Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File:                     u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier:          cDwHrmMX0Y1580a26TWrTrS2to/q3SXStiq6MN6xrJs=
Subject key identifier:   4E:51:EE:6B:3F:17:83:2C:66:08:98:F5:6A:5D:0A:E2:CE:91:F3:C9
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer:       /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial:       01962FAB95FD077DCFC60FEEA59636247959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number:          02C5
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: 1-d2k_vU-BkEDRcLdH-TIekg9VxQ.roa (hash: BNmjLGfRynwPkim2jPmJ7ZmYJ2M4K6NMjQ6A9ZIWsHE=)
                          2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: 8QQFuNxiwzSmuyX0BxoL0XifYLQiYYJDSYjjEDXHcts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:95:fd:07:7d:cf:c6:0f:ee:a5:96:36:24:79:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=4e51ee6b3f17832c660898f56a5d0ae2ce91f3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:06:c5:4f:da:13:d9:2b:b2:3c:dd:a6:6a:
                    42:91:49:9a:97:4b:c2:45:3a:1e:5e:05:79:0a:96:
                    1d:f8:bd:02:61:32:d8:7d:8a:0e:bd:77:82:07:53:
                    65:f3:59:78:56:df:01:9b:2e:7d:39:35:23:64:43:
                    ae:c7:55:6e:58:02:8d:6a:5b:d2:d4:3d:08:6d:6c:
                    95:f6:03:ac:38:b4:2f:53:40:83:52:73:2e:23:9d:
                    81:7f:bd:a2:4c:5c:19:10:47:7d:f4:55:5f:9f:99:
                    ca:21:0b:94:f9:1d:37:83:24:19:b6:d5:54:64:1d:
                    56:84:8e:77:70:ed:bc:1e:62:5e:42:4c:43:a5:62:
                    08:32:5d:35:63:3b:a0:8b:bf:1e:28:46:45:36:bd:
                    d0:6a:ba:d8:e5:4c:d8:b4:47:16:23:c5:9e:1d:f4:
                    8b:a2:a2:09:52:65:88:3d:b8:de:e1:4b:33:1a:69:
                    b1:05:ac:d7:1d:66:b9:51:46:19:c7:54:8d:9f:1f:
                    d5:c8:ff:54:59:2b:00:98:f6:22:22:22:55:f4:f8:
                    12:9a:32:11:25:88:12:94:ba:80:81:38:4f:ce:5d:
                    2d:1a:cc:57:f2:a4:85:e4:87:3f:8b:af:cf:b5:e6:
                    27:ad:53:a8:2b:45:8f:0c:a2:20:9e:49:d9:cb:c9:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:51:EE:6B:3F:17:83:2C:66:08:98:F5:6A:5D:0A:E2:CE:91:F3:C9
            X509v3 Authority Key Identifier:
                keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:64:10:99:e4:99:90:bc:10:b3:b9:a5:14:e2:c5:6d:46:d9:
         34:6f:de:e0:56:eb:0f:74:a7:a4:48:03:5d:68:8c:fb:71:eb:
         7c:f8:dc:1a:35:63:96:57:18:e2:94:94:8b:4d:a2:a6:28:05:
         c4:00:cd:a9:fc:d0:c7:71:a0:0f:06:e2:ab:fe:9f:6e:a1:24:
         48:4f:91:1b:d9:b2:5c:16:ad:54:14:78:66:1b:83:f2:37:38:
         7b:32:4e:5e:b7:fe:6a:61:9e:10:cd:9f:7d:55:5f:4c:2f:47:
         9e:72:48:9f:4f:20:0f:89:54:05:52:0a:f4:c1:6c:dd:a6:36:
         2f:51:83:39:ee:f7:20:8e:20:c3:64:65:c2:3b:fe:d2:fd:21:
         ac:8c:85:ff:4c:ec:ef:64:7b:14:5e:6e:08:2b:92:7b:11:b5:
         3d:b9:ed:d1:98:61:63:9f:4b:87:e5:e2:2b:f8:62:4d:b5:3e:
         2e:db:9d:48:6f:e3:40:ef:ed:98:83:e8:b0:96:f8:0a:d3:f9:
         e4:66:df:bb:3f:0b:9c:41:a8:23:c3:cf:a4:15:7a:ed:77:b0:
         9b:a9:7d:d6:b1:0c:5b:5c:d0:67:4c:c1:bf:39:bc:d8:85:0d:
         8c:88:d8:36:f1:a1:e2:4f:83:00:41:e4:47:23:c3:ef:10:31:
         00:78:d1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----