Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File:                     B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier:          4699BBMXli96Az6lYU7r/f3mOZYMxEZQS3WXNo4BF9Q=
Subject key identifier:   5C:BB:6B:A8:BA:67:DD:86:CD:90:55:AF:FB:32:8C:B3:6B:31:8A:E7
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer:       /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial:       01962FAB5994A8FD1EECBB3B647620A5281A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number:          0645
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: dRvzmIoInGSCXu4nxVY2my4z3WZ+xC7krppv7/nWH/0=)
                          2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:59:94:a8:fd:1e:ec:bb:3b:64:76:20:a5:28:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=5cbb6ba8ba67dd86cd9055affb328cb36b318ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:f0:29:37:d9:38:9d:85:35:a3:f2:de:c1:
                    a8:9a:f0:43:b1:58:ea:bd:9f:f2:d8:b6:0e:87:a3:
                    75:be:be:7c:8a:b7:08:59:9e:4e:ae:bb:32:32:9b:
                    ab:74:15:79:0d:22:e1:c0:26:1f:cf:3d:7d:a3:32:
                    e7:11:75:c9:8e:1e:dc:c4:ab:62:db:fe:0c:5c:04:
                    16:4f:6e:75:73:cf:64:33:df:60:2b:41:1b:5d:c2:
                    d0:aa:0e:0d:4f:78:77:7d:05:38:37:b4:85:3a:d6:
                    c4:55:3d:de:ef:bc:f1:36:8d:84:8c:73:12:56:a2:
                    3f:ca:2d:83:93:d2:9a:58:19:d3:44:8b:8f:a6:5f:
                    27:9c:15:06:53:5c:d5:73:13:00:d0:f0:ae:d6:81:
                    d6:8a:32:56:2b:2d:86:9f:0d:b0:20:e5:a7:2a:5c:
                    45:3e:7b:f4:29:9f:78:a8:c1:c0:c5:31:e8:73:f5:
                    93:71:97:64:95:93:e3:bf:69:a0:3d:75:c4:39:a1:
                    d1:cc:1d:6d:f5:c6:9f:bd:d3:ad:f8:12:0a:21:ca:
                    69:e8:c4:4b:b0:b2:f9:3d:79:c7:d2:3f:da:1a:ab:
                    5a:e7:77:88:0a:69:34:3f:6f:75:e7:8e:71:f0:d8:
                    91:99:9e:45:9e:9d:3e:e7:c9:3b:44:05:32:12:c2:
                    16:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BB:6B:A8:BA:67:DD:86:CD:90:55:AF:FB:32:8C:B3:6B:31:8A:E7
            X509v3 Authority Key Identifier:
                keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9c:54:59:8d:69:5f:7f:17:65:62:9b:47:b8:bc:ef:32:84:
         cb:7a:09:68:6c:a9:9c:5b:10:b6:a4:33:9c:c4:b1:79:10:b3:
         41:7b:6f:f8:fc:84:b9:f6:6a:f8:f7:25:40:99:65:df:10:13:
         26:2a:3a:9e:a7:f2:8c:3a:fd:fe:97:8e:04:7c:46:93:ff:4b:
         e1:88:9e:34:e7:ff:eb:f2:0d:dd:0f:f4:f7:00:35:16:02:0a:
         52:46:b9:21:70:6e:df:c4:7a:1d:0b:5d:4d:73:6f:26:8d:d2:
         e6:ea:46:e4:16:b4:09:8e:c0:03:c7:01:26:81:03:8e:5e:63:
         29:a3:b2:aa:4a:ee:47:f3:0c:fe:cd:2c:2c:a9:c1:7b:a3:82:
         d5:8d:86:ce:43:e3:c7:8f:91:3c:2f:07:dc:e9:0d:9e:b2:d1:
         00:bc:f2:8d:89:b1:fa:5c:d1:33:18:08:58:44:cd:2f:53:d5:
         a5:df:11:98:c4:f5:87:c4:cd:59:ec:2f:75:00:a1:17:f6:e9:
         73:12:a0:e2:8a:59:9e:00:54:6c:8e:6b:ae:5c:ff:2e:26:b5:
         e6:21:84:50:af:60:7b:19:f8:35:87:6e:86:8f:39:01:11:b5:
         e3:62:4b:88:65:28:15:f6:5b:bf:8e:39:04:84:8f:9a:3a:45:
         be:e6:12:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----