Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File:                     rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier:          o/C2o7EmvW6ughX/DIjcnTnp30fjiZ6RBfV1qm4ZLZk=
Subject key identifier:   5C:DC:5E:61:8A:E9:E5:CB:A3:06:D1:CA:E8:75:E6:D1:FB:CF:A2:18
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer:       /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial:       01962F069F4F5BD963130351714033B1CF80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number:          045E
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: 6iwAnsKrvIzW_8kWxukMBv6_7-8.roa (hash: B5lqJOu3kAHiS4R57Sfyd1HoOQ3st29J+9s18/WFb88=)
                          2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: 2v5B+4+biYQyTZaF/EIjc6WWQuCgfT8bQyNn9O578RQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9f:4f:5b:d9:63:13:03:51:71:40:33:b1:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=5cdc5e618ae9e5cba306d1cae875e6d1fbcfa218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:bf:f6:08:01:ba:9d:a3:14:d3:a0:bc:2a:
                    58:7d:ca:47:91:fc:2b:6d:0c:f9:20:b4:a2:b4:e5:
                    8c:b2:d2:db:9c:a2:0a:19:75:79:cf:45:82:4b:1f:
                    f1:43:51:a4:0e:e9:95:ef:e2:cd:3b:10:fb:20:39:
                    cb:9b:ae:6a:2f:d8:ae:4a:9c:b6:48:c0:1f:d9:d4:
                    6d:31:5e:e9:a2:6e:8a:2e:06:9c:5d:6f:eb:21:7a:
                    3b:ba:20:3e:61:5d:1b:07:41:a4:f6:c9:3d:41:a1:
                    c3:08:56:0b:03:56:19:3f:1a:58:d7:17:a2:29:b8:
                    a1:74:57:98:6f:79:d5:66:3d:af:1c:a8:04:11:b6:
                    2f:d4:e5:5e:19:d5:cd:d4:33:2e:8c:2c:19:8d:1e:
                    61:40:20:52:a2:f0:c2:ff:6a:65:2e:64:2c:bb:07:
                    f4:a2:9c:c7:8f:8f:0c:c8:c0:91:cd:7d:bc:df:d3:
                    56:50:2a:9b:48:3d:4d:84:80:c3:c0:26:fb:ee:51:
                    eb:ee:b6:af:94:c5:7b:9b:93:b4:8a:f3:8b:a8:be:
                    fb:ea:c2:b7:6a:23:4b:a0:3f:a1:24:a4:f4:46:c1:
                    a1:d2:98:fd:24:5c:a5:b1:34:13:cd:4a:de:2e:ba:
                    a9:9a:26:25:95:fc:43:a6:df:6a:34:65:bf:9d:db:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DC:5E:61:8A:E9:E5:CB:A3:06:D1:CA:E8:75:E6:D1:FB:CF:A2:18
            X509v3 Authority Key Identifier:
                keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:a9:3e:b5:1a:0e:35:ff:b8:1b:92:b4:87:a7:97:93:cf:d3:
         20:4d:f8:64:33:31:82:8d:b3:ad:20:07:a5:10:94:0e:52:65:
         65:1b:84:4a:2e:3a:be:37:6a:7a:c5:64:a6:71:72:9e:45:cc:
         fa:c3:a6:2f:cc:52:f1:9f:a3:74:b2:cb:e3:4c:ea:2b:bd:2f:
         7f:0f:a6:57:c8:d8:83:4f:8d:b9:3d:5d:58:29:10:b6:4e:58:
         a2:81:81:f8:b2:4a:a0:9f:15:31:f5:5b:17:ed:df:e1:86:04:
         72:38:1d:29:80:35:84:e0:1b:d8:ec:7c:76:f9:8b:20:1b:d4:
         79:20:9c:7c:6a:bc:f5:dd:f2:9f:c1:61:cd:aa:16:15:e2:6a:
         30:b6:4a:1b:4a:ef:c4:09:53:40:17:15:2a:5c:55:65:f6:ec:
         fd:f9:de:4b:d6:06:98:d8:a8:9f:2d:00:2f:7d:bc:77:29:12:
         ac:92:12:e2:78:bc:62:89:65:28:a3:11:5f:5a:5d:c1:3e:7f:
         f0:a0:95:33:c5:f5:a3:a1:c5:67:20:51:a5:fb:a4:82:a2:8e:
         95:30:1e:20:f9:6b:70:5b:76:ae:50:84:1f:09:7a:4f:a8:b7:
         a1:06:41:2b:12:28:e2:00:e0:94:57:73:38:d7:75:f7:d3:b2:
         93:39:eb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----