Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
File:                     cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json)
Hash identifier:          THTE4cxxNXqs1VJSJmnKBwsc6nTtJBQrOc3FVk388Wc=
Subject key identifier:   B9:21:58:EC:D5:0F:BE:60:39:E3:AC:9A:37:E2:3F:BB:D6:72:B2:30
Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Certificate issuer:       /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Certificate serial:       01962F0696D44BC76A1922AB4DDBA3CB56E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
Manifest number:          056F
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: PP1/RhZ5fwkBMhsEp3yAIpHLxuwOw5C4RdOAKiNQFQA=)
                          2: m3oyez4opl0YbbQ1CR2fl2aO7F8.roa (hash: FqYvVOjK/elvRD3q2xJweF4ZvocMCS6cmWVMXbFh3Mg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:96:d4:4b:c7:6a:19:22:ab:4d:db:a3:cb:56:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=b92158ecd50fbe6039e3ac9a37e23fbbd672b230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:fb:5e:91:89:3e:85:d7:24:e4:50:f7:83:
                    18:5a:ae:54:4d:d2:e3:1b:cd:31:96:4c:c2:bd:9d:
                    d2:35:34:8c:e7:28:55:3d:83:27:7c:21:d3:ff:88:
                    c0:03:08:07:d7:ed:ff:78:e4:f3:be:dd:25:01:45:
                    c4:09:88:62:d5:22:db:c7:1a:bf:0e:24:eb:d7:d2:
                    43:01:c1:f7:4a:5c:2a:1e:8c:61:c8:ad:4a:8f:97:
                    7b:b9:0b:e6:46:62:03:38:46:c4:47:2f:3a:04:07:
                    f4:95:f1:f0:ca:3c:57:91:1e:f9:a3:ac:9b:de:1d:
                    66:cf:24:cc:8e:77:c9:bf:bc:7a:46:f8:5a:b5:df:
                    4f:8b:2a:a1:96:44:b7:ec:9a:68:e1:54:6c:00:eb:
                    9a:0b:72:cb:e6:32:6d:ee:5e:21:4d:ca:b8:5f:7c:
                    d0:19:66:a7:92:aa:58:ad:92:a7:14:88:80:9b:d4:
                    25:0d:ff:76:f6:48:9d:51:c7:31:36:5e:17:fd:20:
                    b6:18:38:d2:38:97:42:e4:8e:5e:14:4b:f1:70:9b:
                    65:64:90:cb:94:2c:8c:b4:69:6e:c7:14:71:a4:78:
                    d0:4e:aa:50:5a:71:3b:90:5b:31:06:76:43:b3:1b:
                    e1:27:b1:2f:fa:87:c7:06:54:c2:d4:94:11:a9:3a:
                    a7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:21:58:EC:D5:0F:BE:60:39:E3:AC:9A:37:E2:3F:BB:D6:72:B2:30
            X509v3 Authority Key Identifier:
                keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:93:03:17:f5:09:85:4b:7d:91:23:99:22:b5:23:c4:64:ae:
         dd:76:8c:54:58:b2:1f:1d:53:64:85:1c:0a:36:3c:cf:55:75:
         97:c3:58:c9:63:b3:d5:a3:51:cc:89:ca:d1:ed:83:cd:54:02:
         43:10:56:1c:8a:30:fb:a8:a5:33:ae:d9:4d:be:f1:44:ec:18:
         16:4c:ed:93:9b:e2:fd:26:71:7b:b7:2c:6a:8b:e4:47:d9:71:
         ad:7b:d8:fe:c1:b7:6b:c5:a2:85:e9:ae:dc:e8:d0:8b:31:b5:
         a9:db:37:bc:a2:57:1d:77:59:ce:bd:0d:06:eb:c8:0d:01:90:
         4f:19:da:a3:db:c7:32:e2:32:74:ee:1f:cb:b3:3a:c1:99:d5:
         b0:34:fd:54:10:2c:5d:a8:6f:e0:c4:8b:17:84:de:0b:0a:31:
         2f:ce:97:f3:b9:d7:3f:79:8c:8c:9a:9f:33:7f:f3:5b:e1:a1:
         e0:05:5a:70:b5:08:a4:5d:74:aa:ef:d1:9c:79:57:4f:ce:4f:
         af:e6:55:79:f0:16:b9:88:9b:73:64:7b:a7:fb:ad:db:04:ad:
         60:de:10:57:ec:3f:14:e5:07:4d:d8:b4:6a:00:e9:c3:ca:d3:
         0a:45:01:15:0c:37:0f:28:12:10:43:3f:40:4d:10:84:1e:ca:
         a9:46:70:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----