Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File:                     B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier:          TJ1EbWQqtwoWhlSIkvRM8j0/n9TdkuR3qHRLAznMIso=
Subject key identifier:   15:1E:CB:28:F4:BA:2B:EA:99:55:EC:B4:F9:BA:8B:01:6F:2A:69:7E
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer:       /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial:       01962F066259A1DAA275B6BBC0503A523E7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=)
                          2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: nCqBcQIEs9XK+i4Gm1JvSdPuJ70OgQjZWpc/g4QFxaA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:62:59:a1:da:a2:75:b6:bb:c0:50:3a:52:3e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=151ecb28f4ba2bea9955ecb4f9ba8b016f2a697e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:2b:36:eb:23:e4:77:83:5f:04:fa:a0:19:
                    d6:98:4f:96:70:e2:7d:44:52:96:42:ff:97:5b:c5:
                    e7:d2:3b:a7:1d:1e:52:4a:1b:8f:9b:d0:0a:3c:1f:
                    58:06:f7:09:e7:11:fc:e9:ba:59:dc:06:27:ce:c6:
                    85:16:f6:46:b8:51:46:2e:51:2f:22:59:7b:81:e4:
                    de:47:7b:8c:d2:b4:c4:2f:22:ed:98:d6:70:b9:cf:
                    df:08:fb:f0:34:31:61:e2:b6:d6:18:a0:61:76:11:
                    13:9a:20:ff:99:a7:50:ae:0b:ef:f4:66:80:8a:16:
                    94:03:83:f5:46:79:28:01:49:ab:99:c1:b7:d4:56:
                    0a:0e:89:94:11:25:64:be:65:35:9d:f3:55:67:ca:
                    e5:24:5c:45:32:f6:8a:0b:87:cc:69:34:1b:f4:ec:
                    9d:8c:a0:08:67:70:ed:69:1e:4b:4f:36:a3:fc:9d:
                    f8:4c:41:d7:14:24:7f:1c:6d:ab:0a:5a:cd:09:d8:
                    76:ae:21:21:ae:eb:51:a9:f2:49:f6:e7:de:47:7c:
                    f3:40:fa:e1:ea:76:02:0d:8c:5f:f2:81:33:01:f9:
                    be:99:6b:b7:f8:63:51:db:36:0f:e7:64:36:64:96:
                    94:b4:6d:c8:9d:e0:5c:31:5f:05:6f:68:42:26:bf:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1E:CB:28:F4:BA:2B:EA:99:55:EC:B4:F9:BA:8B:01:6F:2A:69:7E
            X509v3 Authority Key Identifier:
                keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4d:2a:0b:11:fa:65:de:66:93:71:30:96:58:d0:53:ca:6b:
         a1:8d:ab:ca:27:14:e5:92:4f:98:fb:8b:50:30:a5:09:f2:fa:
         68:4e:e8:89:6f:b5:98:b0:b1:38:cf:fc:95:bf:17:18:c0:fd:
         d9:bf:8e:2b:c2:e4:97:da:87:b1:26:8d:1e:8c:d9:2f:cd:e0:
         dc:b3:9c:e2:c2:99:52:41:ad:3c:3a:f1:d3:7e:3a:e1:68:9a:
         f0:7b:3a:cd:e9:ea:f4:6a:80:bc:6c:cf:b0:ce:49:7c:7e:c4:
         3a:79:f5:79:7f:fe:29:c7:1e:bd:26:91:34:d8:a5:6a:42:fa:
         99:be:0d:fe:44:01:e7:ae:e0:f6:15:e7:51:bb:f8:b5:e9:5d:
         99:af:e4:f2:be:46:a6:e9:db:42:b7:cd:45:17:ab:01:a4:ae:
         ae:4f:be:96:95:ec:20:aa:41:22:eb:d7:46:8d:ff:70:1d:0d:
         e3:ae:69:66:d3:fb:e5:e0:d6:35:83:06:00:f7:e4:6e:91:8d:
         2a:5e:80:ff:47:86:e0:02:fc:e3:33:15:93:ec:9a:0e:3a:f5:
         93:75:d1:26:cf:b6:a4:38:11:f2:44:36:a0:21:52:86:9a:8a:
         99:ac:1c:48:90:5b:89:ee:a6:f4:b0:e5:49:9e:b3:05:d9:08:
         26:1e:4a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----