Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File:                     An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier:          LwcQhHN0yi3kRbn5s6E3lh6VbKqBzJWzc4+ioxFku00=
Subject key identifier:   77:9E:31:CF:AD:C8:46:28:2F:81:2F:89:DA:11:1F:08:F9:E0:66:3D
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer:       /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial:       01962E99C107953DF0753E6999781A242D6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number:          02AB
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: /BibHVePrdsfeRPHn7I+kV4Wj563ILprcxH6SaHua50=)
                          2: M5q-y_pSOaw-LnhCtgtI_cxU90s.roa (hash: EkxFUEnDMMrgIyFYsLlI4yCORNtS7fa6ZKub0vDM94A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c1:07:95:3d:f0:75:3e:69:99:78:1a:24:2d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=779e31cfadc846282f812f89da111f08f9e0663d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:3f:53:57:81:39:ce:b6:83:17:ec:34:5d:
                    b6:e3:f5:9c:3c:4e:41:26:8d:1a:52:ab:8b:58:17:
                    e5:2c:6a:52:08:06:cf:d3:e0:9e:39:db:05:2d:38:
                    59:ed:54:22:02:41:8b:fc:40:a2:cb:2e:cb:7f:f7:
                    34:d1:28:61:ea:b4:3d:79:a4:cf:41:04:e7:15:78:
                    aa:3a:fe:9e:53:ff:d2:5d:58:00:90:89:99:4e:83:
                    d3:ad:2b:49:a2:be:24:e3:68:9d:4d:89:30:8a:20:
                    dd:82:94:3c:82:c1:35:fb:75:16:04:33:69:18:bf:
                    66:92:cb:47:3b:a9:28:79:21:42:f4:f7:3c:ac:24:
                    db:9a:f0:55:c8:b3:b1:88:e3:50:ee:2d:46:0c:f0:
                    84:08:78:3e:27:c0:93:eb:cf:78:0b:d3:75:d1:05:
                    1e:f8:b4:42:3f:2f:e7:1e:6c:da:21:4a:61:87:2a:
                    32:7b:95:69:e0:8c:50:b7:64:a3:2f:ce:45:63:81:
                    92:35:49:9f:2f:d5:a4:4e:d6:36:e9:a4:0a:7d:97:
                    55:a8:07:d6:b1:14:51:f9:1c:76:1a:18:7e:0e:b3:
                    35:a5:04:bc:63:12:e5:28:58:d8:81:c1:28:76:e1:
                    ee:9f:dc:7d:57:6f:cd:3d:4a:87:e1:d9:fd:c8:7d:
                    ff:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9E:31:CF:AD:C8:46:28:2F:81:2F:89:DA:11:1F:08:F9:E0:66:3D
            X509v3 Authority Key Identifier:
                keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ef:2d:42:17:43:7f:1e:cf:34:76:b2:30:b5:2e:cd:69:60:
         95:4a:69:ec:4e:1c:b1:0e:1a:6f:3d:44:64:ec:e3:d0:31:a9:
         c0:33:ee:33:17:13:a6:20:3a:4e:ce:7e:44:88:48:71:df:99:
         6b:18:c4:d6:94:20:82:62:d7:68:d8:2b:ed:8f:73:0b:57:85:
         0d:4c:17:99:01:43:a8:30:e6:57:fa:ef:aa:63:71:dd:1b:b5:
         48:34:52:02:4d:5b:97:3e:e2:a1:0b:10:13:06:8d:51:fa:17:
         85:a9:0e:33:7c:e9:8f:2a:5b:7d:5a:d4:8c:26:55:bd:8c:e0:
         3f:61:3b:a0:1c:db:d1:02:e0:79:54:a4:8a:49:ec:5d:50:ea:
         20:13:60:eb:68:98:5c:3c:f9:1a:d6:0e:2d:42:66:14:03:27:
         5f:71:b4:17:a7:64:9b:a4:17:9e:40:ef:cf:70:53:31:fb:f5:
         ba:83:78:ec:8f:82:2f:0f:06:1a:cf:f0:7e:32:b3:6a:3d:52:
         49:27:f6:86:a7:fd:c8:ae:75:8c:da:0d:01:d7:2e:44:36:c6:
         95:3d:2c:69:42:5f:b3:3f:cc:a9:32:41:e3:02:ed:8b:8f:9b:
         6d:ac:84:d1:cf:40:4a:05:30:33:99:25:c3:66:50:e6:da:70:
         6f:84:95:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----