Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File:                     _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier:          h5FJfSCC35jMHEW5yksmtA1X6UYJ46MovyMGilDr3BY=
Subject key identifier:   AD:6D:23:71:3A:DC:FA:97:46:A5:CB:A0:B3:D8:15:75:5B:6B:59:13
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer:       /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial:       01962F3DADF06A63D61D7BF4D3EA392C571F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: H5zExKsN_X1SPJQSwEakZzqeC2I.roa (hash: FjXiEi3V3MLLSMvrOdppNODHARmQ2b/yPySFztutI1Q=)
                          2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: q/4cPk3PW2QpapELRJQTPrmVKvE6ewWc4DR3rhAtgPo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ad:f0:6a:63:d6:1d:7b:f4:d3:ea:39:2c:57:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=ad6d23713adcfa9746a5cba0b3d815755b6b5913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:4f:d3:5d:e5:83:08:da:df:5e:bc:2f:4e:
                    e5:c4:72:30:7e:c3:cf:89:f1:94:9c:19:c4:8f:48:
                    45:2b:8b:f2:42:ae:2f:48:c2:1a:4f:02:c9:10:fb:
                    a3:e1:c4:cc:ac:9a:b4:92:55:e2:f6:35:cb:83:ba:
                    28:ba:65:c4:c4:b2:7b:59:f5:32:d0:23:cb:b6:3a:
                    19:fa:94:50:31:f0:6c:b7:de:47:2a:92:d2:fe:a5:
                    52:8b:3f:a7:e7:47:2c:01:2f:06:f9:88:d3:5e:b6:
                    6e:05:ae:63:c7:f6:f8:24:a3:2f:a0:a9:4b:aa:c6:
                    0a:53:69:06:37:98:92:f5:b4:ac:f9:69:f6:aa:84:
                    f9:8e:93:04:34:61:ca:22:57:68:ce:01:78:67:8c:
                    1e:f4:0e:1d:a4:68:f4:3c:1c:bc:a5:0d:09:94:4b:
                    72:de:3a:ce:57:a6:18:b2:12:10:7c:8a:aa:9a:39:
                    ce:31:66:ad:8d:14:c0:68:7b:99:e5:28:1d:70:f6:
                    8f:c2:ad:f3:b7:86:93:a4:d8:3e:7d:b4:ec:59:87:
                    b5:b2:c0:3d:cf:ef:ad:88:cc:5c:79:53:70:00:50:
                    43:d1:5e:80:86:86:1f:ee:bc:5d:14:99:70:69:e1:
                    06:f7:9b:5e:72:1d:3b:9b:07:9e:95:3b:fb:f0:8e:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6D:23:71:3A:DC:FA:97:46:A5:CB:A0:B3:D8:15:75:5B:6B:59:13
            X509v3 Authority Key Identifier:
                keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e5:b6:da:28:02:dd:d8:bd:0c:e1:73:c6:1e:75:48:16:ce:
         ad:3a:10:cd:c4:89:02:0f:ac:9d:de:26:a5:fb:46:d9:d1:fc:
         a9:17:c8:6d:56:bc:bf:ae:63:e8:11:6a:1c:98:7e:04:a6:16:
         02:33:4d:28:e1:99:82:ea:69:16:4a:2f:33:7b:f3:be:31:c5:
         e2:69:6c:80:0d:07:01:4a:6c:01:3c:07:54:94:5c:62:71:90:
         2e:65:35:8f:72:33:40:ac:ba:4d:97:23:0b:34:db:9d:00:71:
         58:41:d0:73:71:4d:5c:ce:67:70:3c:d7:71:95:d3:96:ec:59:
         f4:19:dd:a0:c1:d7:a4:e8:45:79:b0:20:b4:d0:e3:eb:19:9c:
         90:53:0b:11:18:12:7d:83:e3:d9:b2:d0:ef:e3:c8:a1:06:72:
         f5:4a:69:77:9e:7a:b3:61:05:48:45:13:3a:a3:fa:ea:60:de:
         97:00:0a:90:81:d0:c3:06:0d:95:39:b8:46:2d:bb:9c:d8:67:
         62:59:8d:6a:2d:c0:6c:58:2b:27:d4:4f:0c:04:23:41:e8:e2:
         39:b6:a9:9c:0c:85:b8:18:19:b1:63:f5:0a:d1:27:24:e9:fc:
         5b:45:8c:fb:6f:eb:76:61:13:93:7d:34:d0:d4:ea:2a:6e:ce:
         6a:c3:44:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----