Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File:                     9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier:          RwnUnlgDuGWa/LmyJ7zuAOlgN3f6wfUuRRcFp3TMpR0=
Subject key identifier:   BD:39:DD:04:FA:DD:C7:53:9B:14:76:16:07:55:06:CD:14:9F:B9:E6
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer:       /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial:       01962DF3C53E2AA0B17305574F9304C7418A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number:          020B
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: BeYtIH0JW6e3mVVKOVjr/YzUKqmE+VI+9NPIRqDZkzY=)
                          2: i8fQ4SDQp7cMewdMesiICFs9ZAg.roa (hash: bCMQ7OQEomrpckp+sy5Q02dQCcDmXIN8SQy3NDUMNVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c5:3e:2a:a0:b1:73:05:57:4f:93:04:c7:41:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=bd39dd04faddc7539b147616075506cd149fb9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b7:45:1a:95:2c:f7:89:6f:7d:00:3a:ee:55:
                    52:d1:70:7d:69:f0:35:f9:83:bf:9f:3e:90:76:2a:
                    f6:6e:b9:17:99:0d:cf:32:f7:7f:1b:00:ea:a9:15:
                    02:70:7f:56:e6:e9:21:18:41:22:a6:a3:c7:e4:dd:
                    a6:54:f3:b3:46:71:88:c4:b4:20:7c:54:ce:4c:52:
                    cd:63:02:d4:7a:9d:56:f9:28:83:31:c7:0c:a5:eb:
                    b7:27:d3:4f:aa:22:66:89:fc:a2:12:ce:23:7d:40:
                    13:5f:e8:a4:fa:a8:e5:73:08:d7:56:2a:fd:2a:4a:
                    04:b1:a4:be:fa:24:0e:9b:0c:c2:d5:ae:5b:ad:79:
                    ca:02:22:58:8e:c8:a7:e6:e0:4a:ef:92:bc:58:4f:
                    13:22:02:a0:7a:4d:a4:b6:e1:d9:32:90:fc:e1:35:
                    45:6a:76:89:b6:95:85:2d:80:4d:54:b8:f4:59:9b:
                    24:90:f9:82:d9:07:5b:8d:85:41:bb:30:0f:ab:20:
                    47:9b:54:36:97:5f:58:28:47:fd:e0:4e:05:47:2a:
                    52:eb:cc:3b:24:67:fb:a4:c9:c0:9d:a5:82:83:e5:
                    06:8f:7f:12:b4:f3:c8:08:2e:ca:4c:2f:c0:7a:61:
                    59:59:9b:c5:5a:e4:aa:82:93:d2:30:68:f5:03:19:
                    bd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:39:DD:04:FA:DD:C7:53:9B:14:76:16:07:55:06:CD:14:9F:B9:E6
            X509v3 Authority Key Identifier:
                keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f6:46:4d:e3:fb:5a:b4:d6:7e:b6:fe:e4:04:ed:45:b3:45:
         ed:4b:d9:89:c4:b1:79:b5:f1:ed:a4:3f:cb:73:2e:1e:a5:84:
         a0:d7:7e:c0:7d:be:60:2f:2f:fa:3a:e3:cd:bb:24:01:97:d8:
         48:20:69:a1:9b:47:f7:13:2d:17:6b:87:0f:43:6b:34:34:94:
         d0:b2:df:18:e0:72:70:49:79:11:52:2e:32:28:ff:84:16:6f:
         4e:83:28:21:31:dc:21:1f:d1:c8:6d:77:00:e6:1a:00:09:0d:
         77:28:a9:ad:a9:15:d8:f0:55:5f:dc:44:a6:da:df:7c:b2:65:
         86:96:b2:ca:06:45:7c:9e:f5:b5:b1:02:64:09:52:26:f8:ea:
         8e:9f:48:8e:e9:a7:5c:57:12:7f:6d:c4:13:16:82:ef:5c:51:
         4f:ff:78:ae:8b:2f:7e:37:b6:67:be:42:be:0f:12:6c:07:5d:
         de:db:60:cc:a5:0f:40:5a:62:df:ac:b2:ae:7b:26:ef:65:92:
         06:0e:9b:e2:97:70:c6:26:a6:7c:25:e0:9c:9b:8a:c3:ce:64:
         fa:37:cd:0d:3f:ca:af:27:cf:05:23:68:49:5c:e3:70:b1:44:
         c0:ed:8d:b1:08:d7:45:60:6c:7f:bf:c6:c4:f9:d7:a7:a9:2a:
         ac:31:95:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----