Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File:                     mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier:          EeTC6Ycp5uHZk4Z/FZkj9lw6jdG5mlAIV13qH4vaY9M=
Subject key identifier:   21:B3:22:A6:A7:74:51:1F:9E:95:93:D9:CA:05:FC:A6:37:96:C7:40
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer:       /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial:       01962ECF968C98D7490D8E8E865219E0AC91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number:          05D4
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: kczq6JpScUJjoLBENm1dP0FVMVkNoN+XCEnv3mkzb4M=)
                          2: tD16yJgx6FslawER1Evjktr90DU.roa (hash: IgaqAI1HCcxs2x01fN4KAw3fM/ZJo5SCnC5NuJ1Z+9Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:96:8c:98:d7:49:0d:8e:8e:86:52:19:e0:ac:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=21b322a6a774511f9e9593d9ca05fca63796c740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:60:4a:cd:cf:a3:bc:a1:36:64:22:97:bc:26:
                    b5:fe:7c:a8:41:1c:56:bb:f0:18:3d:d3:46:81:cb:
                    38:ea:e1:9b:dc:a4:4b:8a:05:70:e1:80:a1:3c:e1:
                    19:27:ea:be:36:81:1e:51:70:17:84:0f:29:22:7e:
                    ae:f2:2d:6e:55:1e:c3:dd:d2:46:d1:9b:22:4e:18:
                    f7:00:76:f1:5d:2e:8b:dd:e0:1a:4e:27:d9:b3:42:
                    a5:70:da:ba:3d:e8:d8:a9:6d:b1:2a:f1:9c:c3:44:
                    80:e5:68:97:ba:25:a3:73:2b:66:d2:36:2a:15:de:
                    f1:51:6c:6a:3d:a1:6f:ad:46:67:50:3d:01:ea:1c:
                    63:d3:2d:2d:24:38:17:43:1c:02:9b:da:87:6f:5c:
                    f2:1d:b0:a4:07:4b:bb:00:61:c6:22:54:31:b9:11:
                    21:87:9c:35:2d:2f:04:52:01:18:93:f7:1f:e4:69:
                    23:fa:93:73:c0:30:fd:1d:83:e1:62:51:25:25:44:
                    ce:e5:65:5e:25:af:ef:ef:03:2c:3a:57:c6:48:f4:
                    b7:91:2a:37:c5:5f:73:71:c0:e1:31:f3:0d:e4:e1:
                    62:0b:e1:8e:98:b6:3e:4d:75:0f:cc:fb:9d:33:d6:
                    cd:e5:e8:41:0e:df:4c:fe:98:ac:7a:0c:57:01:1c:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B3:22:A6:A7:74:51:1F:9E:95:93:D9:CA:05:FC:A6:37:96:C7:40
            X509v3 Authority Key Identifier:
                keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:32:93:99:f3:1f:a1:e4:69:6f:88:d0:8e:e4:4f:8f:5b:4d:
         95:7d:b2:09:59:22:42:c4:ae:31:9d:e8:ea:08:dc:f6:ce:e2:
         35:84:c3:3e:39:f4:9b:d2:7f:c5:19:47:ed:df:4c:18:bf:ad:
         79:b3:e1:03:45:81:5e:18:39:23:9a:32:13:c8:f5:58:98:e1:
         c6:5d:a7:9f:34:df:ef:dc:a4:22:f4:ea:b9:6b:55:42:38:ea:
         4a:f9:d3:41:09:a2:00:da:40:83:8c:f2:fd:ba:de:af:d6:14:
         94:ba:e0:61:84:12:36:ba:c3:bf:3c:dc:a7:65:83:e7:a3:3a:
         5d:79:26:d0:b6:af:4f:b1:68:cc:ce:c0:a6:36:b2:94:8b:ac:
         66:99:63:4e:0e:8d:87:b6:3f:14:1e:90:05:7e:dd:dc:2c:70:
         9e:d9:ba:4e:0e:fb:2f:71:ad:d6:86:e8:68:40:3c:ba:82:62:
         69:a7:22:73:5c:4d:0a:1a:3d:7d:8a:7a:42:30:ba:44:29:a5:
         ac:81:a0:f8:e7:38:1f:a6:9b:2f:7e:7d:03:3b:7f:fc:74:49:
         ce:a8:e2:aa:35:a1:ba:9c:c1:48:12:73:d7:fe:08:5d:37:6d:
         b7:34:64:bd:b2:b3:a2:39:a4:96:3c:d2:9e:3f:f2:0e:f7:a9:
         fe:d4:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----