Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File:                     05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier:          +Cd+J983FQSl2Uwe6v1Y2wOKJ0/R7R3LmexewoErmXU=
Subject key identifier:   C7:A6:CD:91:D9:41:68:6F:ED:9A:CA:FF:7A:70:CB:C7:42:31:CD:5F
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer:       /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial:       01962E98CAB6EAECB7622E034EF6C1F14C4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number:          0FDB
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: yLWcEodiYJVifsGxWNysnTOoRJsw3C9Kj34t9oA8iEo=)
                          2: rB2INOwVRpDLnI62nHFRLMGjim8.roa (hash: 4e9dGvThW6tLmtEOnyeNLHSG2RRsUkaY7l6l90Sl8lc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ca:b6:ea:ec:b7:62:2e:03:4e:f6:c1:f1:4c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=c7a6cd91d941686fed9acaff7a70cbc74231cd5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:54:0e:77:68:9f:30:8f:28:16:f8:51:0a:9e:
                    88:1b:83:27:59:43:83:02:12:cd:41:6b:1e:53:88:
                    10:08:96:0c:ac:e4:90:72:1a:b3:f8:ec:81:ae:88:
                    56:7a:18:fa:4e:80:b8:1d:61:0b:0d:58:dc:78:da:
                    dd:71:ed:aa:a0:07:f0:7a:d2:0d:4b:3a:ed:9f:59:
                    ac:e8:85:bf:9c:f5:87:28:78:c3:d0:32:50:4b:66:
                    22:46:aa:c7:0f:e7:86:da:7a:f1:f7:e3:7a:fa:7c:
                    96:2c:74:ce:10:24:6b:a0:e3:71:45:b8:fb:3c:8e:
                    2c:02:8d:12:d8:e5:2e:6f:11:53:2a:7f:23:b3:ce:
                    50:d3:9a:a8:6f:2a:7c:31:7a:36:75:49:22:f2:a1:
                    bd:ca:78:e0:d9:c6:38:08:5d:78:1f:6c:eb:e5:15:
                    a9:02:7a:df:75:1f:0d:bf:11:66:58:eb:04:ca:e9:
                    69:3a:2d:e1:40:2f:80:c8:2f:b9:a6:51:f4:15:40:
                    63:7f:5b:99:9d:4e:8d:72:a9:da:dd:f7:a7:db:d3:
                    62:ae:ed:ee:7c:69:96:1f:11:00:7e:f3:3e:18:07:
                    ab:92:1e:2f:e2:19:05:24:33:05:3c:8b:54:4f:4c:
                    7c:39:40:34:bb:4e:c4:b8:b9:49:15:e3:eb:0a:32:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A6:CD:91:D9:41:68:6F:ED:9A:CA:FF:7A:70:CB:C7:42:31:CD:5F
            X509v3 Authority Key Identifier:
                keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:86:52:89:79:9f:4a:66:36:33:90:58:ef:81:79:19:8a:e3:
         94:36:84:b9:e9:f2:e3:c2:85:fe:fb:3b:ad:12:99:7e:f2:ce:
         2c:99:5e:1a:89:f3:bd:a6:57:d3:92:a3:14:ad:84:46:2c:91:
         5b:3e:37:cc:44:73:4b:bd:11:16:fa:cf:b0:0a:0c:e3:3f:ef:
         52:20:ea:d6:56:82:20:82:4c:b2:f9:cd:b5:f5:da:a3:f5:6f:
         a7:b5:70:ac:79:15:33:17:38:20:e4:42:b7:6b:4c:e9:bd:2c:
         df:56:53:3f:33:1d:16:00:8e:f1:71:38:28:70:3e:37:5e:76:
         4d:20:38:18:37:c8:b7:f1:6f:7b:43:11:3c:40:67:bd:27:3d:
         93:1f:f2:d4:1c:5a:96:48:4b:45:26:57:e5:32:e9:8b:36:88:
         92:1e:71:7d:5d:77:21:20:bc:3d:f9:36:65:90:48:80:3b:d6:
         20:a4:eb:d2:f5:83:46:4a:c2:34:df:5f:f0:2e:b1:2b:ee:32:
         81:c4:56:84:fe:34:74:0f:40:fd:ea:7e:75:89:01:8c:20:e5:
         01:a4:e2:78:1d:56:37:e2:4c:dc:06:c2:1f:e3:cf:25:5e:44:
         71:1a:83:dd:50:c0:6e:cc:7e:2a:84:04:1e:57:04:ed:41:a3:
         d6:ee:ec:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----