Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
File:                     A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft (raw, json)
Hash identifier:          ehgj0WkyxOgo5LVk9mtjcBRvwwyuZoXHi1Mt1Gm7260=
Subject key identifier:   BC:8A:40:AC:F3:4A:64:10:28:3D:89:16:74:21:11:5D:AA:ED:C4:A1
Authority key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
Certificate issuer:       /CN=039916dc890f08fe55c75bb4439d6016704b7a61
Certificate serial:       01962E2B089CD046F583E1A559A6340DFCD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
Manifest number:          0A5E
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl (hash: WFqSogPeFME73otR7SOxIJ9yDrDDgRsk6icA6CHWNMY=)
                          2: PMNnc8UiTx_1PdJEiYIJsVqvM18.roa (hash: glo0oQZnzXQ/WEXl4o++QXVkyGkwmaHI6OvTjJhSMHE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:08:9c:d0:46:f5:83:e1:a5:59:a6:34:0d:fc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039916dc890f08fe55c75bb4439d6016704b7a61
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=bc8a40acf34a6410283d89167421115daaedc4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:18:56:d8:1a:9d:1c:65:ea:df:19:ef:02:
                    78:97:da:59:79:03:86:5d:72:e1:81:63:e0:ce:ae:
                    b1:88:86:90:7d:72:00:6b:0d:93:f7:f7:65:a5:e0:
                    98:4a:f2:98:24:cf:79:cf:15:e7:a9:71:15:28:0b:
                    95:b3:ef:30:85:98:2e:2d:a6:ab:b0:02:b8:69:35:
                    78:13:55:50:61:29:4a:a3:76:1e:cb:16:d2:a1:d9:
                    fc:2c:17:3a:38:fa:00:6b:b7:a9:8d:69:ed:79:a1:
                    47:01:a4:21:b3:84:5b:78:2a:2d:35:20:4f:9a:87:
                    0a:71:92:95:77:15:51:14:84:31:f5:97:f4:60:84:
                    07:5a:74:bf:6b:93:39:56:b2:87:fa:c0:51:a1:86:
                    b7:0f:97:7c:a2:fe:6c:a6:31:cc:15:32:5e:fe:bd:
                    d4:b2:24:ca:d6:ed:46:24:f4:ea:f0:72:d5:e6:43:
                    54:b8:74:b1:e4:9c:87:3f:32:2b:0a:5a:2b:15:8d:
                    9c:95:9c:36:8e:c1:d4:86:de:2c:79:77:69:b8:72:
                    62:97:65:6b:78:e9:76:53:a8:05:f6:18:3d:48:2d:
                    1a:b8:cd:c3:8a:99:a0:78:4e:46:16:51:96:ad:2e:
                    b2:ed:c1:aa:cd:2f:18:6b:e1:12:91:6e:9e:b1:e4:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8A:40:AC:F3:4A:64:10:28:3D:89:16:74:21:11:5D:AA:ED:C4:A1
            X509v3 Authority Key Identifier:
                keyid:03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:48:cb:12:b2:dc:c4:d4:99:ca:cd:0a:63:66:a7:91:c6:45:
         71:9f:44:54:a7:6b:91:6f:a1:85:a5:08:26:19:29:78:c6:65:
         41:ea:ad:36:c9:e8:c8:83:52:ee:48:bd:78:ab:42:7a:1d:79:
         59:1e:f4:e5:98:74:ae:93:ad:d0:53:ac:cc:c4:82:4d:05:17:
         86:11:75:c5:7c:63:0d:c5:ed:25:0b:50:b5:f3:9e:bd:b8:65:
         13:ff:6a:4d:e7:98:fe:c1:cc:c0:0f:69:30:ce:a2:48:c7:3b:
         42:03:b0:bd:33:c4:60:8e:c1:b8:23:5c:3a:23:8e:f5:04:b1:
         02:cb:cc:c3:70:0d:76:93:55:91:89:a8:18:34:88:5b:e6:71:
         d8:6c:d2:1c:04:50:89:99:da:40:8e:65:08:94:44:3a:f2:f9:
         1b:b1:36:7f:f4:98:2c:1a:cc:fc:ff:a0:2c:ce:ee:7d:b4:b5:
         b5:21:52:7b:4b:66:b5:62:64:bc:61:89:c0:e1:50:4c:8b:1b:
         74:79:99:e3:cb:ff:ba:93:22:65:46:96:4a:a9:99:4b:0f:f0:
         33:1d:72:8e:06:88:10:08:5b:00:2e:11:1f:e6:ea:b0:e1:6c:
         13:65:5e:13:13:44:a3:47:b6:7e:9b:31:25:ac:91:7f:04:43:
         bc:e9:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----