Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File:                     C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier:          4i65v/HwtrOZnQ8MAE0nfjHMQw1OhJ13RmTuy4FAAQc=
Subject key identifier:   21:5A:36:74:C2:F2:4B:72:71:F9:2B:E8:F8:C1:4B:64:C2:25:9A:FC
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer:       /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial:       01962FAB8006BF3885330B0FFB3885B9A2A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: lL5hEYxMNqJ6PPbd6XnuCKyUsYS8EtyJew/qPROrncg=)
                          2: QkxLvU8YDu4oULS0kxiCVhyfd8E.roa (hash: K9WP596tCXV0nIPIOmpyOTvsvplxAvnAucKosmkCUac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:80:06:bf:38:85:33:0b:0f:fb:38:85:b9:a2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=215a3674c2f24b7271f92be8f8c14b64c2259afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:40:dd:76:79:5c:47:7c:e0:08:79:0c:18:7c:
                    7c:46:94:4c:70:51:64:c1:85:eb:ac:23:02:4c:cc:
                    72:c2:ac:97:21:ca:47:50:f1:61:04:4b:7a:f3:09:
                    d1:e3:8b:1c:bc:32:ab:1b:80:4f:51:16:f3:52:ce:
                    28:88:e6:e1:77:90:c4:38:63:f9:d2:16:2b:20:e8:
                    e8:a3:f4:7f:03:70:3d:7e:8d:de:75:88:5a:41:01:
                    54:41:57:b1:cc:82:b9:ca:d7:04:fd:a5:dc:a7:9c:
                    1c:da:77:03:2c:22:be:4c:c6:d8:36:d0:49:a5:4f:
                    1d:b2:c7:ea:8c:92:d4:7a:9b:65:77:f8:ff:e0:49:
                    fd:6c:8e:89:cd:0f:f7:9d:f6:c0:06:9d:69:8a:33:
                    63:7e:21:fa:10:9e:22:d8:6b:ba:44:8f:13:30:b2:
                    c6:f3:21:ba:e1:cf:a2:5e:33:fa:0c:7f:8b:34:7e:
                    a3:9a:2d:1f:c9:3d:1c:38:6d:f4:c4:55:dc:e6:3a:
                    1e:60:a5:4f:6b:b7:f3:04:e6:fc:38:a8:c2:d6:ef:
                    7e:03:02:ca:87:4a:98:50:da:16:2f:d6:75:d6:29:
                    0a:54:74:75:35:17:e6:c5:2d:22:ae:a1:8a:85:6f:
                    89:4b:ee:bd:a0:68:87:17:0c:bc:97:5b:5e:bc:e3:
                    b5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5A:36:74:C2:F2:4B:72:71:F9:2B:E8:F8:C1:4B:64:C2:25:9A:FC
            X509v3 Authority Key Identifier:
                keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:81:98:ef:aa:12:97:a2:c9:81:0c:90:43:84:26:8c:1d:e7:
         57:13:18:6d:25:68:c6:0d:32:5d:96:04:2b:dc:31:e1:98:61:
         6d:b2:eb:a0:09:ef:db:d8:cd:09:3c:6b:f5:07:ae:18:9a:6d:
         8f:3c:30:39:25:b2:fd:f1:2c:a4:4f:17:c3:f7:ec:80:11:0a:
         ef:59:9f:41:2d:fa:9c:3e:a2:68:e8:4c:60:50:aa:09:39:b3:
         f0:ab:b5:8b:ea:90:33:29:51:2b:f1:f5:1f:d8:12:3f:4e:a1:
         64:86:77:c3:1e:7c:cb:61:59:5d:e9:e4:75:1c:fc:18:fb:34:
         bb:64:25:17:f9:d5:16:68:bc:7d:ba:a9:b0:52:d3:9c:df:ab:
         a3:6d:14:1f:02:4d:b8:39:15:d8:cc:71:71:85:27:09:d7:1c:
         82:58:d7:af:49:9a:39:48:ab:c8:9c:ca:75:c0:1a:f4:82:b7:
         63:c5:3d:2d:80:f5:81:48:4d:33:df:87:05:cf:07:eb:ee:ba:
         21:e3:25:4d:e0:12:fe:ef:28:45:10:d3:5f:f2:d7:60:f5:ec:
         94:51:2a:00:44:1d:d4:ae:38:10:9d:79:69:ce:1b:36:c4:49:
         23:e1:56:19:b3:a5:37:d1:ee:36:f4:5a:21:a0:92:aa:81:c2:
         ed:98:36:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----