Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
File:                     cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft (raw, json)
Hash identifier:          OBQFsfSwDKndnpTrGBhAuibSb+Ti2zeb7CPRVj3dRKk=
Subject key identifier:   16:C0:54:39:06:5B:E8:5B:EB:DA:40:E1:76:60:E5:9E:2C:86:71:CA
Authority key identifier: 72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
Certificate issuer:       /CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Certificate serial:       01962DF3B8A8CBBEF50574EAA8C2A58C27A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl (hash: abQfcnhb2AuhSYas4RXarkc6HyEwRqvxBTKyBzcz700=)
                          2: wfmRA1o816NK2nebior9nQRqs6I.roa (hash: WsRrqYQ4pFa/JlBicKV1hWW2cLlAeaKvafPxPghqGUY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b8:a8:cb:be:f5:05:74:ea:a8:c2:a5:8c:27:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=16c05439065be85bebda40e17660e59e2c8671ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:63:84:6a:a5:65:36:e0:cb:67:8d:7d:f1:
                    53:d5:aa:d9:9a:30:ca:74:dc:e4:f8:77:3d:38:a0:
                    66:0a:7b:24:06:26:5c:df:ed:b4:24:3e:e7:11:e2:
                    d2:02:5d:72:0c:7e:54:1d:aa:ac:d0:c2:72:eb:bc:
                    6d:bc:13:02:8d:bf:d5:e2:9d:12:83:06:ca:e6:30:
                    ca:52:21:45:26:cb:8f:7d:c5:f3:1f:4e:27:3d:3b:
                    b7:61:97:03:ca:36:ee:a4:4b:94:19:e7:34:93:9c:
                    86:27:ff:32:8b:f3:40:b3:a9:43:9e:bb:3c:d7:55:
                    57:a0:13:b8:81:1c:70:49:55:f4:e5:62:5c:18:95:
                    a1:b3:c1:2c:e6:8d:75:2e:18:98:55:0a:b0:64:9f:
                    f5:f4:ef:1f:2f:81:fd:64:d7:68:4d:23:5d:dc:49:
                    e1:e6:eb:a2:93:f8:22:7e:e9:c8:d4:d3:c7:b1:ab:
                    70:bd:7e:6f:9e:78:38:35:4f:55:bf:9f:13:24:65:
                    91:1e:ab:dd:bb:bf:8b:f8:75:8d:51:6b:4c:b6:9d:
                    86:32:85:25:08:15:8d:fb:75:59:d3:30:74:ef:d9:
                    c3:e0:22:00:93:a5:63:ef:9e:0b:12:15:d3:e1:ee:
                    cd:2d:93:af:0c:85:4c:0e:04:12:11:4a:d0:fb:b3:
                    30:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C0:54:39:06:5B:E8:5B:EB:DA:40:E1:76:60:E5:9E:2C:86:71:CA
            X509v3 Authority Key Identifier:
                keyid:72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e7:55:e1:16:d1:d3:70:fb:82:2a:35:ec:7c:2d:c7:35:77:
         ef:47:80:37:71:0c:34:f7:b1:06:79:2f:39:76:1d:b3:33:e3:
         28:6f:66:fc:5f:5e:86:97:1e:3a:fe:aa:1f:a1:f5:76:f3:a5:
         e4:bf:71:4c:b6:7f:44:80:51:c4:7a:1f:af:e9:6e:d5:a8:76:
         66:09:6e:4e:05:dd:bd:87:42:2f:e0:84:0c:80:51:e5:a8:9c:
         73:f3:e4:d2:a5:5d:f2:39:1c:b0:d2:af:91:42:2c:28:21:87:
         64:ea:96:18:4d:b0:72:be:03:55:c5:16:b3:33:6a:65:8a:65:
         24:09:b3:3b:a8:cb:f4:8f:dd:42:22:54:14:26:4f:31:a6:b4:
         b5:fa:d3:03:db:9f:0f:de:b3:a3:1f:dd:0e:ec:ab:ba:d4:4e:
         1b:d6:63:5f:57:3f:67:38:60:78:22:8a:68:1c:6a:32:4e:0d:
         8d:e3:2f:76:a9:5a:fb:e5:62:99:25:64:b4:1a:8f:55:c2:ec:
         82:d0:c0:0d:ae:90:d3:da:ce:a9:70:14:0e:67:aa:a8:c1:14:
         37:3a:45:0a:b3:0d:fa:22:dc:2b:b1:36:e5:9f:38:e4:58:b4:
         d0:ac:8c:1c:ab:c6:30:29:4e:7f:f5:b8:db:59:f2:df:dc:83:
         eb:25:a9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----