Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File:                     A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier:          VE5XetRe6Eui5R51TA0Uql3K9iKTARQWHHFQ6xr9WvA=
Subject key identifier:   55:B8:68:E6:03:07:16:04:49:F6:08:48:D9:04:6B:66:82:8D:26:50
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer:       /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial:       01962F06B9BF7DE5699AE4D79645F6F77957
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number:          10F7
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: zX4tXvzEruwa0ou9dt9+3A+3A6NRteuAM/VVcylyrQk=)
                          2: woal0JSD05J3-HE_srcu4HZklsQ.roa (hash: K5meebvZSg84nTxN3gUNn0hvuS4tbvBQ0f3EUj0mZV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b9:bf:7d:e5:69:9a:e4:d7:96:45:f6:f7:79:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=55b868e60307160449f60848d9046b66828d2650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:99:18:9d:6f:c4:be:8f:4b:cf:8a:9f:4e:
                    00:c6:7e:f8:6e:e3:e2:45:5e:89:ba:ac:f1:2c:5c:
                    54:bb:44:fc:c7:8d:86:92:ea:f0:fc:22:6e:90:ea:
                    8a:68:7c:1f:8c:58:7a:d1:fb:0b:5f:44:6f:6f:9f:
                    4a:fa:c1:22:ec:c8:f8:0b:f2:a2:80:31:87:92:4d:
                    04:02:df:8e:0b:cc:ef:84:6f:84:6e:26:a2:74:9a:
                    47:0e:66:ae:6b:9f:8b:e1:05:88:87:55:0b:72:76:
                    34:d5:5b:34:71:83:6a:93:7f:ac:55:e7:fa:6c:00:
                    80:b4:7a:e3:40:0a:50:62:84:42:70:00:a4:52:74:
                    13:a6:15:d6:4f:d3:7b:7b:fd:4a:fe:5a:39:ea:be:
                    b0:eb:f4:47:0c:c6:fc:db:4f:04:4a:60:90:08:63:
                    d9:79:77:75:64:63:2e:67:bd:c8:a6:0e:77:7d:a1:
                    26:84:45:65:b8:2f:1b:b2:24:d4:f0:a9:9e:4f:06:
                    0e:58:e4:7a:b1:65:ec:78:5f:ac:97:2d:dd:2b:b1:
                    21:06:f6:92:41:b8:91:8b:de:fd:1c:58:d6:4a:14:
                    82:e8:80:c4:dd:a6:75:0f:ae:4a:62:d8:a0:3a:8b:
                    64:fb:08:5d:7f:54:81:ae:e4:96:af:54:f6:c4:41:
                    5a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B8:68:E6:03:07:16:04:49:F6:08:48:D9:04:6B:66:82:8D:26:50
            X509v3 Authority Key Identifier:
                keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7a:2a:11:d9:d0:72:96:4e:39:1c:6f:0d:e9:da:3d:59:36:
         4e:23:59:2d:29:a5:f4:9d:82:1f:45:c3:4f:f3:c0:3b:7f:5a:
         1b:8b:8c:61:a5:87:64:11:31:7e:6b:28:48:ae:3c:16:c4:d9:
         cd:b0:59:51:78:77:3b:7b:51:11:f4:ff:94:df:67:9c:58:90:
         fc:46:bf:4f:23:f4:04:8d:2b:33:2c:91:8d:7c:3d:8c:af:d7:
         8a:f6:58:bd:68:98:42:de:95:aa:0f:2f:c5:87:8c:51:6c:1b:
         8c:52:08:3f:7f:8f:60:ed:67:25:18:57:ec:7b:83:aa:a4:91:
         87:22:e1:a2:5b:49:a5:ee:70:25:79:55:22:96:0f:32:ef:ce:
         51:fd:f0:ef:a0:e9:34:8c:e6:d6:31:a3:3a:ab:69:d8:93:0a:
         21:24:59:f3:da:a0:4f:54:14:c9:fd:65:d0:73:64:d5:8b:f7:
         5c:63:e6:1a:a3:c7:83:33:cf:cb:31:95:73:b3:30:1e:18:8e:
         2a:6d:61:63:c0:e0:5d:76:65:09:d2:97:c5:fa:d1:d9:94:61:
         4f:21:cd:43:65:d6:2e:b6:e7:26:64:2c:4b:d2:42:ac:93:e1:
         bc:30:cb:9d:d4:d4:bc:b3:b0:60:11:27:1c:20:1a:2a:1d:b7:
         e1:6c:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----