Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/1-Q5xm6pMgxBINnn7ajy0zprADAk.mft
File:                     1-Q5xm6pMgxBINnn7ajy0zprADAk.mft (raw, json)
Hash identifier:          5P2P8FRgk10EqOBMPVRpUFxYVDilV2HNFBA2ykPUolE=
Subject key identifier:   BB:55:34:26:19:64:72:B0:DE:20:AB:20:0B:A2:1F:79:D1:FF:E0:4B
Authority key identifier: F9:0E:71:9B:AA:4C:83:10:48:36:79:FB:6A:3C:B4:CE:9A:C0:0C:09
Certificate issuer:       /CN=f90e719baa4c8310483679fb6a3cb4ce9ac00c09
Certificate serial:       0195C874DE1A0BAB28CDC9ED965CE9B57F4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Q5xm6pMgxBINnn7ajy0zprADAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/1-Q5xm6pMgxBINnn7ajy0zprADAk.mft
Manifest number:          14B6
Signing time:             Mon 24 Mar 2025 14:00:56 +0000
Manifest this update:     Mon 24 Mar 2025 14:00:56 +0000
Manifest next update:     Tue 25 Mar 2025 14:00:56 +0000
Files and hashes:         1: 1-Q5xm6pMgxBINnn7ajy0zprADAk.crl (hash: T08b60v+I8ypJzsYYNI+Wm1UnCc3eRZ4tZhCi9CpU1E=)
                          2: bFcn9mPyZL-HWvCUmkD4imPT9lE.roa (hash: nx+SWfL7k2gx1ajS+PvhXlizAfJ85BOfaRSOtzLsX5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:74:de:1a:0b:ab:28:cd:c9:ed:96:5c:e9:b5:7f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90e719baa4c8310483679fb6a3cb4ce9ac00c09
        Validity
            Not Before: Mar 24 14:00:56 2025 GMT
            Not After : Mar 25 14:00:56 2025 GMT
        Subject: CN=bb553426196472b0de20ab200ba21f79d1ffe04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:98:d2:5e:16:7d:8e:93:3a:a7:5a:9b:15:1d:
                    27:47:89:fb:de:d1:82:86:f8:2a:e2:77:d9:5f:c3:
                    70:7e:1e:f2:bb:cc:ab:27:d9:22:db:43:d1:5b:27:
                    96:82:91:89:28:b8:6d:d7:47:8e:63:2f:0d:0e:36:
                    6d:48:d7:25:94:c5:8e:65:7a:1a:61:52:43:e6:7a:
                    c1:0d:d4:7a:f9:6f:65:eb:54:9b:45:61:93:0a:d9:
                    0f:45:e1:7a:93:9f:bb:f7:2c:a0:6b:a9:54:1b:75:
                    b2:9b:8c:e6:84:2a:14:20:73:6a:19:b9:87:c3:39:
                    a1:90:1a:f9:0d:19:5a:23:da:30:d7:85:36:54:ba:
                    87:7a:8b:03:b3:38:2b:8c:54:57:80:dc:84:50:bb:
                    42:75:a6:4c:2b:c8:29:9d:85:ce:ba:a8:de:f5:95:
                    6e:28:5f:d3:8b:c3:ce:f1:01:2c:2a:5e:a8:ec:a1:
                    9b:c3:ce:e0:30:78:46:9e:39:d2:c9:76:ae:c3:cb:
                    c6:10:55:aa:f2:d6:32:ea:1a:9a:ae:cb:94:1c:f8:
                    34:9a:55:40:0b:78:e2:7f:89:9d:2d:fc:4c:94:21:
                    6d:21:9a:c7:b4:c6:33:10:ed:e8:6b:c9:bf:b3:ac:
                    9e:15:89:53:d2:9c:ac:10:1c:5b:4a:01:83:f8:d4:
                    42:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:55:34:26:19:64:72:B0:DE:20:AB:20:0B:A2:1F:79:D1:FF:E0:4B
            X509v3 Authority Key Identifier:
                keyid:F9:0E:71:9B:AA:4C:83:10:48:36:79:FB:6A:3C:B4:CE:9A:C0:0C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Q5xm6pMgxBINnn7ajy0zprADAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/1-Q5xm6pMgxBINnn7ajy0zprADAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/1-Q5xm6pMgxBINnn7ajy0zprADAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8c:7b:83:60:fc:86:51:0d:2a:54:4f:4d:3f:84:4c:91:27:
         d3:aa:60:f4:a7:36:d0:c4:7d:03:5c:54:05:b3:1e:40:0e:cd:
         88:7e:30:fc:e2:a9:10:94:c0:f4:96:d9:71:ce:c5:d7:67:25:
         d7:bd:0f:a4:43:58:e5:bf:b5:ee:f1:29:16:9d:d5:2d:d6:4f:
         16:b5:e1:83:dc:1f:06:b1:71:39:a3:9a:19:2f:fb:92:ca:50:
         34:be:be:c7:b6:37:05:de:15:05:af:e6:73:bd:bb:56:49:be:
         82:ce:b0:99:61:81:bc:37:be:8c:51:ac:15:52:fb:14:6a:2a:
         cf:42:31:dc:a8:ba:ea:40:d5:2b:15:5d:fe:75:9f:f4:9e:e5:
         de:a5:96:d8:93:04:8f:05:ea:bc:c9:a7:c7:0e:73:97:59:d9:
         21:64:d1:95:77:26:64:ee:3c:85:96:d8:75:80:9b:3e:8a:58:
         df:21:14:eb:81:da:8d:ac:f3:0d:f2:a9:fb:92:72:47:47:d6:
         c1:1d:a9:c0:46:04:54:8a:55:8f:9e:c7:a1:b8:5c:87:01:e8:
         8c:cc:3e:bd:1d:3b:96:38:f2:36:72:ce:c8:a5:3f:e8:d2:fd:
         a4:a0:ec:98:eb:07:13:c8:83:83:9f:68:93:96:21:b8:e0:3b:
         76:7c:72:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----