Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
File:                     Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft (raw, json)
Hash identifier:          MF29gGtKDe4s1f+fvXVHWgBmOpRHf7lT1Bwj4R2gPCw=
Subject key identifier:   87:61:59:50:3A:94:0F:F5:29:E5:75:DE:F7:33:DB:B8:A6:32:A2:EE
Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
Certificate issuer:       /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Certificate serial:       01962ECFB7AD6E4087BB98D7D7BA5970DD6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl (hash: 7bUFavx4VYQ1yxjmaeniunfRB66xcEFw9w4Oa5Rt8Ok=)
                          2: xQ3PdmMDye_3ODxtjF3bxTEbrgU.roa (hash: OnYXJU1mRvo0V2FhsSO8D1b8k47DbXdYSrQ7JN4NAuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b7:ad:6e:40:87:bb:98:d7:d7:ba:59:70:dd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=876159503a940ff529e575def733dbb8a632a2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:61:cd:83:61:31:06:bd:9d:24:f5:8c:b9:24:
                    80:d6:16:24:68:e0:26:66:c5:b1:7a:f9:f4:5b:55:
                    a1:c5:f7:5f:e4:9a:42:0a:2a:a4:64:14:71:6f:be:
                    bb:ad:d0:52:e4:fd:b1:da:2a:32:37:4f:ff:97:b6:
                    9e:20:a7:1c:56:93:2d:78:5c:e0:42:c3:ce:0e:6f:
                    f3:89:08:c2:32:c3:19:b9:b2:bd:b1:f4:d3:d2:c3:
                    db:24:ab:24:ff:88:14:1b:70:c6:a5:e8:0d:0c:a5:
                    51:d7:0d:c2:9d:c2:fe:10:63:4a:97:fb:8f:eb:bf:
                    49:1c:4c:80:e6:54:a4:84:8b:49:8c:fc:3d:6c:94:
                    45:9d:7e:39:b0:ec:18:71:6f:58:ee:0e:7a:7f:f8:
                    52:2e:c0:34:f7:03:fd:77:d9:b0:04:be:8c:64:61:
                    f0:83:d9:7b:e9:1c:db:70:96:3e:b8:f0:47:a2:bb:
                    b9:ab:3b:21:ce:4c:14:1b:8a:7b:8b:f0:8e:cb:bb:
                    1e:0c:74:7b:93:2b:a2:19:11:a1:68:d0:7b:be:cd:
                    5c:a5:a3:6c:b3:40:7b:c0:3c:af:b5:ec:40:fd:9a:
                    7c:04:ab:4c:43:55:4c:7a:ef:46:d5:96:1c:a5:e9:
                    01:c7:ff:6a:44:cf:4d:f3:26:14:72:73:ad:40:b8:
                    68:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:61:59:50:3A:94:0F:F5:29:E5:75:DE:F7:33:DB:B8:A6:32:A2:EE
            X509v3 Authority Key Identifier:
                keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2d:6b:2f:5f:25:7a:d2:c8:ac:df:82:ac:26:be:06:eb:7b:
         aa:99:11:22:0c:bd:61:fa:25:83:79:63:e2:55:5c:d1:f8:58:
         53:b2:31:53:a2:39:8e:1d:b0:59:48:b9:54:42:f6:68:ee:e0:
         16:e3:43:6b:64:96:d2:af:fe:55:4c:bb:25:05:dc:b9:3a:78:
         6c:1b:0c:d1:50:a7:5a:23:d9:69:84:e1:99:33:e4:8c:d8:19:
         ef:4b:a0:0a:1c:36:e0:f6:1b:c2:a3:80:5b:a8:e9:24:6c:f4:
         5d:fd:cc:87:1a:9c:ea:ef:5a:a6:a6:f1:29:12:24:70:50:3f:
         64:ea:15:d1:1b:9f:35:7e:2b:da:3d:66:7c:ee:0d:49:7e:e3:
         52:aa:fc:70:64:3c:8d:8e:54:06:e0:6f:30:bf:f4:da:cf:da:
         4c:01:32:79:d6:1e:30:f8:6c:0c:b1:22:fe:72:29:fe:42:55:
         06:84:23:cd:da:19:a7:2e:ab:a6:c0:d8:6c:df:86:26:12:b0:
         9e:84:d7:ab:dd:7e:54:4f:f7:f7:f7:ad:6c:ee:fa:49:d2:50:
         68:be:4b:17:f2:0f:fd:c2:85:29:0f:d7:32:83:de:e5:3d:af:
         f6:53:e4:33:58:99:f5:ea:e6:3e:86:72:58:83:7c:41:cd:5e:
         3d:f3:f6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----