Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
File:                     mwVP7CVdDNxro6uparJgNmMnLbM.mft (raw, json)
Hash identifier:          IC+tZe2gOz9QBsT7g+Qjmj/dnPYRimLa/ZlAndwxo3k=
Subject key identifier:   BD:59:97:6B:AB:BE:D4:58:D7:51:09:25:4B:69:3F:E5:6C:F5:FB:FB
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Certificate issuer:       /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial:       01962FAB6C9B6C6E30530E61A6FAF367E772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
Manifest number:          053B
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: 9VCWXkatYJ3ESMbCaKx1Q3PgSTU.roa (hash: ZMgX7WnteThsvsNnKSDN1aaNlfhZg64e4j4Ovh8Mbfo=)
                          2: mwVP7CVdDNxro6uparJgNmMnLbM.crl (hash: jgr7A0cQxR0iTTGNUfXxDAI11bUHq8IUIppK4yGuOrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6c:9b:6c:6e:30:53:0e:61:a6:fa:f3:67:e7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=bd59976babbed458d75109254b693fe56cf5fbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:d2:14:81:52:6b:57:f9:67:95:61:ad:e9:
                    3a:93:ca:c1:d5:3e:99:51:a1:cc:3b:c5:27:03:2b:
                    7d:26:9e:12:92:b2:fe:99:89:b1:40:ad:61:06:f3:
                    d6:9f:a0:d1:a9:af:ce:21:1b:b4:fa:3d:d2:70:15:
                    d4:b8:88:61:9a:71:f4:bc:16:11:d9:8a:85:d4:a8:
                    60:ab:f5:bd:74:d2:1f:8b:51:21:30:93:75:df:02:
                    f5:bd:82:37:5c:72:23:a4:6a:88:d3:1f:92:89:07:
                    df:48:11:f8:d1:38:52:af:d3:c8:1e:9b:71:86:59:
                    72:e2:1e:f1:63:da:61:9e:51:47:ae:d9:b3:4f:27:
                    f4:4d:c8:0e:66:6d:3d:6a:15:e9:31:8a:94:61:9d:
                    28:aa:d7:ef:f3:aa:86:00:bb:f4:f2:50:8f:20:c0:
                    3b:96:0b:91:03:95:6c:85:31:13:00:28:50:05:33:
                    03:bd:03:8e:eb:ad:9b:d1:34:17:c8:cf:da:81:cf:
                    a2:1e:ad:31:62:94:7e:c2:91:d1:80:bf:d5:ba:28:
                    ce:ae:c9:0b:0e:01:92:08:8d:9b:d3:37:1a:60:e9:
                    fd:44:7d:dc:83:41:20:00:12:ad:5f:38:9a:9a:18:
                    53:5a:c2:c2:b7:d4:cf:e9:f4:53:6b:66:cd:03:51:
                    2d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:59:97:6B:AB:BE:D4:58:D7:51:09:25:4B:69:3F:E5:6C:F5:FB:FB
            X509v3 Authority Key Identifier:
                keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:90:c2:0f:d6:18:a3:c0:50:b1:66:b2:99:e0:6d:5f:bf:aa:
         75:85:53:07:3f:34:f0:c0:4e:67:bb:59:06:fb:e5:5a:56:3c:
         37:e0:ab:a2:c7:70:46:6a:e9:f7:05:32:80:49:f5:8c:66:c7:
         6a:10:ba:4d:73:32:6d:3b:18:9e:00:27:94:e2:4e:ae:36:d6:
         01:31:d9:10:59:1a:f8:84:16:bc:68:76:77:43:98:15:ee:ae:
         92:ef:83:09:6a:82:de:04:c5:e6:70:80:fc:37:b3:c0:4e:31:
         b9:13:45:6b:92:65:2c:b0:cf:3a:fc:6b:b0:73:bd:62:0f:19:
         47:3d:ca:8f:d3:35:27:9b:47:f0:da:ba:37:b0:3c:b7:de:3d:
         12:50:c4:96:ba:a6:a2:d4:59:b0:48:81:20:c1:54:0b:8f:4f:
         d6:93:6d:00:ab:96:ad:f0:7a:04:e9:73:9e:89:de:87:a7:5a:
         cf:72:ef:fe:c5:89:ef:e6:ce:46:83:51:e7:2c:1e:76:eb:db:
         9b:f1:3a:45:57:3b:14:00:7f:51:00:13:27:c0:a1:68:37:ae:
         7b:fb:52:12:61:37:25:ae:e8:a7:c8:4d:f4:d5:99:83:60:85:
         14:f9:a3:71:6a:a8:4a:22:84:2c:97:92:a0:a5:ef:65:6a:56:
         3c:a8:1b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----