Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
File:                     H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft (raw, json)
Hash identifier:          3q9fheZnhhuMCYieZ3CFEtSPcsduTUOO8Mf3Hdexxso=
Subject key identifier:   DF:E2:A4:D6:0A:DE:6C:23:83:DD:60:CC:4C:F7:9D:5B:20:2E:B3:C1
Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Certificate issuer:       /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Certificate serial:       01962F06F3E06751ED34633C30A97DDE814C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
Manifest number:          0ADB
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl (hash: WJqzvEIrV+WIHTRwCZzl/XMZ8id1wXGAcRsGb8yv3UY=)
                          2: mxOxKrBmnmPClr9Kc96iEdW6XUE.roa (hash: UbZRUNNa6gB9j1h+WjL/FTz+dVPKNCXmn8kcP5ajisc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f3:e0:67:51:ed:34:63:3c:30:a9:7d:de:81:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=dfe2a4d60ade6c2383dd60cc4cf79d5b202eb3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:62:5e:2c:91:a3:ab:fd:f4:5d:a8:46:43:
                    de:c8:dd:f9:27:3b:1c:4e:bc:6b:08:e9:63:fb:12:
                    43:ab:7b:3f:66:69:b8:14:5b:1f:b6:d1:a6:2d:e5:
                    08:19:61:08:c2:05:6c:98:4c:fe:40:e3:01:4e:4d:
                    ad:fd:1b:93:be:f7:dd:cd:0b:89:64:dc:14:2b:42:
                    4e:60:39:27:7d:3a:f5:82:b6:72:36:20:76:77:05:
                    6e:f1:31:5b:b6:a4:fa:b7:00:aa:9c:96:98:97:6a:
                    b8:d2:cb:23:03:d6:59:20:95:1f:cd:8d:9e:7a:7c:
                    66:0a:52:3a:07:1a:b6:fa:5a:6a:9f:29:87:d0:ff:
                    b0:f7:2c:d1:33:a8:eb:46:22:f8:ca:80:a7:a9:f7:
                    b7:9a:cb:d7:f7:d7:b1:dc:1a:06:d9:4c:a9:28:51:
                    e1:1b:7c:a1:aa:d1:27:db:59:2a:23:05:84:9d:29:
                    bf:ae:5c:9b:59:16:aa:63:81:b0:cb:1f:c1:44:54:
                    25:8b:41:8d:1e:2d:39:f7:dd:fd:06:b2:04:ff:b3:
                    49:66:37:3f:ae:c9:e2:9d:29:2d:4e:88:b9:01:5b:
                    83:11:88:c4:b6:75:90:dd:4d:a3:f3:26:f0:99:3c:
                    85:21:31:16:3f:60:4c:9e:8f:4a:a4:c3:3c:75:fb:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E2:A4:D6:0A:DE:6C:23:83:DD:60:CC:4C:F7:9D:5B:20:2E:B3:C1
            X509v3 Authority Key Identifier:
                keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9e:bc:1a:c5:06:1c:d5:21:72:36:4f:81:be:06:00:6f:a8:
         3a:7a:e1:83:a6:50:05:3a:4e:f7:e3:06:29:26:01:df:a3:6d:
         03:7d:c0:77:38:9d:a1:d5:cd:1e:76:2c:fc:44:c4:f1:27:ac:
         da:d3:c5:c8:28:1f:fe:c9:dc:08:73:da:e9:57:30:66:ba:b6:
         09:6b:64:39:44:bd:68:8d:c9:cb:e4:ae:ed:2b:d7:4a:25:1c:
         e3:fc:6d:01:3a:b2:3c:9b:ca:08:78:d7:58:e2:90:3d:f4:be:
         06:93:2b:a6:bf:a9:e0:df:80:15:a8:aa:55:64:b6:d8:51:11:
         a3:f0:c8:65:d3:4f:c4:91:f5:4d:d6:93:0d:8a:49:57:52:67:
         7d:8c:d4:74:a8:39:1e:c3:71:d5:58:8f:f3:8c:b6:56:ae:1c:
         80:25:90:3c:ca:b9:28:33:4e:0c:eb:b9:f1:de:34:33:c7:49:
         16:7a:71:9b:f2:65:d0:e5:75:b1:ac:2b:b0:7b:a9:7d:12:1c:
         f7:d9:8c:6d:09:7f:e8:55:26:ed:f2:90:49:49:25:42:2e:26:
         89:45:a5:77:a3:f0:0b:5b:74:c4:af:9c:ee:c0:6e:1d:33:ce:
         2a:61:9b:87:6a:2a:36:25:d5:1e:79:8d:4f:bb:40:07:b1:71:
         9e:a7:b6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----