Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File:                     mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier:          vRfj6mJOAhgyLWsgexjVC2PgbcWTQGnAlV7QOAgGGRY=
Subject key identifier:   CA:6E:88:E2:56:D6:DE:AF:51:DD:78:9B:4F:A5:BE:80:77:B7:D0:22
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer:       /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial:       01962DF3F2A2DB2E022AC511494C938B1C1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number:          045E
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: eVKsEsZr6gB68Zo9TNcu-9I752U.roa (hash: EZGdWjVxX6cyHbSc76sTqplIRnZDqoYAvS/hd1OeT4Q=)
                          2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: qgO4ydGwVkw2W5+dTtTPEpoAfLWlCezDEHi6U2I/wik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f2:a2:db:2e:02:2a:c5:11:49:4c:93:8b:1c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=ca6e88e256d6deaf51dd789b4fa5be8077b7d022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ce:61:51:1e:d9:29:87:e6:be:07:f3:aa:f3:
                    f2:e1:b1:76:d1:69:7d:99:7f:80:63:7d:36:c2:11:
                    6d:53:35:8b:75:56:7f:26:28:26:24:66:64:0e:bc:
                    1f:b6:86:83:c2:0d:dd:1c:e4:c4:43:80:1f:a1:88:
                    2e:51:f7:f0:67:7d:17:fb:17:ce:0f:aa:de:18:f3:
                    ca:0d:2c:cb:d5:47:01:a0:4e:9c:7f:84:3a:fd:9b:
                    1b:99:35:c0:02:97:85:65:3e:60:5f:f7:ba:84:3f:
                    84:10:05:21:a9:0b:ed:e7:b5:d2:7a:84:79:5e:f6:
                    02:c2:ca:08:b0:5d:06:3a:85:22:9e:70:03:49:41:
                    a0:c1:98:30:37:7e:15:8a:35:16:4c:58:de:fc:bb:
                    83:28:79:6f:2b:a6:0d:41:c7:c5:f4:7a:a9:73:5c:
                    f7:c6:b4:4c:41:66:41:25:7d:ed:03:2e:bb:31:4d:
                    19:34:22:52:48:d3:1b:be:bf:77:eb:b1:50:45:92:
                    c5:dc:e1:68:09:f0:71:51:86:a8:9e:07:ca:b4:9b:
                    99:25:fa:a6:4c:df:b7:90:16:a1:02:5f:45:1f:ff:
                    19:ba:a8:38:44:c0:44:49:f6:69:c5:13:7e:d6:cb:
                    a4:a6:89:8e:4d:02:54:13:e5:e9:61:ba:09:fc:fa:
                    ef:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6E:88:E2:56:D6:DE:AF:51:DD:78:9B:4F:A5:BE:80:77:B7:D0:22
            X509v3 Authority Key Identifier:
                keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:31:3c:1d:e5:19:47:c7:29:81:b4:82:f7:9f:b7:c7:75:35:
         4f:91:73:25:5e:19:d5:8d:79:49:cd:0e:6d:9c:8b:21:85:bc:
         b6:ae:08:fb:70:5e:9a:b9:03:81:d0:8a:8e:9d:fa:d3:e0:83:
         e4:e3:8a:ea:07:5d:30:65:90:52:36:e8:cb:1a:d7:8d:0e:23:
         fb:17:4e:d6:61:c0:8e:b9:17:db:b1:5f:a8:70:8f:c2:b4:4a:
         71:b7:47:47:ea:48:84:90:97:23:a1:eb:aa:97:57:82:63:60:
         b9:db:0e:e8:61:9b:cd:e3:f4:05:ef:9b:b7:14:45:64:2e:3a:
         19:3e:ab:a6:a4:ca:20:22:b4:31:d6:ea:2b:6e:a6:ae:c0:8f:
         aa:2f:f3:93:7e:0b:dc:43:63:8a:a5:ef:50:9d:21:44:db:06:
         a3:e3:c0:ce:0f:29:7f:27:50:27:d9:fe:86:86:40:0b:f5:82:
         2c:43:a2:93:4d:03:2b:14:62:1b:e1:ad:43:08:0a:62:2a:f1:
         07:d9:f1:e3:73:f8:75:a3:19:44:1f:80:06:57:c2:d4:f4:3c:
         ca:1c:2a:bc:38:d8:f5:24:7b:b9:09:f3:d7:e6:a0:80:3f:40:
         2c:0d:95:4a:da:92:85:a9:1c:f5:04:07:23:8e:3a:d3:63:0a:
         4e:15:d5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----