Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File:                     m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier:          VOvPTLv/wUQV6NIoXSCkGQnZ+frfRp5sQoFyLO9DKfY=
Subject key identifier:   5E:0A:04:F0:E1:17:D7:5E:0C:14:E7:57:F9:68:20:2C:20:A8:D6:33
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer:       /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial:       01962F74CFCD4F11FB1B149DAE7756AB06C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number:          0F5B
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: 6Kk93zKUSlp+LP66O4J+bOUWJkSjFocy1uM+cI+50mU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cf:cd:4f:11:fb:1b:14:9d:ae:77:56:ab:06:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=5e0a04f0e117d75e0c14e757f968202c20a8d633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:4b:f9:a6:a7:32:10:17:30:f5:b4:13:f7:
                    b7:00:41:f0:8a:11:51:9e:b9:b9:47:ad:57:bb:24:
                    f0:a2:64:10:82:1d:4d:50:12:66:99:67:be:0b:da:
                    29:39:2e:3f:3a:2b:4c:86:25:b8:25:49:03:9c:95:
                    88:ef:88:e4:54:05:de:7c:12:2b:11:d6:9b:80:b9:
                    c7:62:b3:67:35:ef:53:dc:7c:82:1e:ac:f1:11:36:
                    17:5c:55:2c:72:cf:da:83:eb:2f:91:20:be:22:e2:
                    1d:9e:95:de:e9:df:44:a8:bc:22:32:18:88:e1:f1:
                    f9:c6:14:11:a1:b0:4a:36:db:82:57:91:0f:a5:cd:
                    fd:c6:6d:8a:2c:f1:59:98:27:0d:65:b6:7d:93:ab:
                    65:f1:72:b0:78:56:17:4f:d6:99:c3:97:e8:2b:d2:
                    90:30:20:15:e4:c1:aa:bf:70:86:57:39:8e:0e:aa:
                    e6:05:7d:0d:03:08:81:3e:ee:85:ff:09:e9:68:5a:
                    9b:ca:79:0d:eb:fb:3a:2e:60:dd:2d:96:5f:b1:ff:
                    3c:da:ce:07:85:b2:2c:15:be:55:39:d5:12:b4:7c:
                    15:60:43:a3:e5:db:27:0e:b5:38:d2:de:de:b9:6d:
                    83:e1:f3:02:bb:7c:44:de:66:12:48:f2:2d:b2:66:
                    4c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0A:04:F0:E1:17:D7:5E:0C:14:E7:57:F9:68:20:2C:20:A8:D6:33
            X509v3 Authority Key Identifier:
                keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:71:25:57:a8:6d:10:17:af:01:2e:04:4c:d5:d2:36:84:63:
         80:dd:bf:7e:5b:cf:91:8b:01:2d:af:e2:74:ea:c5:de:a0:dc:
         0d:bc:57:ea:93:36:b2:8e:f4:2c:7f:c9:4f:17:ac:d4:b9:1d:
         0a:c8:0d:aa:fa:90:47:fb:14:07:42:78:6b:fa:45:08:c0:cd:
         73:bc:03:41:9b:3e:14:5a:af:70:21:74:75:c0:e6:f2:b4:0f:
         10:e5:66:eb:27:bb:4d:1b:e9:0a:eb:10:32:82:8e:cd:64:5f:
         de:8d:b0:ac:8b:14:70:de:0f:9c:cb:79:d6:ec:9c:5e:fa:75:
         e7:2d:d1:f1:45:48:77:f2:fd:44:9a:90:79:c2:4c:00:51:8b:
         81:76:c1:8c:f0:68:15:39:e4:28:1d:9e:e2:d2:03:c8:46:4d:
         c5:ae:0a:11:b2:b3:0c:6b:91:b1:aa:c4:3b:8c:d5:26:09:fd:
         a9:61:f2:6c:29:d5:04:b3:2f:f2:4c:38:67:e0:8d:06:e6:79:
         6a:bf:df:b5:a0:0e:e2:da:7e:ba:96:b8:fd:bc:bb:bc:c5:9d:
         37:a8:ea:4b:7f:61:e4:6b:07:bf:8f:37:d4:ae:f2:31:88:76:
         fb:e4:10:f8:8b:1f:9b:0e:2f:98:64:49:4d:29:ab:ec:58:f7:
         03:c1:81:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----