Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
File:                     0stdGBr-pp854XESWTvksA5YS00.mft (raw, json)
Hash identifier:          10xHA2IaojUkKiXqUTM/HjCIoCpwHD0zjJoq7Mw+VHU=
Subject key identifier:   70:FA:9B:DF:CE:8E:6E:07:87:D5:9D:75:30:16:E1:D0:B2:7E:95:BA
Authority key identifier: D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
Certificate issuer:       /CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Certificate serial:       01962FAB11E92A91104FB4E31AFB2262FEB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
Manifest number:          0357
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: 0stdGBr-pp854XESWTvksA5YS00.crl (hash: WGjzLlvGCk1labiRCTX7U8KGN/wviKLvBZ6C50VA7yw=)
                          2: DjD9dQKu2fp9cHrAn1sIWGhC488.roa (hash: fAPGT8GWJz86zGyzRAQmnMcTrszvTZhO+N/oXftz62E=)
                          3: IBq-WXNXCM-_L3wj6_Sv5Rx4dNA.roa (hash: vuy64Y3PAKsG7oegiPafGsZ4QGAupXIefuGc7dRwG0A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:11:e9:2a:91:10:4f:b4:e3:1a:fb:22:62:fe:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2cb5d181afea69f39e17112593be4b00e584b4d
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=70fa9bdfce8e6e0787d59d753016e1d0b27e95ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:0e:df:ae:53:35:16:63:ed:da:0b:dc:ae:
                    cf:05:a5:de:c2:df:3f:f4:9d:7f:d8:35:e2:bc:97:
                    51:16:7b:94:2d:5a:45:b3:62:3e:ca:a4:ee:8f:09:
                    9a:1c:8f:04:98:9e:96:01:a6:fa:1c:f7:7c:71:58:
                    64:df:80:50:2a:35:cb:a5:96:8d:e8:b6:f3:cf:5b:
                    da:a1:a2:62:e1:69:0a:03:cc:12:7c:77:7f:c1:41:
                    cc:a1:43:e7:52:49:7e:58:41:a5:74:af:68:6a:76:
                    84:6e:44:d8:00:b5:a7:b9:d9:70:ea:43:1d:82:d6:
                    f4:c8:ec:70:a7:d8:ed:e4:4c:6e:c2:c3:e0:09:bd:
                    cd:ad:5d:01:34:54:52:05:ec:37:92:0c:9f:dd:a3:
                    de:f4:2d:ab:ce:3b:2d:bc:db:62:97:38:83:16:2b:
                    37:34:0e:63:68:da:ac:2a:b6:79:a5:d6:96:51:19:
                    b3:25:a9:c7:41:cd:89:1d:ae:6d:72:d0:36:13:98:
                    d9:df:03:db:27:e1:bb:03:32:5f:1f:50:cd:1b:79:
                    40:4f:ba:99:40:f0:b0:45:53:be:ca:f1:72:bc:e3:
                    a6:84:01:ac:9d:c9:5c:a0:90:f2:96:9b:5d:b9:70:
                    53:38:95:dc:28:59:21:a7:58:cf:71:11:1e:6a:ad:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FA:9B:DF:CE:8E:6E:07:87:D5:9D:75:30:16:E1:D0:B2:7E:95:BA
            X509v3 Authority Key Identifier:
                keyid:D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:61:87:cd:da:ba:1a:01:3a:05:c6:8e:44:b3:f0:b5:ab:f1:
         fb:6f:58:34:e4:ec:6b:fb:be:7f:03:be:97:a6:8f:b4:53:2a:
         bb:db:6b:1d:31:e3:a1:1d:c8:c2:aa:43:8f:ff:4c:0b:89:f6:
         fd:7f:91:1a:69:87:c8:a4:e3:08:59:8a:3c:a3:c0:0a:95:4c:
         79:07:68:96:c4:f9:27:86:ae:5c:a8:24:9a:cb:55:81:18:c5:
         c7:e2:74:c7:50:11:87:eb:13:2a:1a:ba:50:28:8d:76:02:02:
         96:cb:d2:13:77:1c:b2:e3:14:49:2f:ad:31:e7:28:fc:b0:e5:
         9e:23:79:b8:ee:9e:e6:40:6c:6a:57:3b:96:50:f2:61:36:70:
         a2:a1:76:d4:98:b8:26:f9:c8:aa:2c:7c:e5:21:d6:9b:bc:e2:
         42:9f:41:9a:78:69:dd:5f:33:41:fc:b5:11:91:10:0c:f3:5e:
         b4:4a:ea:0f:f4:c9:8c:6b:bf:02:e1:38:49:49:38:a2:31:df:
         33:f5:42:58:39:76:86:93:92:68:91:fe:7f:26:4c:00:2c:c8:
         51:12:65:d3:b9:70:26:90:5b:12:c2:51:a8:90:0f:33:56:a4:
         b5:41:b2:76:ea:aa:3f:31:ef:f4:99:b4:fb:5f:c3:81:5d:ea:
         e5:90:8c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----