Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File:                     MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier:          c1iu6i+LQYDwhsC17LRXvMJVGSIO0XK0Q8ZtNiQkYws=
Subject key identifier:   C6:38:43:17:E8:A4:0E:4C:2C:33:F6:F2:F8:86:CC:CC:84:27:7B:39
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer:       /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial:       01962E99C23C42B10D2323F6ABC25661F9E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number:          0BD0
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: 7TAMIERTqpYLHsHpID+0YAcwqGBdSlXC2QYONpuvF8k=)
                          2: hApSbA3jzy_s3iVNvrGjhLhy3rU.roa (hash: 1X2vbtL7wfNX8hGTI4KlZns0bkwGbPIYpWY571Ew9V0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c2:3c:42:b1:0d:23:23:f6:ab:c2:56:61:f9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=c6384317e8a40e4c2c33f6f2f886cccc84277b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:0f:f2:91:44:16:46:9d:05:2d:db:02:32:
                    85:89:eb:6a:f3:8f:6b:4a:60:60:8d:11:a8:f8:89:
                    c6:dc:1d:a0:07:1b:8b:81:8c:27:e5:cb:fc:0b:e3:
                    8f:f3:17:7c:3a:14:75:cd:3b:3e:42:69:4e:33:f9:
                    83:21:1c:ee:6d:e3:28:0a:0b:72:dc:40:74:72:2e:
                    b9:3a:5b:3c:1c:3b:90:97:c8:3b:27:b5:bc:ca:ec:
                    f6:84:8d:e7:90:5b:34:a2:3b:65:a7:9b:95:89:e7:
                    3c:e5:d7:0b:ae:e2:66:ed:49:50:20:62:d4:d8:4f:
                    e5:78:ab:26:ea:5b:83:7e:86:74:b0:72:68:66:87:
                    d2:4c:5e:e1:ff:9e:24:3b:7b:ac:eb:4b:e4:e6:7d:
                    8e:d4:12:bb:95:00:34:15:b8:9f:8a:8c:91:6f:38:
                    53:54:e7:5b:42:8e:c6:3d:6f:af:81:79:99:e1:94:
                    a1:d6:58:fc:8f:04:b7:c9:00:01:ce:8c:78:98:9d:
                    ff:86:51:43:4c:9b:51:84:3a:e3:19:69:90:0e:e7:
                    c0:dd:94:fe:27:eb:59:b2:8c:63:f9:c9:e4:f8:2f:
                    1a:76:2d:ac:e5:a7:ec:0a:34:24:7f:2b:07:3d:07:
                    59:0d:74:4e:fb:0a:85:35:9f:6a:9c:0f:63:88:62:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:38:43:17:E8:A4:0E:4C:2C:33:F6:F2:F8:86:CC:CC:84:27:7B:39
            X509v3 Authority Key Identifier:
                keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:aa:e2:3e:8b:8c:a7:f7:31:64:70:70:60:89:b6:7b:8b:43:
         ed:98:ee:59:9c:15:3e:26:e7:18:a0:8a:4f:1e:23:e2:56:ba:
         d3:cc:6c:0e:e6:ce:ca:69:38:7c:17:a4:63:3e:9d:ad:0d:34:
         27:f9:69:a3:51:59:c6:b9:83:18:a7:a1:c4:18:4b:e7:58:93:
         0d:b4:ac:01:07:0d:3e:64:cd:20:9b:4f:69:09:44:73:00:3c:
         3a:c3:6d:de:40:b3:01:9d:d0:d9:32:af:56:8b:e3:59:15:72:
         b4:24:d0:66:ca:63:86:af:c6:77:ef:97:69:4a:61:ea:f3:79:
         39:7a:cb:12:7d:3c:9f:83:ce:6c:e9:0c:45:e6:cb:34:1e:58:
         d5:a5:7c:f0:22:6e:56:35:70:bf:aa:c9:d7:4c:09:dc:3d:9e:
         3a:20:d5:d3:0f:3f:1d:97:f7:76:f5:a2:a0:91:b5:19:46:b8:
         82:f7:60:21:98:64:ce:27:aa:fa:85:57:da:16:e4:7e:aa:b7:
         01:8c:eb:e2:0e:45:f8:70:66:1d:51:d2:54:ac:49:7e:3c:b7:
         88:81:65:b0:cd:8c:34:cb:5d:6e:9f:83:51:fe:2e:84:c2:fe:
         19:c8:17:52:07:2e:ca:41:ae:52:ff:b6:6e:6a:e2:0f:61:41:
         00:9b:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----