Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File:                     D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier:          qDmapVsaNxnehg2dEcQ9kH3GMvONrKacw07tzR/DKxE=
Subject key identifier:   66:60:79:CD:6C:13:98:B0:81:0A:46:2F:9E:2C:50:FF:5C:81:AE:3A
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer:       /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial:       01962F74F6425B0874EEC19789EB0E30D5B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number:          0271
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: 6BzrArwu58N5sBVvJVBthqND_N4.roa (hash: OfB+8pNfA8OgycXqKbk5L8hxFdJxQJhdYPo6qkN9fXA=)
                          2: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: ipjzn0vl3QrjVXjOMmEdeFY4K24eW7jb5BOExjmb31A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f6:42:5b:08:74:ee:c1:97:89:eb:0e:30:d5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=666079cd6c1398b0810a462f9e2c50ff5c81ae3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:af:96:43:bf:21:aa:b3:0e:95:3f:3a:17:
                    1f:40:38:62:23:75:5d:95:56:07:72:04:5e:c0:30:
                    f7:fa:7a:05:91:ae:cf:f0:02:56:a9:7d:28:0f:b9:
                    98:90:2d:45:66:da:41:46:a7:a9:50:94:ae:6b:06:
                    6a:96:8b:33:bf:da:53:64:ed:e4:d6:2f:f1:3b:a7:
                    fc:fc:1f:94:fc:e3:f1:35:c7:ef:f9:be:d5:d9:3a:
                    42:bb:8d:62:50:92:06:b3:c9:dc:d8:0d:3b:ea:ca:
                    c3:03:4a:26:d2:7c:99:08:09:3c:dc:68:62:98:53:
                    0a:60:99:fd:41:5d:73:d3:ec:b0:64:0b:49:66:01:
                    f6:ca:3b:16:4e:9f:85:d1:42:19:7d:ea:c6:b5:20:
                    00:39:39:d2:25:14:fc:c5:0a:28:e5:ee:23:8f:8e:
                    7e:19:98:16:83:83:19:af:37:9f:cf:ce:e7:34:10:
                    59:0f:77:eb:a1:1b:f9:b7:f1:84:da:b0:2d:12:80:
                    a3:a6:0e:87:da:2b:98:bd:02:c9:e8:cb:14:ad:58:
                    8b:df:3d:b7:2f:14:c2:30:88:fc:3a:5c:a6:e9:47:
                    f3:47:68:53:23:c2:3e:8d:d6:e9:c8:0c:0a:38:98:
                    ff:2a:89:1c:e8:fd:8b:56:15:4a:f5:c5:14:61:5a:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:60:79:CD:6C:13:98:B0:81:0A:46:2F:9E:2C:50:FF:5C:81:AE:3A
            X509v3 Authority Key Identifier:
                keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:41:d5:ab:24:cd:dc:42:9a:8c:f3:b9:86:09:47:a8:b1:
         65:91:4e:4f:4b:a9:a7:d9:34:10:12:c3:46:2a:e4:e7:32:3e:
         1c:e1:94:dd:54:30:cf:f9:22:5d:d9:b0:4b:7a:af:8a:ef:62:
         87:56:a0:9b:ec:1f:c4:d7:27:75:11:73:af:72:ab:5c:bd:e0:
         60:36:ab:0f:95:84:ae:d5:8e:47:17:d9:9a:46:d0:1c:c1:b4:
         65:2a:5d:cf:42:56:6c:c6:4c:8d:74:9f:09:ef:5f:75:55:d7:
         90:a7:4f:3c:0b:41:f8:5e:38:e1:75:b2:bb:32:11:80:e0:c6:
         3d:7b:a9:f3:de:a1:1d:60:1b:71:76:87:de:3f:04:2c:6f:e7:
         91:f8:df:13:c2:bf:65:f0:9f:0d:ee:2e:c4:06:0a:26:7b:0e:
         7c:f0:9a:42:b7:aa:69:8d:dd:fd:d7:e7:55:47:35:7c:63:76:
         95:63:1a:3d:34:77:75:01:5e:d2:b4:0e:02:0e:61:db:6d:3c:
         46:ef:c8:2d:88:b6:9c:1f:d6:71:07:c7:50:d1:4a:89:77:69:
         0c:37:24:cf:13:2f:f8:9b:37:f6:bd:01:95:59:5f:66:28:b5:
         33:e3:2b:99:fb:88:44:5b:1a:fa:63:43:2c:a5:82:58:ba:f6:
         d6:4f:d6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----