Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
File:                     cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json)
Hash identifier:          yGY4yUOAKZDEyEgJk9cYYi8jmnSDs24I5i0qflQJYh4=
Subject key identifier:   ED:88:3F:AF:7D:35:8A:DC:E8:6C:12:E3:7D:AD:22:A5:31:AE:83:71
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Certificate issuer:       /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial:       01962E618D0D005AAD4944B76260D8D150D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: 9qsPYE67U8LKJS5RPyzpaJjKAjw.roa (hash: ate2+ga4mYDOeR+5DaCdTzRa6tHIKsrgVcrNBTn+5LQ=)
                          2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: ZN78aKKH1piy9TZdQzN1NArmYD8NfPsk6FopVFB/ZaQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8d:0d:00:5a:ad:49:44:b7:62:60:d8:d1:50:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=ed883faf7d358adce86c12e37dad22a531ae8371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e1:18:34:e9:9f:ba:c7:21:6b:d8:22:d3:fc:
                    f9:11:ed:7c:11:e0:93:19:3f:e5:0c:a4:cf:4c:be:
                    7f:be:f4:84:42:7b:ab:4e:51:0c:d7:14:06:21:38:
                    e1:c6:f9:ef:9e:bb:6c:b2:ee:ff:5a:cc:ac:71:84:
                    46:09:c2:52:32:21:d3:52:aa:a2:d6:35:ff:ae:7d:
                    f4:0d:eb:fe:f8:67:3e:9f:de:51:31:5e:96:69:b9:
                    0d:90:27:63:ee:81:68:27:89:3c:e2:a9:8c:ff:cc:
                    e3:c0:35:8e:0a:c3:40:91:44:7b:c6:05:ed:67:7a:
                    82:e6:e3:eb:2f:fb:63:3f:60:c1:45:fc:00:68:10:
                    3e:f5:b5:1a:00:30:4c:dc:e4:bf:8c:70:24:c4:41:
                    03:9c:8d:73:40:a9:e9:ad:ef:a6:d8:5d:e0:c1:8f:
                    81:59:73:15:9d:3c:35:da:6b:39:13:11:4f:d6:90:
                    80:8f:4e:c8:d8:e4:b0:50:48:27:22:a6:2f:ab:07:
                    3b:3b:42:b4:cb:b3:fb:de:fd:44:32:99:84:6c:86:
                    d5:42:19:63:e6:44:02:be:db:85:8d:74:36:d9:e5:
                    18:84:30:72:1d:86:8a:fd:3e:bc:53:a9:7c:c9:6f:
                    fa:75:5d:84:10:6a:fe:50:79:a1:4e:64:bb:c7:aa:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:88:3F:AF:7D:35:8A:DC:E8:6C:12:E3:7D:AD:22:A5:31:AE:83:71
            X509v3 Authority Key Identifier:
                keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:62:ad:d0:5c:19:16:44:55:7c:47:1e:d1:73:b3:ec:3a:88:
         fa:73:66:81:8d:19:17:7b:7d:cf:ae:28:69:09:72:2d:54:91:
         7f:32:5d:97:60:de:ba:c8:34:12:d1:db:c8:50:25:08:f7:1b:
         8b:ce:53:a2:be:49:29:1d:40:fa:ae:19:cd:81:a8:ce:8c:1c:
         e3:6f:aa:d5:a9:e6:97:31:96:68:c8:4c:e4:ad:52:8b:ca:46:
         d8:f0:93:c4:2f:a1:48:1b:5b:f1:b9:2d:ff:db:4b:10:b7:1f:
         9b:f8:36:bb:8f:fe:ce:c3:e3:50:98:21:61:cd:af:d2:c7:f2:
         8c:be:24:2a:7e:07:da:43:64:3c:1b:d7:d9:7d:97:53:b1:02:
         0c:3c:0f:7b:2f:f9:4a:73:17:93:b6:77:d6:04:4e:fb:3d:b6:
         df:ea:7b:e7:f7:dd:99:08:f6:dd:c9:41:1a:c3:a1:b5:e5:3c:
         73:31:d7:fc:45:d3:43:8f:6f:c5:fc:6a:9f:45:60:91:a2:12:
         f4:c9:c9:7d:75:e2:70:56:51:b8:4c:91:27:d1:64:d8:08:85:
         a4:e9:e9:6d:3b:b8:0b:a1:c3:cc:65:65:a4:91:90:4e:35:45:
         77:34:36:3b:f8:36:df:88:2a:a3:e2:18:1a:37:e0:61:78:19:
         66:b2:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----