Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
File:                     mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft (raw, json)
Hash identifier:          CRWk6UA1hjvo/FBlRKQ+WEEiHW4L97f+6sx2tgufwH0=
Subject key identifier:   0B:A0:A1:24:41:6F:99:F7:8E:D2:9A:20:B3:0A:AE:BF:7E:64:10:B5
Authority key identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
Certificate issuer:       /CN=985b50a10d2d58c67503eaaa701e510915dd5192
Certificate serial:       01962F07363F150AE2F3744DAED074D8B113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
Manifest number:          0446
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl (hash: KZWTK+GAJeXGjGJ+Elqm8UQLgYAK6NkMRo+9ozLu0PE=)
                          2: yN69dqz--m8dWXCMtbZ1dGzJo1k.roa (hash: pNrNwHsIk6sG4oFCvOY8zkn+qIXflJs47/VLFYzRdxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:36:3f:15:0a:e2:f3:74:4d:ae:d0:74:d8:b1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985b50a10d2d58c67503eaaa701e510915dd5192
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=0ba0a124416f99f78ed29a20b30aaebf7e6410b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0f:e4:ef:12:12:95:65:0b:38:a6:40:96:45:
                    97:17:80:22:5d:34:c2:80:c4:a4:6c:f2:06:3a:1e:
                    32:a1:68:fe:d4:cd:f3:c8:77:df:37:70:6e:52:1a:
                    cd:9f:4b:51:ce:b7:c4:e9:f8:dc:c7:16:0a:d1:7a:
                    79:3d:2b:3c:2c:72:cf:8f:ef:b9:21:fa:19:77:6d:
                    d3:e4:7c:e1:b5:1b:dc:f3:55:bc:6c:79:45:1b:b0:
                    e8:de:2a:1c:6f:f6:aa:2e:67:f8:a1:2e:c6:1d:b8:
                    3e:bf:38:33:6f:d7:23:48:63:e6:a9:60:51:8f:6a:
                    c9:23:78:b9:69:49:ff:d0:ee:2b:8e:09:9b:bf:47:
                    4c:2a:63:b6:c5:92:4b:5a:c5:6d:bc:0b:b3:9c:99:
                    3b:a0:7e:2b:99:2a:e8:15:32:08:97:db:36:31:5f:
                    a5:2f:ce:92:dc:26:e8:45:41:23:42:c3:3d:9b:31:
                    c0:73:a8:37:fb:f4:6f:dc:b8:03:39:16:f8:98:68:
                    6a:1b:ad:d6:19:3e:1a:59:4e:80:07:b0:08:46:45:
                    15:dc:6d:d1:ea:99:32:ce:0f:2c:37:ed:c5:65:22:
                    53:89:cf:f6:30:e5:5d:ef:eb:04:f8:50:d9:61:57:
                    18:d2:b5:6c:de:a1:b0:3d:cf:49:e0:08:17:a2:7f:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A0:A1:24:41:6F:99:F7:8E:D2:9A:20:B3:0A:AE:BF:7E:64:10:B5
            X509v3 Authority Key Identifier:
                keyid:98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:67:dd:0b:22:1a:1e:84:97:c5:0d:cd:71:5e:c0:cf:11:7c:
         72:41:ef:b0:a1:63:ce:31:4e:3e:b4:06:07:e6:28:ce:52:c7:
         f0:94:e6:b1:f2:3f:e4:9d:f3:ea:4d:31:54:46:15:59:1e:ac:
         d3:8b:04:40:54:fa:9c:82:ad:46:9a:b0:7d:e8:98:33:cb:69:
         32:f2:2d:92:48:55:99:d2:91:68:2e:d0:36:1b:41:d9:cb:f2:
         19:31:8b:06:43:3a:df:34:ea:ad:ca:a0:84:2b:a4:bb:49:3a:
         68:c2:d2:53:35:c9:55:b8:e6:9c:9b:ff:b0:b0:d5:8a:a0:7c:
         d0:82:c5:64:58:c3:0f:9b:d5:94:91:af:2d:e6:52:22:51:a6:
         a2:f4:a1:fa:1a:88:fc:93:d6:9a:b3:ba:a4:e5:49:56:cd:d1:
         ad:3b:c3:64:ee:0f:73:f2:b2:54:59:b8:38:f7:b7:f2:ee:8e:
         6a:4a:86:b2:19:71:26:47:3b:e9:c4:80:2f:bd:9e:aa:3a:d2:
         5a:52:b0:36:a3:32:71:e5:d1:db:6d:d2:f8:35:b3:1b:25:c2:
         5f:37:61:fb:49:c4:af:98:33:48:4d:fd:1a:20:07:e6:01:9f:
         87:96:73:44:7d:66:9d:e3:6c:3f:7a:b3:ee:be:42:93:30:1b:
         53:c9:ca:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----