Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File:                     crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier:          m6ISuIPWXufpAlDKqxYz7D6qjNtTWkpQj4CsvFNtwaI=
Subject key identifier:   54:D8:90:FC:D7:21:A4:D4:16:D5:B1:51:46:CC:9E:30:4F:99:DA:2A
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer:       /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial:       01962F06B8FFA73D9EBA0718346DD190885A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: U-ro-LNCvBFTwBgTtGDT2mvZouk.roa (hash: 6fLiIQ9uzQL3oVBXgLqfKJlttobGrN9uY8IvnWrXSwc=)
                          2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: B4JIAv0rb9/PCFHXd6Lj/UGmdrgmOX+CBVShMyXzujw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b8:ff:a7:3d:9e:ba:07:18:34:6d:d1:90:88:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=54d890fcd721a4d416d5b15146cc9e304f99da2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:18:16:13:ac:c2:e5:09:a6:1b:bc:fa:1a:b8:
                    3c:ca:67:2b:51:44:50:1e:2c:01:1e:33:fc:cb:90:
                    0b:68:2e:af:39:45:7e:d0:7b:4f:87:d9:5b:13:f5:
                    93:73:dd:cd:64:5f:87:80:cd:2b:c2:35:4d:a2:21:
                    40:3a:f1:cf:aa:c4:2d:50:82:1f:7a:a4:e9:4b:2f:
                    e0:b5:2f:96:4e:c9:a0:fd:63:a3:8a:78:8a:3c:76:
                    66:ec:01:f0:ee:51:17:cb:52:68:17:2e:fa:10:3d:
                    c3:1f:df:8c:12:48:ad:94:a1:66:0c:68:61:36:5a:
                    92:25:dc:84:54:82:5f:3d:cf:fc:f2:d9:05:87:1b:
                    bc:3c:70:56:06:40:58:a0:51:fc:91:41:7d:cf:9b:
                    19:44:ee:7b:6c:b8:de:d9:54:7e:97:27:e3:40:02:
                    8f:44:14:9d:48:e0:34:53:c8:b1:cf:8a:15:68:17:
                    6e:a0:c6:12:9f:12:9e:9a:0d:50:77:53:06:87:ea:
                    9c:58:89:db:d4:cd:6c:85:f6:dd:e2:3c:b1:76:fe:
                    d7:88:4e:fc:c1:3c:30:42:7a:a9:33:58:9d:d5:16:
                    f0:24:db:da:4d:d8:ce:a8:e3:15:33:c6:fc:bc:95:
                    bb:3c:ca:6f:22:b3:be:0d:09:bf:ae:21:a3:61:dc:
                    5f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D8:90:FC:D7:21:A4:D4:16:D5:B1:51:46:CC:9E:30:4F:99:DA:2A
            X509v3 Authority Key Identifier:
                keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ee:26:20:4a:1f:93:16:fd:3a:ca:e9:a8:26:f2:31:7a:e8:
         9d:f2:9b:91:ff:fd:72:4f:a1:8f:b0:52:97:36:c8:8f:e4:a3:
         9f:43:f4:13:92:7a:ec:9b:34:2f:56:a8:6b:74:42:59:53:52:
         c2:b5:67:f8:41:9f:94:48:b1:26:56:bf:9b:b7:2e:7c:93:17:
         d8:c1:49:d2:0e:be:9b:e2:95:4e:11:13:82:46:74:a5:29:64:
         0e:2c:9e:18:71:bb:f9:d3:8e:2a:aa:e3:47:93:1f:58:ff:7a:
         92:12:56:23:0a:30:4a:95:36:4f:c7:e9:33:14:16:67:5d:90:
         6b:3a:94:c6:00:bb:fa:fb:1b:f4:4f:ef:eb:aa:a4:84:44:6d:
         ea:47:4d:3c:49:1e:b4:db:3b:2e:13:76:e6:f5:17:8e:4e:ae:
         a0:4a:8f:53:a5:24:6d:64:c2:8b:5c:93:65:3d:45:07:b5:e7:
         6b:07:70:fa:f1:e8:15:3c:9d:e7:45:2d:8e:b1:ce:cd:93:ef:
         21:e7:08:df:88:4c:49:3e:0d:68:aa:49:23:bf:01:d4:98:d1:
         0c:5f:11:84:c8:98:6d:22:a0:5e:54:3a:db:cb:44:eb:30:7a:
         64:4f:54:9b:7e:1a:ea:17:d5:1e:37:bb:92:17:27:4a:7a:06:
         a7:f3:47:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----