Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File:                     A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier:          1ez8gm3SCLRc00Ue3N7M1Ul7egZ1WztxPdBKF++rUq4=
Subject key identifier:   36:F6:16:89:16:12:F6:EB:48:BA:15:EE:A4:C5:37:28:F4:0F:73:1F
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer:       /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial:       01962E61C1CEB0EF2213D8E989579BE63717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number:          035E
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: 7h2grz8OfZg3_f3qnvjsQOWeT0M.roa (hash: F0gJrE4+UT2zrGrF6oXGx/pjZ35hmL1zwnN5iPSHMCs=)
                          2: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: EnItUjg6MgIvkJbAUFV2JSY6IQEHr7Ns98aLBEPcAW0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c1:ce:b0:ef:22:13:d8:e9:89:57:9b:e6:37:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=36f616891612f6eb48ba15eea4c53728f40f731f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:c9:46:9a:4b:bb:4a:97:3a:49:5f:ad:b1:
                    05:89:4a:91:21:77:57:a9:63:68:11:03:5e:17:5f:
                    27:6c:6b:4e:cb:ed:db:4c:f6:fb:08:6a:3f:d9:4b:
                    1c:95:41:cb:9f:a4:88:c4:36:a3:54:e7:af:a2:df:
                    2d:b9:bb:c5:79:a1:a6:e1:a1:46:db:e2:bf:da:a9:
                    99:df:9c:98:71:61:8d:de:2a:b7:6c:ec:de:0b:17:
                    e9:e2:27:88:17:b7:48:c2:70:ca:a0:23:9c:6e:f0:
                    ab:65:59:45:df:82:1c:1d:c4:4e:2b:90:59:8d:ba:
                    88:f1:0a:07:d3:55:d4:e0:31:ef:da:8d:b5:c3:67:
                    13:47:56:2d:ce:5a:8b:b4:9d:f5:20:ec:ad:bf:d2:
                    99:9d:7a:63:dd:a9:9c:13:86:72:56:4c:55:a1:e0:
                    d3:8e:2b:a2:22:cf:0b:d5:c6:a3:84:c7:88:d8:a7:
                    18:d4:98:7c:4f:8b:0f:8e:ff:7f:bb:c7:22:49:fa:
                    27:3b:f8:7a:03:94:87:51:86:cf:d8:22:73:85:b8:
                    88:bd:d2:bf:c9:f2:cc:59:59:d8:79:da:4b:b6:b0:
                    ca:c2:ae:8c:a8:b0:6b:a7:55:bf:0d:88:77:d9:31:
                    2c:54:1b:9e:c0:27:48:e8:a3:8d:79:86:64:8a:3a:
                    bc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F6:16:89:16:12:F6:EB:48:BA:15:EE:A4:C5:37:28:F4:0F:73:1F
            X509v3 Authority Key Identifier:
                keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fa:d2:a1:98:b3:a6:85:60:bb:18:ae:76:e4:85:0e:7c:bb:
         16:b3:10:7a:b6:24:df:b0:59:c0:3f:37:90:3a:5a:28:9a:4f:
         3e:75:9a:f9:b7:fd:1d:52:d8:a4:50:06:ce:e3:28:ed:ee:7a:
         7d:59:d9:6e:a1:cb:2f:d5:eb:1f:44:45:3f:70:25:fd:44:39:
         71:52:4d:a4:37:90:5a:8e:93:1b:23:d6:d0:fb:95:db:11:05:
         19:93:6b:69:c6:7b:40:5c:23:84:ab:a8:15:7e:c6:0b:28:fc:
         ce:69:de:a0:0c:17:11:28:c6:cf:2a:63:81:b2:3f:32:d5:37:
         91:fd:d6:bb:b2:30:2c:ff:5e:31:60:bc:e3:54:cb:fb:d1:5b:
         ea:16:3f:c0:b7:47:9f:2e:a6:b4:72:c4:d5:31:cd:13:e5:2f:
         64:2a:16:0b:0f:c0:6d:d4:88:f0:ff:e5:88:92:ff:5c:31:14:
         ab:f5:c6:3e:0d:3a:42:3b:ec:35:e1:63:53:7d:87:ce:aa:26:
         aa:3f:fe:28:88:91:c8:c6:4a:a1:d8:90:f0:53:30:92:57:e8:
         c6:e2:d6:8e:0f:8c:73:30:1d:77:2d:20:81:5d:ec:f4:af:71:
         9f:03:41:9a:e8:f5:8e:ce:66:55:75:98:a0:12:7c:0f:9a:e2:
         36:05:85:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----