Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
File:                     76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft (raw, json)
Hash identifier:          3hOhUWOtS5GIubvRQYGA91gZK+2dTfLK6VvU+Vdbr0A=
Subject key identifier:   19:F8:E0:F1:01:06:5A:65:C4:6A:AC:BA:07:33:21:53:61:DE:98:8B
Authority key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
Certificate issuer:       /CN=efa842e67147252505f41551f0f735b7f72e3e97
Certificate serial:       01962E61BC008D14C43BB53422580961A3E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
Manifest number:          03F5
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: 76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl (hash: AceDbq+zHToniQvbc1poSTBlM4/Cpfu+sKv2NnxJKcE=)
                          2: RzCT0T6lenhrM__LsTG4BuTaY1c.roa (hash: tV5Y+kdqm/i7NbITAbNfFa3giabHc3nUwFdTcDJkx8o=)
                          3: nEbJ8kj8EsOb0Pl1MdpImgbdyyw.roa (hash: N5YOsZE+UbwNvaVhf6SZUKY1g4DzBzMgeef/sv8kcFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bc:00:8d:14:c4:3b:b5:34:22:58:09:61:a3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa842e67147252505f41551f0f735b7f72e3e97
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=19f8e0f101065a65c46aacba0733215361de988b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1f:22:a9:f8:b9:bd:7e:b6:85:10:73:24:2b:
                    46:bd:f0:ef:46:85:24:fc:d5:b5:0f:9a:55:02:20:
                    c8:6e:ea:ff:77:ae:29:c9:36:90:5e:6f:ba:4f:0d:
                    d0:42:76:43:ae:b1:d3:e2:22:da:a2:ef:bd:c6:57:
                    b7:6a:2a:eb:a9:96:ac:78:f4:31:e5:55:8b:15:e8:
                    fc:8a:21:02:73:c3:c5:c6:59:d3:9d:70:2f:ec:4c:
                    92:d7:0c:b4:27:49:72:03:6a:a2:6a:54:4b:e4:f4:
                    04:d3:ab:56:a0:f0:8f:df:70:34:27:90:48:45:67:
                    f7:61:37:49:79:f5:0b:19:3c:d7:97:b4:3f:5f:f0:
                    9d:48:28:cd:66:e0:b6:ec:4b:d0:56:2a:3d:c8:18:
                    23:b0:32:72:77:de:65:3e:49:b5:23:57:3c:1e:f3:
                    ea:06:ed:9f:99:5e:08:72:ff:36:2c:31:a4:df:9b:
                    4c:ab:a9:29:2d:39:d0:0e:6c:73:86:bc:3a:af:ff:
                    5f:bd:7e:5c:5e:d7:bb:8a:71:a1:8f:80:c5:78:e2:
                    cb:37:7d:2f:ea:58:46:47:a8:26:7d:31:6f:e7:65:
                    cd:3b:5d:4e:69:f9:06:d4:14:e5:f8:63:0b:bf:06:
                    48:b9:71:ca:6d:30:6a:b3:29:d6:64:b1:f5:eb:ee:
                    e3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F8:E0:F1:01:06:5A:65:C4:6A:AC:BA:07:33:21:53:61:DE:98:8B
            X509v3 Authority Key Identifier:
                keyid:EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c9:47:d6:4f:5f:47:2f:11:2d:00:bd:71:52:4b:8c:8a:e7:
         9c:61:a4:a4:cb:07:6a:a4:80:3f:fb:7e:7c:be:bf:fc:06:5f:
         28:7c:0c:c4:89:06:0e:f5:13:7c:6b:6e:47:81:be:79:bd:a6:
         d7:b4:3e:f5:76:4c:43:71:c7:17:ff:e1:43:90:f3:0f:1a:a1:
         cf:00:7f:62:7b:fe:25:8e:2c:d9:ae:d9:74:1a:44:d0:ba:a1:
         60:d8:02:e6:a1:3f:4d:7b:dc:45:78:c8:f1:c8:4d:03:f1:e4:
         a4:1d:4c:c4:bc:8b:4f:fa:a0:8a:56:17:e0:db:8c:34:37:29:
         91:58:94:8c:6e:23:8b:1e:d1:0c:91:20:28:bf:53:72:31:d2:
         f3:e3:2f:a2:3c:9a:c5:e5:91:e0:42:f4:30:ee:0b:36:2d:f6:
         44:e1:34:12:85:c8:7c:e1:f9:0f:21:53:8e:fd:75:18:d8:7a:
         65:c4:60:4b:a7:51:a9:70:8f:8b:a4:53:a1:04:65:be:1c:fb:
         db:36:d5:0a:aa:78:b4:85:bd:84:e4:71:fc:0f:79:fa:80:f0:
         1a:3f:37:d0:8b:9e:f7:9d:92:a9:49:0a:44:29:c0:fb:35:b0:
         1d:c8:5c:d7:fe:73:97:b3:c8:4a:3f:60:5a:fe:6b:e6:5c:e5:
         58:ea:69:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----