Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.mft
File:                     u0OX5un46iWRVggDysuzI5Ytn64.mft (raw, json)
Hash identifier:          NbS9KBimPa/ZMeOgFrNlb3b+kdKwt83e0Wyv72EpdwQ=
Subject key identifier:   7C:BC:B1:0A:B1:59:8E:70:9C:F0:9C:16:54:3A:10:86:05:C5:7C:51
Authority key identifier: BB:43:97:E6:E9:F8:EA:25:91:56:08:03:CA:CB:B3:23:96:2D:9F:AE
Certificate issuer:       /CN=bb4397e6e9f8ea2591560803cacbb323962d9fae
Certificate serial:       01962E99DE3CE9521E7DF4CC1ABD736F6745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0OX5un46iWRVggDysuzI5Ytn64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.mft
Manifest number:          0F2A
Signing time:             Sun 13 Apr 2025 10:02:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:37 +0000
Files and hashes:         1: u0OX5un46iWRVggDysuzI5Ytn64.crl (hash: L1KMY4JIgQHEWHuYmPY2BUlEwNZ+XWslIfLlWKl2M88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:de:3c:e9:52:1e:7d:f4:cc:1a:bd:73:6f:67:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4397e6e9f8ea2591560803cacbb323962d9fae
        Validity
            Not Before: Apr 13 10:02:37 2025 GMT
            Not After : Apr 14 10:02:37 2025 GMT
        Subject: CN=7cbcb10ab1598e709cf09c16543a108605c57c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:00:b2:ac:84:f5:fe:47:5d:fa:8b:08:c1:
                    8c:73:a6:07:2e:6c:1b:53:ec:94:30:8b:d6:26:29:
                    17:6a:d0:4c:e2:45:58:7a:07:d9:47:5e:c5:e8:a9:
                    b0:b1:9f:42:e5:18:ee:2b:00:9a:92:9c:d6:fb:39:
                    c3:68:c8:df:16:42:b8:5e:42:f7:b2:6e:7e:4c:27:
                    92:9f:73:36:e7:c5:91:6d:2a:cd:8d:f5:39:46:b6:
                    56:2d:f4:7e:21:ce:eb:b4:c0:fb:ae:d1:02:be:6b:
                    55:d9:e1:08:47:23:62:15:af:f3:52:b8:f3:7a:22:
                    d5:b0:d2:9c:03:57:20:ab:8a:39:df:df:e1:c0:77:
                    8e:4d:74:2e:63:59:d1:1b:54:89:2e:9c:15:a1:d5:
                    10:f0:f8:45:ae:a7:f6:d6:12:c3:83:31:d3:d2:d8:
                    58:73:19:fa:71:4f:3f:70:f0:81:40:26:ad:35:b3:
                    58:09:c7:c2:dc:af:ad:a1:39:e5:d1:f3:91:08:0f:
                    db:38:c3:51:6f:f2:84:2b:38:e2:a7:eb:6f:39:4c:
                    25:4f:14:f0:05:dc:e2:da:f7:55:d7:d3:91:ef:12:
                    19:f1:d1:4a:d6:ca:84:d0:3f:57:4b:24:75:56:dd:
                    de:55:e3:da:70:bc:23:39:d2:f2:e7:bd:e6:8e:42:
                    2f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BC:B1:0A:B1:59:8E:70:9C:F0:9C:16:54:3A:10:86:05:C5:7C:51
            X509v3 Authority Key Identifier:
                keyid:BB:43:97:E6:E9:F8:EA:25:91:56:08:03:CA:CB:B3:23:96:2D:9F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0OX5un46iWRVggDysuzI5Ytn64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:cc:83:09:5f:fe:80:1f:8a:11:c2:cc:2c:b3:7c:12:4a:92:
         9d:62:92:29:c9:e6:0f:29:b3:ef:b9:d0:62:fe:16:9b:ea:ed:
         6a:57:c3:80:ee:bc:bc:79:57:5f:54:bd:c2:48:df:f4:4a:6f:
         b3:97:d0:d5:c9:b8:c9:d6:69:5f:67:04:ac:4c:17:e6:68:b7:
         83:8a:b2:12:b5:76:84:c4:ef:4b:a2:18:46:99:c0:b5:5d:8e:
         89:15:b9:13:cc:b9:f9:43:76:36:0b:1f:a6:23:af:b9:9a:2b:
         90:14:ce:fa:8a:f8:b2:2f:b7:6c:a7:1e:d3:38:6f:ea:85:7c:
         a8:9b:be:44:37:c9:f8:c3:e5:04:15:03:12:5f:b5:d3:9f:fe:
         23:71:10:40:8b:b1:e1:3b:50:6b:e5:0a:f8:91:0c:6b:1f:3d:
         bb:d3:dc:7d:e8:93:b6:dd:55:8a:4b:79:06:51:7f:5c:b6:11:
         28:1b:95:8c:59:2d:a3:9d:f7:f8:56:c6:80:46:de:e4:a3:10:
         0b:48:21:c6:93:a8:b5:12:d8:93:b8:5f:bb:e7:4c:2f:66:46:
         9a:fb:2a:b9:7e:d3:f3:50:12:32:07:17:3e:da:60:c7:50:58:
         60:11:eb:fe:9e:e7:50:39:89:29:dc:df:77:cd:3d:61:94:77:
         bf:f8:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----