Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft
File:                     MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft (raw, json)
Hash identifier:          +EA+0K7bxjdYz9DYJFlHfVlv3wtqWY7aWTMHXe2Xuyc=
Subject key identifier:   3A:73:4E:2C:E5:A4:ED:51:BF:AB:F4:CD:50:D7:94:D9:83:68:BA:21
Authority key identifier: 32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7
Certificate issuer:       /CN=32507f9e078be89932e91b23acf882ab467c6aa7
Certificate serial:       01962F069AA3F7E3D35015F8629AF53B5BA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft
Manifest number:          0A5F
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl (hash: PcEdADGAmh0MlXIQ8Yd1B9pT7lh6JcQbHEvaBgglJOY=)
                          2: QfrRCybDqFm7xRQ9KjUz6BIzKE0.roa (hash: YrxsXgfls6BVbz+S7KqunX1/zH0o4Orz7g8fkYHg2uk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9a:a3:f7:e3:d3:50:15:f8:62:9a:f5:3b:5b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32507f9e078be89932e91b23acf882ab467c6aa7
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=3a734e2ce5a4ed51bfabf4cd50d794d98368ba21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:92:10:ca:24:95:0d:70:4e:14:fe:c9:b0:
                    8c:2b:0f:ef:f1:63:5b:3f:97:f2:de:5d:d2:47:e1:
                    d3:72:12:6a:4f:1d:14:be:a2:30:fb:8b:b7:e9:75:
                    39:d9:fd:9f:b0:a2:59:a8:e9:22:ba:81:67:7b:4d:
                    a3:5c:58:6e:a5:40:09:42:7e:b3:92:cf:8e:97:e1:
                    0e:6e:8b:4f:3a:7e:7e:3e:47:db:e1:14:2e:e0:9d:
                    0e:e1:2d:95:53:ac:b5:dc:38:ae:e9:38:51:31:f8:
                    00:43:65:cb:c9:65:34:f7:12:2b:e7:2d:68:90:a4:
                    7d:f9:f1:cc:99:62:d5:4d:4d:6d:a6:3d:8b:f5:98:
                    bc:62:99:56:4c:6a:5a:9a:d7:6c:cb:0f:33:a4:54:
                    05:1e:de:49:9d:8b:8d:9d:66:1d:5c:b8:09:3f:3b:
                    03:9a:7b:e4:be:e4:7b:b7:a2:31:08:55:ee:ad:b3:
                    23:a3:5c:d6:34:35:24:ac:58:6f:4e:a3:75:2f:f7:
                    b1:f2:58:f3:14:73:f2:f8:2a:ea:e2:67:8a:51:11:
                    46:c0:f3:71:45:0f:16:c1:ce:72:3f:e3:19:9a:7e:
                    db:55:26:23:0a:42:87:7a:90:65:e5:9e:ab:bc:df:
                    54:8a:b9:70:51:37:c2:3f:e4:5d:7b:08:00:55:4f:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:73:4E:2C:E5:A4:ED:51:BF:AB:F4:CD:50:D7:94:D9:83:68:BA:21
            X509v3 Authority Key Identifier:
                keyid:32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ec:de:2b:db:1b:6b:47:4e:e7:99:09:04:b5:e7:21:65:80:
         18:f9:c9:0d:2c:5e:34:e8:7c:fc:75:b7:56:85:e5:a5:4d:61:
         f8:1b:bd:96:8d:5d:0a:dd:03:58:c4:ed:95:2f:8a:ac:91:1f:
         b2:ac:82:0a:84:0f:f1:0f:10:33:27:e8:15:e9:dc:42:d5:3e:
         e6:85:0f:db:79:23:06:34:d2:81:ea:d3:dc:b6:dd:97:87:3e:
         01:96:5b:01:27:9c:10:4b:18:ba:92:35:ce:f1:75:bb:30:41:
         49:5f:dd:85:14:4d:f4:ab:d9:34:94:92:9a:19:b3:26:fa:53:
         af:9a:44:5f:09:b5:63:a6:f4:0f:3e:89:71:ef:1a:de:ea:07:
         b1:4e:e7:48:36:b4:b0:04:a0:64:5c:8b:24:af:0d:b2:9c:b3:
         34:15:6f:ab:32:d7:8d:c7:5b:e5:ce:bf:60:3c:9f:03:aa:55:
         72:63:7a:12:09:a7:99:64:4e:72:2d:95:2f:24:08:a6:7c:26:
         52:71:98:4b:87:a8:37:29:b1:36:e3:ee:d5:60:0a:73:dc:58:
         4d:b2:06:2a:24:1a:93:f3:7a:1e:e7:80:1f:be:89:e1:9b:0d:
         c0:35:47:02:d2:c6:be:7a:42:c9:41:73:f9:41:05:ba:83:e4:
         43:32:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----