Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File:                     0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier:          bVUkXbcSGURqxNObR/Yi8jmDywrr2mcRSZ6t/hlh4Jk=
Subject key identifier:   85:9A:DE:36:50:C1:4A:9D:51:5D:D5:3A:03:4F:DB:4C:A9:A8:69:48
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer:       /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial:       01962F065D189F1C8B115C619AD44DBC1865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number:          137F
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: kN5Pj6el7jXE2g7GV6XFrBgOzdtK0UBQzpmgu/88H9s=)
                          2: mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa (hash: omo8awS6hh3Xi+tQ6clfUM9W5KqXeL6pdkyIRs6JAvg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5d:18:9f:1c:8b:11:5c:61:9a:d4:4d:bc:18:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=859ade3650c14a9d515dd53a034fdb4ca9a86948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:01:e8:4e:fe:27:b0:e6:62:e8:c2:7e:d0:
                    2d:5a:f1:ee:fa:bd:14:7f:e3:4e:3e:cd:96:b7:50:
                    5d:85:2a:67:1d:23:32:58:5b:f4:b2:80:50:96:fa:
                    48:3d:68:0a:2c:90:08:ab:f8:42:3b:90:ad:81:87:
                    af:95:f9:a5:0e:5b:30:49:b0:a7:07:e6:82:02:81:
                    de:a8:9a:68:f3:50:52:b8:01:5b:e3:7e:13:56:6f:
                    bb:b0:bf:6c:64:3d:93:a6:8f:fa:de:ac:0a:5a:c7:
                    f1:8a:2e:70:4f:73:c4:57:1e:d7:6b:6a:cf:3f:ee:
                    09:cf:21:71:f8:75:d1:9f:f4:17:70:cb:2d:c6:e1:
                    2f:6b:d0:c1:34:8c:2b:d2:10:46:20:66:29:e4:3d:
                    57:27:a5:53:d2:61:99:8c:04:c3:0d:56:12:6a:d4:
                    3c:02:32:23:06:b4:e4:a4:88:55:31:18:2a:c6:b7:
                    25:25:9c:11:d2:9c:ce:cd:b7:65:3d:5d:e1:2c:5e:
                    fb:e6:d0:f7:f2:f3:44:65:f3:81:77:62:11:3e:76:
                    83:c5:83:67:3f:cb:47:ca:05:ed:23:59:c7:53:70:
                    39:26:41:65:8d:07:f7:61:6d:58:8a:3a:3b:11:e9:
                    14:b1:66:28:07:13:71:b2:97:e2:a9:05:c0:a4:15:
                    b1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9A:DE:36:50:C1:4A:9D:51:5D:D5:3A:03:4F:DB:4C:A9:A8:69:48
            X509v3 Authority Key Identifier:
                keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4b:e9:5c:47:1b:c3:26:6b:57:b9:11:ed:cd:27:48:b7:17:
         a2:bf:a3:b4:2a:64:fb:4f:d9:1b:9c:b2:ee:af:52:8c:16:14:
         3c:37:e5:be:5a:fc:1b:5a:15:e4:64:60:6c:44:20:9b:eb:7b:
         c7:84:c5:17:d0:71:15:8d:de:66:97:a7:f2:04:95:24:14:93:
         33:07:fb:2b:18:a1:5a:b2:b7:c3:2b:68:92:1c:05:95:6d:53:
         51:e2:03:c4:65:ac:f3:f5:44:5a:5a:0e:5f:9a:db:90:9b:e9:
         a4:73:5a:87:c0:4c:58:76:ed:ce:27:30:88:d8:60:ee:55:27:
         eb:e0:40:4a:5b:a1:8f:d8:f0:b5:40:b6:7d:be:ff:54:20:5e:
         14:81:d1:dc:f8:26:99:0b:b6:36:61:1b:96:a0:83:ac:03:72:
         aa:82:01:27:78:1b:ca:c6:dd:6c:11:5f:18:b4:6c:5b:44:87:
         43:af:8e:e1:2f:d8:78:77:40:78:69:1c:e1:b7:92:9f:55:6a:
         80:84:e2:5a:f9:01:94:3b:63:f5:a9:31:26:f9:06:f9:46:94:
         45:cf:39:5c:0c:53:23:68:1e:2c:9d:65:54:39:9a:3b:70:c8:
         12:b0:5d:a4:a5:2e:e6:df:ef:0f:7d:a6:ec:96:c8:50:7c:fc:
         b4:9e:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----