Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File:                     kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier:          J4rVUcDqC4Bq7DmwxGqAol9HJPRpadvZYTYJRFvAucM=
Subject key identifier:   A5:8F:47:20:5C:AE:39:7F:5F:DA:87:02:D9:BA:75:DE:9C:97:70:04
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer:       /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial:       01962F07220C260442CFCCB750D23ECBE871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number:          0A5B
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: c4U2evb93678CsrZ2ZQQemAPoFw.roa (hash: 5ZLOIZ+BzX8i3ipSMR9csvqZ6+nojKYy3y5RkNukgEE=)
                          2: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: F8kbDR0k9u4K3xH3algd8KP7Oj8wz9FptZ5ve9oh1us=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:22:0c:26:04:42:cf:cc:b7:50:d2:3e:cb:e8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=a58f47205cae397f5fda8702d9ba75de9c977004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d2:73:15:9e:b1:1e:22:1b:73:e3:35:20:14:
                    d7:ca:5e:72:91:5f:a1:1c:9a:f1:f7:03:f7:32:8a:
                    f3:ad:43:13:df:69:61:62:b7:1d:ad:e0:19:6b:80:
                    b0:6a:72:b4:bb:85:68:82:d4:c4:7b:cd:49:1e:b9:
                    05:93:90:0a:e5:cc:0e:0d:c8:cd:e4:b5:9b:44:c0:
                    2a:9f:7d:4c:93:68:2a:3a:67:4e:38:89:44:27:28:
                    24:81:82:8a:3f:fc:7f:fc:f2:17:fc:c7:7b:80:52:
                    a0:4f:38:0c:0f:df:26:13:e2:5f:bc:ad:80:f8:f4:
                    c1:43:0d:05:41:75:ed:d8:ed:78:45:dc:91:1d:5e:
                    2f:77:c4:d6:f9:c8:da:df:4f:79:0d:ec:b9:fa:1e:
                    85:51:7c:0c:87:48:6e:f0:b5:0b:01:4e:3f:64:73:
                    bc:b6:87:61:73:dc:e3:ec:52:a3:0a:b6:6c:dc:73:
                    71:d5:88:45:50:89:29:42:b6:ef:0c:d6:01:a3:64:
                    fd:99:8d:6b:2e:93:86:6e:27:cf:11:eb:e4:e4:a7:
                    9e:11:df:6a:43:d5:42:49:15:75:3d:6e:78:c9:bd:
                    4b:91:9c:ed:05:3a:00:44:a7:7f:fa:b4:fa:bf:1e:
                    f4:a3:05:ee:4c:9e:15:ae:c0:42:e0:94:57:cb:9c:
                    9b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8F:47:20:5C:AE:39:7F:5F:DA:87:02:D9:BA:75:DE:9C:97:70:04
            X509v3 Authority Key Identifier:
                keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:30:92:8a:d3:33:db:46:c2:1b:0b:e1:6f:d1:ba:ef:92:11:
         80:ac:5e:9f:42:e5:6a:b4:aa:e5:29:de:e2:42:ca:08:9d:0b:
         8e:4f:6c:f3:de:ba:b9:9a:e2:44:00:9e:9f:1f:6f:95:9c:25:
         0a:c5:25:5f:33:e4:fe:f6:fe:73:02:a3:86:3b:17:2f:a5:54:
         47:5c:0d:73:27:63:4a:42:47:97:54:06:d6:81:1e:4f:1a:26:
         27:24:fc:3d:d5:fc:85:eb:79:ee:e0:bc:1e:75:34:22:65:1f:
         6a:83:88:26:c6:8c:aa:09:f7:6c:c2:3f:ae:db:e5:86:fa:5f:
         06:66:12:ad:e5:c3:fb:b2:c2:31:a7:5e:bc:48:53:61:b4:2b:
         a8:d8:b9:8c:df:21:5f:0b:9f:f9:f1:3c:b8:54:61:ff:99:a4:
         55:cf:87:94:94:e3:13:a5:d1:29:83:13:27:fe:ec:e9:30:24:
         84:e3:38:5b:d3:38:d2:5e:47:1e:94:86:44:dd:e2:25:6a:4e:
         a1:a1:76:c4:43:cf:9f:8e:54:c2:f5:05:8f:b2:55:8c:e0:b3:
         1b:c9:94:af:ee:63:e5:c4:71:02:42:24:9e:4e:13:92:5c:e8:
         57:9c:e1:25:09:b5:cc:f3:37:ca:0c:0b:58:3b:e0:d5:33:2a:
         1a:26:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----