Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
File:                     r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft (raw, json)
Hash identifier:          0xbWI55eWhyRdsmd/ELrHTmFc7ScbP0xppwrY+43Zq0=
Subject key identifier:   4C:D6:88:6D:BF:32:F2:B2:8B:28:D9:19:EF:BA:59:0C:A0:8D:66:3C
Authority key identifier: AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
Certificate issuer:       /CN=af934ec694af68134b7514c10dcd13857b459e38
Certificate serial:       01962F745F77537693E01532AAD0D37DD42A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
Manifest number:          0EE7
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: 3KVjDh6tV6LcIk6BDE6xPuXzBDM.roa (hash: bQvllPBonHjb5qHCFeaDeGABQpp//k5Dnzxk+0td390=)
                          2: r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl (hash: NEDyPDEnZQ4i8LHtsjLxfvAjEa86x00S50G8d1KGXno=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5f:77:53:76:93:e0:15:32:aa:d0:d3:7d:d4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af934ec694af68134b7514c10dcd13857b459e38
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=4cd6886dbf32f2b28b28d919efba590ca08d663c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:20:c0:4d:7c:cb:8a:56:dc:26:3f:e6:d2:
                    1a:cb:85:6f:05:f7:dc:67:42:e2:97:53:68:d4:eb:
                    ff:f9:0d:1a:a5:20:3c:f8:4a:2b:6f:82:ab:c6:7c:
                    ca:d6:18:ca:17:9a:0f:20:80:2e:0d:86:7f:d5:3a:
                    55:9c:cf:df:48:fb:be:ef:e7:3e:55:ec:5d:ea:13:
                    ca:d6:b5:ae:8a:04:a8:b0:66:bd:30:86:61:b8:bd:
                    d4:74:86:20:59:e2:63:87:bf:19:01:38:29:24:a3:
                    24:4f:b4:6f:d8:fb:27:a7:23:23:82:05:c6:6b:9b:
                    17:d1:38:3f:22:92:85:93:8a:dc:6d:8d:7f:74:31:
                    d4:98:2e:5a:c5:4f:64:be:49:7c:6b:52:4f:7b:33:
                    b9:82:31:ab:37:a4:da:60:bf:dc:63:2d:26:61:07:
                    11:92:45:bc:65:23:5d:f1:0c:da:24:ca:e9:94:b4:
                    0e:72:de:c9:85:88:98:97:6a:14:9e:78:0e:0d:89:
                    ee:74:6a:df:bd:8d:02:c1:b5:67:da:ed:93:07:00:
                    94:9f:34:b7:d5:ab:00:37:2c:55:37:9d:f5:a5:34:
                    2c:17:d7:e1:ea:2d:4e:17:f8:22:d6:ce:94:d6:9a:
                    cf:2c:80:9c:f3:12:ce:0e:a0:a9:d3:fd:df:7e:c7:
                    8f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D6:88:6D:BF:32:F2:B2:8B:28:D9:19:EF:BA:59:0C:A0:8D:66:3C
            X509v3 Authority Key Identifier:
                keyid:AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:72:50:4b:5c:ca:39:54:35:ce:05:d2:c8:1c:95:38:0f:4d:
         ae:45:a2:7a:33:26:62:42:db:46:d3:e7:3c:43:1d:60:ce:83:
         3b:1b:35:69:58:ed:98:a2:ab:5d:1c:05:0b:bc:e2:87:78:4c:
         bb:90:5c:38:97:14:1b:00:56:71:aa:68:86:9e:98:41:e0:4f:
         36:ae:20:31:82:b8:0f:ff:3a:71:11:41:34:75:39:e0:20:b8:
         ca:76:65:e1:53:63:76:ba:c3:fa:27:cb:a3:f9:1b:d3:26:c4:
         a8:91:86:26:2b:4b:c0:e6:13:8f:5a:65:dd:a5:80:93:38:f5:
         6c:90:f1:46:5c:e3:b6:4c:3f:33:83:11:35:d6:21:4a:d5:a8:
         15:88:b2:c4:96:b1:4f:c0:85:56:b7:f3:5d:c5:47:e8:da:5a:
         58:de:64:17:ae:e5:80:2b:2f:3c:07:86:a4:5d:35:50:6f:38:
         4b:84:fd:83:a2:b1:0b:9d:fc:b9:da:3e:a6:1d:6b:d9:f1:5d:
         74:98:68:b3:bc:d0:37:97:14:e6:a8:49:92:78:79:cd:e3:f5:
         dc:bf:e4:4b:74:9d:77:01:8d:78:14:30:ac:e1:71:f8:72:92:
         4a:db:94:a9:25:3e:f1:7d:58:2a:aa:ad:f4:c1:89:d7:84:fd:
         1a:9e:ea:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----