Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
File:                     A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft (raw, json)
Hash identifier:          P1BZ/DBw70xgeLk1UKHh5l9fKxEY0O03LqQoukLwkh0=
Subject key identifier:   56:44:57:65:1B:83:42:8F:89:98:2B:48:13:BA:E7:71:95:07:89:76
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Certificate issuer:       /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial:       01962DF3B19595420A9338A8A68DC707E5B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl (hash: 3hI+KMxMGU9wuqx9Pc00lwD/uCFFLsAZS1u90P9KQ50=)
                          2: aFAF2a0pf2_iQW_Ah5PtSVGIIsU.roa (hash: CRoJAvxL/AEhIjj3BGa3AOSm/IAStthRp+t6FhfWlZc=)
                          3: g0yUXdYSuBEU7wpjF_M-dIueuPE.roa (hash: PIV5IbeiUmm5gi+hdOXD1voi9O/jmaGDnpkEJZ2+Rwg=)
                          4: kLgY3X5leR0VtUr8VPTZGFKR1kc.roa (hash: LBSLrR+c9iEdXN69yxUzikKKOnVtulDFWy14eJ7VP9g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b1:95:95:42:0a:93:38:a8:a6:8d:c7:07:e5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=564457651b83428f89982b4813bae77195078976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:67:44:48:72:c7:1c:f1:02:11:39:03:91:5e:
                    d3:15:45:27:64:9d:c1:eb:62:7b:c5:c6:1f:30:47:
                    28:92:ea:24:72:5d:77:ce:73:c3:4b:0d:08:1f:fb:
                    d6:28:f5:05:7a:5b:28:ab:4a:c4:1f:ce:bc:a6:17:
                    cb:b3:51:a9:c3:ed:7a:bf:f6:9d:11:13:04:59:24:
                    04:8e:73:04:a5:a0:3e:75:4d:1d:71:9c:71:3e:0d:
                    9c:97:11:11:f1:f2:6e:ba:c7:08:6d:fd:02:eb:4a:
                    1c:d0:b5:70:38:17:17:a0:c1:5a:63:fe:9c:00:d0:
                    29:ed:ea:e4:07:21:3b:73:c9:8c:e0:fa:ed:15:15:
                    27:88:83:6d:8e:2e:41:a6:9b:9b:a4:61:93:8d:90:
                    0e:55:ad:64:d3:6d:54:9d:6c:06:52:aa:fb:b2:c4:
                    7c:16:d5:16:88:f5:8f:7d:61:50:ca:46:2a:1d:e8:
                    92:38:0a:b4:3f:71:8c:6f:fd:99:b6:01:77:8e:ba:
                    7c:cb:a1:d4:84:6d:05:44:35:65:66:c4:67:f0:c3:
                    60:2b:42:50:90:0d:38:f8:41:d9:40:d7:83:4c:d8:
                    fc:ca:49:e1:59:bb:85:f0:b9:90:55:b7:ed:19:dc:
                    e5:12:2e:a4:c5:fc:1e:31:01:06:77:6b:30:90:10:
                    c8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:44:57:65:1B:83:42:8F:89:98:2B:48:13:BA:E7:71:95:07:89:76
            X509v3 Authority Key Identifier:
                keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:72:7d:99:0e:cd:b2:c0:c9:15:4b:71:8b:19:7a:c2:5a:69:
         65:21:80:01:68:79:1f:49:18:17:80:bf:78:86:41:df:ee:6c:
         2e:55:88:d1:87:fc:01:29:0a:04:cf:8a:2c:82:c6:bd:1a:67:
         24:06:13:3e:c1:42:5e:92:eb:bf:e1:3e:5a:2c:fc:7b:f2:e6:
         d5:b4:f1:fe:ee:1f:d0:32:96:8b:ad:3e:b3:8f:32:02:17:74:
         6a:26:e8:c0:cb:f4:4c:6a:69:67:1c:a0:3f:10:85:0d:64:e7:
         b8:78:8f:75:38:a2:5a:9d:72:07:3b:4b:cf:60:16:15:4f:99:
         b4:b2:5b:70:9e:86:8c:5c:f7:b2:7b:7a:b1:77:7a:1f:c9:5d:
         5e:51:80:04:57:42:b1:11:81:43:18:2b:11:cf:f2:f9:01:53:
         e5:2a:82:f2:23:a8:43:22:7c:48:54:77:a8:80:77:4f:4f:6b:
         c2:ab:7b:8e:a7:b9:dd:59:dd:bc:e3:fe:a9:d2:0b:83:ec:fb:
         9d:b0:e9:48:d4:d6:bd:a5:59:a5:82:f0:97:25:b2:72:dc:b7:
         9d:07:6d:54:6c:2b:3d:b2:03:47:d4:87:fa:c4:b1:72:fb:f4:
         3a:a2:6d:98:17:e5:ee:9b:a7:75:2b:f1:38:d5:b0:ea:fb:97:
         6c:7e:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----