Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
File:                     MFS7bp94ARuMxdPyO3C2bPaXmqc.mft (raw, json)
Hash identifier:          uD5NricZK77KBp6nztXT99dQaB4jRDLfQzJyC9YOmnc=
Subject key identifier:   0B:01:19:57:35:60:F3:A9:57:DA:33:60:6F:1D:9E:76:AA:59:47:A3
Authority key identifier: 30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
Certificate issuer:       /CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Certificate serial:       01962F74B37475C990680BD1B86A2176673D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: MFS7bp94ARuMxdPyO3C2bPaXmqc.crl (hash: yurzhNOXpWf/xqFniiHZJMns4IeaJMSiDiRgZkD9cmE=)
                          2: jIxoBxvUdMCHFAPIgbpTv82jWLo.roa (hash: HrwO1TMjewTexEY6JfFnwLbtTAOtQU58BOb2eJzb5To=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b3:74:75:c9:90:68:0b:d1:b8:6a:21:76:67:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=0b0119573560f3a957da33606f1d9e76aa5947a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:b3:f3:af:a0:54:02:c0:db:f8:8b:d2:43:
                    cb:49:d7:c8:60:78:79:48:4c:ca:72:1a:72:c4:d7:
                    19:51:85:2a:80:c9:c0:a7:b8:43:0b:89:ea:9a:4d:
                    88:ab:68:7f:9e:53:27:64:34:c5:49:b8:71:7a:e3:
                    98:69:74:3c:2c:16:4f:62:00:ba:c8:12:a0:ba:b8:
                    dd:cd:8d:92:f0:02:74:ef:b2:bc:ec:6d:63:a8:25:
                    b6:e1:ef:86:7f:8b:7b:68:62:27:d3:5c:df:b5:81:
                    79:42:62:1b:cc:bd:8c:c8:a2:ad:20:1c:b0:a1:50:
                    fb:8f:1e:10:fa:71:a3:d6:f6:c9:6f:e6:1a:eb:5e:
                    7e:34:cb:58:c4:30:41:df:ce:60:73:8d:6e:f3:ed:
                    fa:28:f0:75:af:17:75:5e:96:16:f4:a9:06:fb:c4:
                    9d:1b:49:f9:c6:1b:77:e1:bd:60:be:ea:37:2f:c5:
                    ce:24:13:1b:b5:cc:4a:80:af:16:08:a7:fd:10:33:
                    c5:a8:0d:79:21:5a:20:38:26:05:b1:12:03:87:22:
                    b9:74:88:6b:5d:f7:96:4e:be:af:f2:7f:5d:08:4e:
                    43:30:f7:65:6b:2e:be:ec:39:da:38:b7:39:bf:80:
                    29:dc:81:26:b5:23:be:8b:ad:c6:f0:40:cc:a8:b7:
                    0e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:01:19:57:35:60:F3:A9:57:DA:33:60:6F:1D:9E:76:AA:59:47:A3
            X509v3 Authority Key Identifier:
                keyid:30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e8:89:aa:7c:c1:8c:9c:fc:6c:e6:b4:5c:f3:b5:3f:2a:ec:
         8e:43:0f:5f:e8:b6:ff:9a:6c:0d:32:08:21:76:3f:09:57:66:
         ea:44:53:a4:5d:72:0e:67:05:8c:c4:bc:ea:77:b6:7a:3f:71:
         68:b5:6d:5d:ff:39:be:be:b2:c3:87:28:f4:74:09:f9:1d:f8:
         6e:67:10:1b:c7:5b:50:4d:4c:59:76:19:6d:fb:cd:86:89:a9:
         ce:19:eb:39:fc:66:31:b3:19:46:f2:2d:a9:38:84:10:bf:39:
         9d:95:a6:70:6f:4c:eb:02:21:56:07:7a:57:db:a3:dc:ac:87:
         d0:b8:c9:d9:d5:01:2d:f6:ad:8c:76:9f:2d:af:63:57:c0:31:
         1e:9e:14:84:68:28:94:9d:ac:7e:ed:ee:17:37:46:ae:01:97:
         25:ad:09:c8:bd:65:b5:41:73:1f:4c:3b:82:2d:5c:d7:d2:3c:
         00:56:f4:ec:d6:34:72:65:8f:15:59:f5:3e:88:39:df:93:d3:
         9b:11:69:c9:da:f4:bd:5c:9b:65:e0:d6:61:84:f0:6b:22:1e:
         62:b8:b4:ee:6f:6a:9d:d0:6d:9d:c2:31:62:af:68:c2:75:38:
         52:a5:90:08:ad:e5:19:51:c5:81:64:f1:90:79:31:8e:2d:da:
         29:16:fa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----