Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File:                     Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier:          Jlaw3RV0nplz/gL4M2/P7DgGNEhZk0vA5QfuamyqID0=
Subject key identifier:   56:F6:85:52:E5:96:60:4B:93:56:24:39:FB:22:C0:0B:FB:17:FF:1F
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer:       /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial:       01962E992AC6D63A6DFC2BADB3B16D3A6233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number:          1113
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: Kt18qGRPFhnoeDMRU6Ja36FUtdA.roa (hash: ZdZhwP5GgUBDAZeIM6qZ4JCbpszuez2XwZJ3dyqtyLY=)
                          2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: KPs15YtVscHI9zRAEQeZz5gkWR+HPQl943igzl80+5A=)
                          3: yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa (hash: v4PNoMO1RSILauLPhTzIlbmj9RAxx7AGmat1z5c9V7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2a:c6:d6:3a:6d:fc:2b:ad:b3:b1:6d:3a:62:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=56f68552e596604b93562439fb22c00bfb17ff1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a2:8b:8d:c6:44:05:32:34:29:20:c8:fc:a7:
                    b6:74:ac:b7:5d:af:f5:9b:f0:93:42:93:f4:0d:fb:
                    58:fb:ff:19:71:c1:40:25:0d:5b:ac:0e:9f:2e:c2:
                    26:4f:31:ae:9f:f4:67:99:73:c2:ad:db:6b:f8:dc:
                    b2:2f:94:20:1d:c2:1d:3f:77:ee:4a:e5:2a:85:bd:
                    88:31:71:16:72:6a:78:15:20:4b:d3:ad:ab:84:d8:
                    59:45:c4:ff:aa:2b:23:70:52:ad:a6:1a:64:9e:10:
                    88:84:c9:0f:e9:08:c9:c9:6a:08:a8:08:2c:d5:a8:
                    ce:47:d9:91:73:1c:c9:cd:dd:8e:bd:ab:26:fa:ae:
                    7a:2b:33:31:b6:ca:a5:23:90:b4:19:ec:57:05:6d:
                    85:9a:b7:75:c7:0b:0e:2c:02:75:37:18:04:af:a8:
                    1a:2e:34:86:54:61:5e:5a:5c:98:cc:9a:39:d8:e9:
                    8b:b4:85:3b:8f:1f:99:8e:98:d7:bb:c9:c0:91:e5:
                    7f:67:1a:da:48:3c:55:bf:12:d0:7e:f9:be:c1:9b:
                    a3:be:b6:60:e4:b7:c4:58:e7:5a:6f:66:a5:3a:e3:
                    59:8f:e6:e4:c4:c8:9f:54:84:49:fb:e0:5a:91:5d:
                    1d:9d:34:cf:f3:f0:c1:4f:a8:27:2f:4d:16:75:ee:
                    7d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F6:85:52:E5:96:60:4B:93:56:24:39:FB:22:C0:0B:FB:17:FF:1F
            X509v3 Authority Key Identifier:
                keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:16:90:16:59:dd:e2:2a:94:d8:ab:8f:7e:d7:f4:2e:ed:8f:
         64:4e:4a:4a:52:b0:b0:93:8a:bd:96:da:fc:3c:5e:c7:ce:73:
         b2:c0:c9:6d:31:17:c7:26:3a:8e:8f:c0:bf:60:8b:66:7b:d6:
         f7:ed:c7:5e:2c:28:b7:4a:cd:ed:f9:2a:7b:f3:2f:7e:48:c5:
         46:d3:2e:75:33:b0:72:45:f4:f6:e4:1c:13:c2:37:74:bc:b6:
         52:61:a4:1e:1d:db:4e:a7:3e:a1:e7:fb:e9:8d:e7:53:c2:38:
         e5:0f:54:cc:23:3d:db:d2:89:b3:70:41:a4:4b:ee:f3:85:70:
         b2:67:5b:e2:49:c5:2a:63:92:29:d6:53:6c:00:d6:7b:7e:4d:
         84:0a:1d:f9:15:5d:70:4c:83:28:b6:47:a1:34:a9:84:47:fb:
         b2:e4:c3:6e:f1:4c:1e:a8:af:db:f7:a5:44:04:39:de:c2:64:
         88:ab:72:5c:7f:cc:dc:c2:4f:db:d5:bd:51:d1:08:85:3d:bd:
         bd:ed:97:9a:e4:cc:70:fd:b5:cc:ad:ea:5d:00:bb:d1:fe:d9:
         18:00:e0:86:26:fc:e9:4c:02:64:22:b0:86:07:4d:7a:83:38:
         62:d4:dd:27:66:13:d8:c6:22:bb:e8:1f:94:ed:50:63:2e:fc:
         7b:a6:ba:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----