Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
File:                     1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft (raw, json)
Hash identifier:          b2EFOCbG2hzlp+63uesGDtMlNXkK26c6Y8V4492SlIw=
Subject key identifier:   A3:17:47:C5:21:85:0C:C8:2F:B3:F0:D5:B1:2F:95:46:3B:98:03:F5
Authority key identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
Certificate issuer:       /CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Certificate serial:       01962F3D949E320D90F434D8C7C778EB34AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
Manifest number:          0180
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl (hash: gWXSSas7agmo+FhkRqt/WEZVxfIIQbvJYFviIvC+mlg=)
                          2: d97Ch2oOF5rboQAm4Ny7S68pdDs.roa (hash: GTey3KF1CvpIvjeJCgqABtZ3XGUGtGoEyAaxaxLHaVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:94:9e:32:0d:90:f4:34:d8:c7:c7:78:eb:34:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=a31747c521850cc82fb3f0d5b12f95463b9803f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:92:af:f6:39:d3:22:6c:27:dd:c5:63:6a:
                    78:62:b8:13:a1:8a:7d:04:c2:21:05:32:b1:b1:bd:
                    fb:48:31:f7:4d:31:d1:43:76:4f:ba:25:63:ac:a8:
                    d7:d5:0b:a6:a3:ad:05:bc:65:e3:48:1b:10:0f:ba:
                    07:f1:74:82:80:45:9e:9d:25:70:2d:2b:52:fa:79:
                    b8:b6:97:c6:e6:c6:c0:f7:5f:15:36:a7:9b:10:97:
                    34:eb:d0:eb:ab:60:13:49:ed:8e:20:ca:cb:c9:cc:
                    60:de:2a:b8:81:5e:19:0d:57:33:ba:e1:98:c2:25:
                    4a:d1:1e:ba:8e:f5:ad:ca:c1:c6:6f:3c:b6:7d:92:
                    bc:04:48:50:a4:23:3f:35:b6:d1:77:a3:09:ba:d0:
                    65:99:d7:cd:79:93:d9:bf:8f:0e:c3:5a:9d:dc:89:
                    ba:dd:51:a8:f5:40:ba:3d:43:4b:4d:9a:5f:6b:43:
                    83:ad:fb:92:ff:f5:29:9a:0f:e1:c5:21:c7:df:92:
                    41:64:1a:48:14:9c:b1:3b:b8:1c:41:c2:f7:a6:91:
                    b4:28:fa:f4:4a:af:58:d8:d8:21:1c:d0:76:c7:c2:
                    94:45:4f:15:4c:15:9b:0c:7a:54:25:88:6f:09:1c:
                    98:8e:53:57:e2:e6:45:f2:8a:50:db:cb:b8:99:21:
                    73:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:17:47:C5:21:85:0C:C8:2F:B3:F0:D5:B1:2F:95:46:3B:98:03:F5
            X509v3 Authority Key Identifier:
                keyid:D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:79:41:e9:2f:da:00:b0:00:17:b4:62:e7:2d:9a:b0:1d:90:
         a7:4d:2d:b4:92:30:02:95:9d:4e:f3:d4:27:b7:c0:f1:7f:88:
         a7:5d:5b:c8:e2:e7:7a:70:70:b5:2e:fc:20:c3:1a:27:c0:d4:
         9d:95:a5:ef:f0:52:6c:29:7b:fa:dc:c8:ab:8b:a3:33:78:a8:
         a6:58:5d:ac:23:b8:9a:e8:71:4b:fb:ca:c1:9e:f4:fa:58:0f:
         30:3d:10:4c:62:6c:b0:36:65:5f:93:b0:c5:19:0c:4d:ba:76:
         ec:72:05:28:bd:d0:7c:10:46:70:98:b1:da:8f:3a:cb:18:d2:
         88:d3:68:72:7f:da:d1:d8:4c:13:a8:14:b9:67:41:37:55:e6:
         1d:7a:18:88:a2:70:8d:0b:31:cd:ce:a7:42:be:eb:b4:44:e2:
         18:a3:d1:b3:a5:57:45:16:88:8b:c9:f3:e9:9f:85:00:88:cb:
         eb:3b:71:11:a2:3b:a3:30:ad:f6:18:d4:6d:3b:f5:b8:21:30:
         c8:68:ce:a0:3e:2b:4d:b6:9c:1f:41:c7:ad:8e:5c:0f:4c:25:
         56:da:a5:92:60:15:28:8d:9a:a3:a1:15:d3:e7:68:0a:d9:4c:
         1b:a7:8b:92:cc:4f:38:2c:e7:1a:f4:77:15:97:57:5b:c0:3a:
         8d:0a:bc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----