Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File:                     MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier:          hKqIZ7ofxXQ/ZMXMY/xBwdt42/jfPRcUKQ6oytXjHqQ=
Subject key identifier:   B1:11:80:5F:A4:A9:A5:E4:C0:B4:27:2B:2D:43:5D:10:41:06:7B:FD
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer:       /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial:       01962ECF4D572DD48146B0A49217656BFF56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 11:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 11:00:59 +0000
Files and hashes:         1: HlO9ZQi1YEqVxRv4xtahO5YLBGA.roa (hash: aJ2b3cCx1ndyavIj0cgELjQKu/oO/oTwQkl8MyIO1oI=)
                          2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: 2BTDTkgUmitV9QaOUp7j4nPKrguXLyyPoJAF098NhK4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4d:57:2d:d4:81:46:b0:a4:92:17:65:6b:ff:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
        Validity
            Not Before: Apr 13 11:00:59 2025 GMT
            Not After : Apr 14 11:00:59 2025 GMT
        Subject: CN=b111805fa4a9a5e4c0b4272b2d435d1041067bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:64:a6:6d:e9:6e:b5:a5:58:67:50:d8:eb:
                    be:23:59:e3:c3:77:1e:83:a6:98:57:c6:6c:e9:d6:
                    aa:9c:90:6f:3f:23:4c:22:17:c5:24:37:80:bb:44:
                    d8:46:64:27:ce:db:24:d0:59:ad:89:d0:54:8d:8a:
                    92:1b:ad:c4:91:0f:c1:e6:0c:89:8d:20:97:c1:5b:
                    1d:55:1e:29:30:c4:68:13:4b:18:4a:46:42:fa:c7:
                    9a:eb:11:91:1c:33:0e:5f:52:ab:b7:9b:fd:1e:9d:
                    66:c2:e5:00:ba:0b:04:cc:42:f6:a6:c9:7c:41:3d:
                    5a:ca:1d:d6:15:87:0c:d9:7c:58:ca:f4:55:3c:de:
                    0c:80:2a:c6:46:e1:cd:b2:4a:83:b4:27:30:cb:e8:
                    1e:98:a5:a6:d7:f8:64:57:cb:cd:24:38:29:c4:59:
                    c1:2e:65:f6:90:25:8f:76:1b:de:b4:91:06:f9:a7:
                    a9:bb:fa:bb:0f:e3:a9:61:73:3b:ef:28:1a:24:ae:
                    01:a5:2e:1d:b1:25:2e:a4:9a:b1:36:0c:19:ca:69:
                    dd:42:eb:ef:66:e4:eb:2e:ea:73:0d:4b:04:e4:62:
                    c3:c3:63:3d:5d:a3:dc:1d:bd:53:b1:85:ae:51:32:
                    a3:c4:a5:3a:61:d4:d5:75:51:ff:c7:e4:57:97:7d:
                    a3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:11:80:5F:A4:A9:A5:E4:C0:B4:27:2B:2D:43:5D:10:41:06:7B:FD
            X509v3 Authority Key Identifier:
                keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:b6:31:cb:09:6d:eb:89:9f:9d:65:c9:66:9c:91:bf:93:8f:
         b1:af:1c:7d:02:99:3b:bd:e6:ae:7b:e0:81:e8:aa:93:1a:aa:
         a8:32:13:e1:47:e2:22:49:a2:6b:22:0f:71:bf:bf:70:47:3b:
         ce:50:af:ee:bf:78:c4:99:a4:78:2e:e7:76:48:8f:22:72:ef:
         7e:af:ba:1e:60:24:78:c8:08:39:ce:d8:0b:5c:45:18:ab:5f:
         85:d8:64:df:77:d7:df:02:21:4c:76:72:2b:2b:b9:d1:8d:e7:
         84:38:dc:24:9b:14:79:44:4e:82:43:dc:2c:ee:bd:12:ec:e6:
         e2:a7:a4:d2:77:e4:43:f0:46:49:2a:8b:21:48:59:09:14:c0:
         fe:67:3c:a4:e8:5a:71:52:d7:ee:4f:56:a4:f6:db:71:29:7d:
         52:f3:b6:a2:2d:c7:4a:ae:a8:0e:0c:e0:6b:f8:0f:f9:01:6e:
         59:62:e7:73:c0:76:08:f7:34:01:54:0b:a2:15:f9:75:42:f6:
         4b:83:95:b8:5f:0b:96:67:ed:e6:bb:f5:f2:0e:c9:a7:36:65:
         dc:c0:48:42:87:4e:4e:4b:77:56:11:3d:e0:bf:c6:3c:ee:87:
         de:27:e3:3a:7e:e7:d1:8c:6f:55:23:a8:4e:b3:2a:37:0e:4d:
         72:60:28:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----