Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File:                     25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier:          6ehpdO2UL9I366ewMwBoQO+ZqmYemvMtv1jcszyDPTk=
Subject key identifier:   5B:A6:F2:9B:4D:54:55:3D:8B:A3:BA:36:E3:0F:E8:4D:F1:A7:A4:42
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer:       /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial:       01962DF405888E4246DB32AF7A4B90BDBA5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number:          087C
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: Yaw9l/hmzIFq2JcXpHK4dQX1xJ+O4SBXCTWeiH5e/j4=)
                          2: kQI24cv0NZjcs-NoEtkNWQr945M.roa (hash: lv4kdfvUyBf5e1wmjHgM1hbCJlTmhLUys8Yvw75WiAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:05:88:8e:42:46:db:32:af:7a:4b:90:bd:ba:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=5ba6f29b4d54553d8ba3ba36e30fe84df1a7a442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:3f:d6:93:43:81:c8:f6:60:19:e5:df:b9:
                    43:43:89:b4:0c:eb:89:44:3d:42:5f:25:08:cd:92:
                    14:80:c9:9b:6d:49:7c:eb:5e:50:a0:2a:7c:15:c6:
                    62:e7:29:4d:2e:83:b0:87:15:69:01:fe:12:69:8b:
                    3f:e5:2c:f6:29:88:92:94:4c:0c:67:61:2a:87:f5:
                    66:48:c1:a1:97:e6:ed:e9:60:b0:3a:e5:48:95:01:
                    be:ec:b6:28:d8:f5:50:ce:0f:f9:80:99:d9:0d:e5:
                    1e:11:c7:b2:5f:99:23:85:6a:a8:ec:07:1c:77:0e:
                    e5:16:28:c4:c4:7f:36:c1:eb:46:42:18:65:0d:2a:
                    9b:4d:b5:c7:5e:a4:12:51:53:97:f6:3b:ab:87:d8:
                    2d:56:53:e2:86:05:8f:bb:4f:1f:bd:53:ed:ca:22:
                    d4:35:9c:43:e4:e2:18:cf:b8:71:b2:19:fd:63:4c:
                    b6:9d:15:47:1f:95:ef:28:fb:7c:1f:e0:04:54:f0:
                    7e:20:42:38:31:dd:47:1d:27:a4:cb:35:fb:34:e4:
                    f1:e2:ed:cb:cd:b6:00:bc:69:5a:45:2f:d2:2d:06:
                    05:50:ea:b6:4f:41:75:99:5a:3b:52:c0:93:a5:6e:
                    67:88:e1:f4:fe:78:03:88:ed:6b:2c:17:6e:56:99:
                    1f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A6:F2:9B:4D:54:55:3D:8B:A3:BA:36:E3:0F:E8:4D:F1:A7:A4:42
            X509v3 Authority Key Identifier:
                keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:7a:ca:61:c5:f8:50:8e:21:f7:63:93:97:82:88:67:ff:d3:
         1b:0f:03:1f:77:05:39:3f:50:e7:21:85:2c:ba:a9:b0:49:4c:
         aa:8a:a4:8a:0c:db:d6:84:3c:9e:37:03:2b:31:7d:21:4c:d4:
         20:98:4b:ef:34:54:ad:80:06:97:1a:a7:c3:4b:fb:b5:03:70:
         aa:7d:b5:aa:c7:8a:65:ca:53:b0:15:54:5e:ac:84:71:69:8d:
         4f:36:8f:f1:97:44:3b:1d:6b:35:ec:38:cb:c7:1e:9f:24:7d:
         f5:fc:11:71:d3:8e:e9:8e:75:5f:6a:37:77:a0:36:58:1f:b1:
         4f:6c:7d:8e:4b:48:34:a9:01:8d:bf:fe:e9:be:4a:4b:6b:72:
         6f:d8:e2:2e:ed:e5:a9:60:f9:50:a8:3e:92:be:d0:2d:47:34:
         69:f2:4f:04:d4:c8:8d:48:d3:76:13:c4:55:60:fd:b1:3a:49:
         d4:ff:ac:64:6d:37:cc:83:6c:d1:d2:a1:f8:18:92:e0:81:93:
         5a:f3:71:a5:e8:a1:9e:6c:a0:7b:ed:99:a4:87:a2:11:06:82:
         47:58:54:68:36:17:52:ba:7b:4f:b4:08:6c:f8:ee:f4:59:15:
         66:7b:69:6b:23:55:d3:11:d0:cf:57:15:f7:6c:1d:30:99:00:
         6d:37:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----