Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File:                     9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier:          zndvCR2aBltIryiJkEGLG4BV+myPD7/wBq5MXCGrCB8=
Subject key identifier:   54:58:AC:D8:40:79:DB:F3:2D:F0:F1:57:18:30:B9:99:97:08:98:18
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer:       /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial:       01962E98CDC8F0E69879ECB784C0A0127D49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number:          0B80
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: S3COn2imyZjPYCZx0IcWl14QyOgfrG/xdd7refQNvw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cd:c8:f0:e6:98:79:ec:b7:84:c0:a0:12:7d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=5458acd84079dbf32df0f1571830b99997089818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:36:3a:38:6e:47:e0:35:61:4f:a9:27:b0:64:
                    5a:80:12:2a:9b:9a:f1:cd:e7:02:7b:31:81:c2:55:
                    19:30:4d:57:27:5f:db:30:67:b0:00:61:e7:8f:84:
                    e6:c3:53:01:13:d8:77:f1:0f:2a:16:b0:89:1b:ef:
                    48:bd:5b:94:ab:75:17:d6:de:d2:14:ec:04:18:73:
                    73:87:60:62:8f:82:57:fd:29:4f:1a:83:b9:b8:c8:
                    04:aa:2f:df:ff:de:c0:34:5f:2c:ab:4d:35:c3:0b:
                    c0:71:e4:f4:cd:57:52:56:d0:b3:d7:42:76:48:27:
                    52:70:66:e0:0b:93:b6:63:ed:4e:43:97:2d:7c:51:
                    79:54:bd:2b:fa:cc:1e:3b:f3:45:57:33:5c:50:71:
                    b3:5a:a4:53:00:f7:6e:47:48:d5:df:29:86:83:c3:
                    41:61:1d:92:21:d3:7c:47:ec:a9:1a:31:31:04:3a:
                    58:63:2f:74:2c:73:46:48:8f:da:47:5c:5b:ee:36:
                    d1:c1:15:41:37:bf:9e:e5:bd:09:06:85:b4:71:6c:
                    ec:76:e8:98:2b:85:fc:20:99:c5:84:35:0c:8e:c2:
                    d4:93:11:5a:63:3c:61:e5:e0:1c:fd:78:3a:a3:cd:
                    c4:57:e7:9e:a7:6b:cd:9e:1a:2e:64:b8:81:f4:24:
                    e3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:58:AC:D8:40:79:DB:F3:2D:F0:F1:57:18:30:B9:99:97:08:98:18
            X509v3 Authority Key Identifier:
                keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:bb:cd:1c:e4:d5:cf:11:ea:2b:41:d2:84:3e:1f:6b:db:c0:
         d4:05:da:dd:07:03:f8:23:e6:0e:8a:62:77:4b:e2:1d:48:63:
         08:32:7b:66:3d:3c:2f:8a:cf:66:c5:a7:41:82:39:e6:1b:64:
         83:3a:df:0b:2b:1e:9a:6e:b8:21:ab:e4:a5:bd:9a:35:72:08:
         29:ec:2e:6c:77:8d:7d:72:c1:b9:43:21:30:2b:cd:13:f7:ee:
         24:3f:e6:0f:9b:29:82:ff:e8:71:05:03:ad:f1:35:34:ea:ac:
         a2:b2:15:64:c2:57:db:b2:a3:fd:e6:73:9c:3c:46:58:0a:43:
         91:cc:cb:76:e3:45:56:e0:22:d6:4f:f3:5f:b6:54:13:c8:8c:
         ea:e3:56:0a:d7:14:57:e5:b5:5d:41:40:d3:c4:26:93:03:92:
         a5:e1:6d:dc:d0:65:44:97:04:9c:18:e7:9d:19:90:75:3f:68:
         e0:f6:fc:8e:18:ac:99:3f:0f:61:07:8d:eb:b5:a7:7f:aa:2a:
         b7:39:06:0c:d8:86:12:3f:72:c1:df:ef:9c:4c:6d:49:76:b0:
         cd:df:a8:67:bd:b3:6a:38:19:38:0f:f3:82:e1:77:df:91:8d:
         3e:51:a6:4d:3b:49:90:64:11:94:0a:29:b7:12:b5:22:2c:c5:
         67:9d:0b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----