72:A9:40:E5:5D
            X509v3 Authority Key Identifier:
                keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:42:03:a5:26:4e:41:c3:9a:00:3a:f0:0c:74:db:7c:d8:8a:
         5b:ef:10:c1:6d:4b:e8:8c:24:dd:f4:1d:bc:16:a3:37:32:44:
         9d:63:b2:b3:18:60:b6:41:04:c9:21:57:dc:18:f4:f8:bb:7a:
         fe:4a:05:d9:a1:31:61:8b:23:80:f6:27:b5:ba:a4:9e:0f:6d:
         11:a4:7a:f2:44:16:e8:f0:71:23:65:32:2b:b8:cb:5c:24:90:
         35:f8:84:d2:d5:23:30:92:3d:db:14:ea:b1:02:6e:ac:eb:82:
         4d:2f:94:e1:0c:a3:cb:86:35:4d:53:8b:c7:5c:76:cb:bf:3e:
         f4:7d:27:da:db:08:fc:0d:25:97:3a:d2:2d:4f:6e:14:33:8d:
         f9:18:ee:30:44:8f:93:a6:f6:c1:95:df:2d:b7:97:78:08:9a:
         c6:94:37:a3:02:ac:2b:cd:11:7c:8c:c2:cf:4c:81:45:d6:20:
         da:b9:84:86:47:9f:3a:67:ec:f2:5c:98:aa:01:69:05:dd:b3:
         9d:f6:10:d2:1e:ef:46:bd:5f:5e:25:19:59:2f:0a:3f:92:e8:
         b0:c4:9e:aa:3f:05:f4:f2:db:27:86:74:1b:45:bc:32:b5:66:
         99:91:ef:fd:d6:af:4b:32:7d:b5:18:c2:ae:b9:41:60:df:68:
         7e:c4:59:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----