Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
File:                     B6MpmcR-sx1fvxbsw4curv1Dutc.mft (raw, json)
Hash identifier:          rcbJlgfikbyPxQQiI7FYCLtK//zegVBHUfF5w3e2TCo=
Subject key identifier:   15:8F:1E:BF:11:94:C8:EE:AC:E3:10:0C:A3:6A:B8:23:F1:BE:5A:9A
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Certificate issuer:       /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial:       01962F3D2AF31B3E1D30DAD479DDEA8E9D3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
Manifest number:          05DD
Signing time:             Sun 13 Apr 2025 13:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 13:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 13:00:59 +0000
Files and hashes:         1: 0X1Ipto9w1nE9eagzvuD9O-P6yM.roa (hash: 4sHYt9ffM1owRIY1+dPqOYaSkh7XHYwPkbzwcWqEjcU=)
                          2: B6MpmcR-sx1fvxbsw4curv1Dutc.crl (hash: IS68JCUAGj6bPhUKaZOHuFo9bsGIrKwYuZo6bYeR4eA=)
                          3: SQDJFyKznGtCKVmkEUnYaLhptpU.roa (hash: XEPlk5OXn/XLJYfgloRDlJ7X9N7ypjZHyh9xzsTH0Bw=)
                          4: gfOuYPIFKu1t4LchnV-tiQ23x_o.roa (hash: MaDF2nJtr0HdC25PICF1gfuevH1AQFouYi3XzrLGpak=)
                          5: lJbNpjDeQwgeWqfPEZgDDfSTgqk.roa (hash: XMlSfbRCxrO9BsObz26QxJ616CDdqXCBLUK5IzvxZFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2a:f3:1b:3e:1d:30:da:d4:79:dd:ea:8e:9d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
        Validity
            Not Before: Apr 13 13:00:59 2025 GMT
            Not After : Apr 14 13:00:59 2025 GMT
        Subject: CN=158f1ebf1194c8eeace3100ca36ab823f1be5a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:72:c5:3b:76:ee:09:87:21:c0:37:c0:3e:
                    07:88:7a:25:28:d7:fb:9a:d4:92:64:fe:46:3f:ea:
                    69:96:b7:51:67:6d:3d:4f:61:ea:b7:4d:10:b5:39:
                    45:6f:13:0a:d1:94:6a:6d:75:cc:3b:13:6c:53:55:
                    00:34:ee:2f:37:30:fb:bf:52:cd:cd:c7:c1:05:21:
                    9a:08:74:e6:6b:61:ec:31:75:44:9d:60:c2:3b:a1:
                    dd:4d:6f:c8:b6:34:0f:75:49:90:f3:1f:87:da:e5:
                    e3:2e:f6:aa:17:48:60:1f:85:c9:df:7c:88:07:9b:
                    29:42:5a:fa:0b:da:9f:88:0f:16:16:fb:1c:9d:68:
                    18:dd:c0:f3:3c:52:ad:f3:58:3a:d4:b8:94:25:a3:
                    d0:17:20:85:ef:ac:ed:c4:de:85:95:a4:6c:85:2a:
                    bf:64:88:39:82:1d:49:e0:f8:f1:8f:0d:83:87:49:
                    3d:38:bf:3c:d6:c4:48:d5:76:5a:aa:a5:95:9d:09:
                    84:d2:cf:b2:93:b5:de:cc:f2:db:38:3c:a7:54:ac:
                    dd:48:8b:ac:14:27:5f:b0:8b:d9:71:ad:e7:2d:b8:
                    d1:27:8b:31:a6:91:b1:d9:92:44:bc:c5:e3:e2:dd:
                    6b:41:bb:19:c1:7c:00:4b:28:59:69:b9:a2:d9:b6:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8F:1E:BF:11:94:C8:EE:AC:E3:10:0C:A3:6A:B8:23:F1:BE:5A:9A
            X509v3 Authority Key Identifier:
                keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:8e:68:75:b8:48:9a:20:c8:71:e0:da:80:ff:11:4f:81:
         40:d4:75:a4:7c:79:00:c6:e3:39:48:8e:20:59:d6:67:97:62:
         38:d0:eb:cc:14:32:dd:e3:6f:76:1a:9b:f7:57:25:46:40:f2:
         4d:74:8c:eb:0f:57:69:f7:68:a1:90:11:08:5d:9e:e5:36:07:
         9f:60:b7:59:9a:c3:4e:0f:ac:9b:78:61:5c:e3:af:70:35:51:
         81:5f:42:b5:80:4a:cf:9b:14:30:5d:e1:c2:33:c1:9f:48:1c:
         27:86:5f:ee:71:6d:ce:40:ed:60:d1:f0:dd:68:f4:41:e8:02:
         51:a5:dc:2f:93:a7:c1:7f:3c:57:8f:9a:f5:f6:f8:a5:aa:1a:
         a8:f9:84:fc:c1:d8:0b:2b:4e:a1:ef:fe:f3:77:30:ad:d5:29:
         ba:47:2a:a4:0c:07:48:15:08:9e:a5:f3:53:68:be:2a:80:44:
         fb:15:64:80:d1:89:fd:ce:3a:dd:10:86:91:a8:d3:ac:17:dc:
         0f:36:fb:d5:3c:2d:e6:4c:83:c2:e1:e0:cb:ee:e9:ac:78:ce:
         61:46:88:cf:73:5c:b7:2b:5b:d7:4a:d7:f8:2e:fe:8a:17:0b:
         76:b7:a0:9f:bb:57:40:53:14:a1:ce:95:71:64:fc:fc:b4:63:
         21:ed:4a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----