Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File:                     A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier:          87m+HRIhLfGNqDipApkmXmCCjF8b06zLCMkYrstM3NM=
Subject key identifier:   5A:48:EA:8E:93:50:39:69:00:78:50:3F:41:30:98:84:6F:C6:F8:36
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer:       /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial:       01962F74DEE2C28218705936097635D241AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number:          0C23
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: Ao2TfO9q82pzuBIKAu8llc7f1+0jZBif2SA9sRJM4z4=)
                          2: bdzpUxndz61zfLz7ajjz4tyOnrg.roa (hash: GGVEBdFUMRnBM929MvvBO/m7RzF/RhhQavvdN/BpLuc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:de:e2:c2:82:18:70:59:36:09:76:35:d2:41:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=5a48ea8e935039690078503f413098846fc6f836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ea:03:d2:93:5d:dd:19:83:0a:03:f8:4b:e1:
                    7e:56:c0:01:92:4b:ee:8f:e1:32:32:c9:35:bb:ab:
                    45:a5:f1:88:03:51:d7:ba:e4:a2:22:20:95:1a:b6:
                    61:70:86:7b:cb:aa:fb:c7:bb:3d:91:fe:38:13:5a:
                    90:4e:74:dd:08:df:8b:58:89:09:0a:15:77:07:4d:
                    83:3b:82:76:57:a5:65:82:fa:1b:3c:07:9e:c9:3c:
                    dd:e5:a8:bb:87:97:c4:50:eb:fc:70:2f:26:e9:b3:
                    0d:5d:31:b4:e4:31:41:be:34:76:43:d4:e8:26:db:
                    9c:b4:04:f1:19:94:99:11:ad:11:30:e1:3d:bb:f3:
                    78:2d:d2:46:da:92:87:af:76:3a:12:2e:a8:c9:14:
                    79:73:7e:05:70:fa:55:35:5f:2a:ec:7b:50:dd:95:
                    f1:35:dc:61:16:47:e5:6c:13:08:c9:52:f3:67:6a:
                    35:53:57:49:5e:71:cb:d9:da:4d:81:7d:5b:8d:c3:
                    c8:98:cc:69:77:ab:c7:8d:f9:5e:44:eb:c1:97:2c:
                    58:7f:a9:7d:8f:5b:7b:63:82:52:e3:07:0f:da:c4:
                    3b:43:57:b3:41:d2:0d:0a:8d:47:51:6c:30:76:2d:
                    e3:31:c5:36:6d:ca:2d:d3:9e:84:ad:12:91:97:3d:
                    e9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:48:EA:8E:93:50:39:69:00:78:50:3F:41:30:98:84:6F:C6:F8:36
            X509v3 Authority Key Identifier:
                keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ae:2b:42:74:4a:57:73:74:a1:6f:60:b0:0c:60:05:67:eb:
         9d:46:92:4d:2a:5f:18:7e:77:8b:77:ec:2c:44:cf:d3:6c:dd:
         88:f0:da:51:43:83:73:e0:e5:5c:be:df:a7:68:e5:e3:df:5f:
         10:5c:a0:a3:b4:34:24:f5:c2:32:e0:64:79:24:b3:c4:fa:bf:
         89:c3:dc:02:a5:ac:30:00:c4:2e:1e:46:c9:d8:79:44:88:03:
         aa:c8:fc:8f:5d:55:30:ac:ec:35:7d:d5:9e:a1:8c:d0:67:88:
         97:44:b0:f5:bb:34:73:17:9c:52:7e:d8:5d:28:51:bc:14:30:
         7d:76:22:bd:42:0c:5b:3c:3a:b8:cf:3e:3e:cf:28:1c:ee:2c:
         de:d4:b2:78:4a:f9:c7:c0:3d:32:2d:3a:e8:fe:f2:1f:f0:07:
         11:db:50:1e:ba:fc:87:fd:c4:02:a6:fb:3a:54:95:18:c5:e2:
         63:55:3b:1a:cc:0d:49:cc:c1:34:cd:dd:6c:e9:82:4b:b0:46:
         39:f3:72:8f:e1:35:15:72:6e:ed:fc:a2:00:45:62:09:df:9c:
         3e:b4:b2:a5:d1:b2:63:5d:8a:6f:06:fe:5b:5c:af:74:0b:cd:
         90:44:cb:3e:bd:9a:00:71:da:da:00:b2:b2:6b:94:10:f3:4f:
         83:6d:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----