Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File:                     0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier:          MNQ5mHRzZbQJOZSFCqOnUefdbFtS8EqxdVKRsisErQE=
Subject key identifier:   5C:C6:72:78:E9:AE:57:0D:D6:15:FD:97:31:25:33:72:24:98:DD:A6
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer:       /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial:       01962F067BC02014168090CDDE3D8E5E40F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number:          09D2
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: py0ooDLH4mLhkvFQZSIND8ZaDKxQ1ic6DSdSTqYNUBo=)
                          2: 5LrP6fsEeipB-xjaCGTQi9KsiHU.roa (hash: IUrzC+/E4lKM4F7rtTCN//MYlbyHBk9E/FLwLHHLeZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7b:c0:20:14:16:80:90:cd:de:3d:8e:5e:40:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=5cc67278e9ae570dd615fd97312533722498dda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:cd:da:32:3b:b8:de:ed:5a:2a:6d:11:17:
                    de:0d:7e:d0:1f:6d:62:b4:9e:0c:c9:fc:d5:8a:47:
                    78:13:a1:7f:89:48:1b:ba:6b:ea:7b:3d:be:eb:3c:
                    c6:4a:7d:af:8b:d1:41:f6:d0:24:75:af:d2:81:f9:
                    18:d1:dd:01:cc:8e:d4:bb:27:18:0a:e5:f9:c3:9d:
                    37:76:02:f7:28:0f:80:05:b4:fe:cb:6b:fc:25:6d:
                    5c:a5:fe:68:16:f1:71:66:90:1c:72:2f:2a:f3:d4:
                    d7:b2:00:e8:57:e7:bd:31:f5:50:c9:47:91:96:99:
                    20:c0:7b:45:f9:53:eb:e5:b9:69:cd:f0:c7:13:30:
                    db:15:86:93:8f:7c:93:e1:e7:ce:b6:77:bf:59:b5:
                    e0:0a:9c:30:70:86:ab:ce:07:e4:5d:6c:0e:5a:a1:
                    43:7d:2e:13:06:6d:dc:42:cb:22:07:63:93:a6:5f:
                    8b:fb:95:d4:14:0c:c1:a8:12:21:7c:b9:2a:f2:97:
                    0e:47:61:08:b1:79:4e:56:88:4e:eb:4e:e8:52:80:
                    f8:7e:2b:a2:05:61:ef:ea:c0:cd:21:b9:39:c0:89:
                    c4:77:10:00:4a:70:f3:a8:07:19:40:9c:38:42:da:
                    15:26:e3:e1:0e:53:55:a7:a1:a4:e7:c3:47:78:73:
                    bb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C6:72:78:E9:AE:57:0D:D6:15:FD:97:31:25:33:72:24:98:DD:A6
            X509v3 Authority Key Identifier:
                keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:24:ee:c5:b8:ad:f4:cb:4e:d8:5b:f9:47:04:bf:9c:6f:e2:
         2b:76:c2:17:07:c3:57:e6:ad:27:35:dd:c5:ab:06:99:b1:54:
         c3:2d:39:06:34:63:ea:3f:7d:dc:b5:95:98:ab:c7:f3:12:41:
         20:ea:e8:7b:4a:7e:87:1d:59:c7:9c:8b:f5:14:9b:14:e5:34:
         ad:bc:06:bf:c7:55:16:43:68:89:e5:17:8a:cc:a8:fe:f2:46:
         1c:ce:e6:60:c0:d5:3d:92:f9:6e:95:13:fb:ac:ea:29:45:ce:
         08:2a:f8:90:65:a9:93:0e:f0:bf:35:b3:65:36:ce:a5:d2:7e:
         e0:aa:7e:da:d0:b1:d7:7c:41:d1:98:75:90:f7:b2:52:33:a3:
         44:6d:c6:e4:32:a5:5d:ce:c9:8a:75:fe:9e:75:a9:43:ed:4b:
         89:cc:b4:7f:e1:cd:74:27:b1:07:94:24:1a:d4:97:3c:86:35:
         0f:aa:2e:d8:57:e4:62:f9:6e:93:dc:e6:e2:63:fb:c6:e8:ff:
         32:2a:a5:3a:c8:f2:b5:87:72:3a:c7:4d:30:b1:25:fb:65:15:
         f5:7f:23:6a:f2:89:53:b9:a8:42:73:fd:8a:1e:28:46:4b:c1:
         43:0e:53:8e:6a:67:39:4f:9d:78:6b:01:20:d4:46:b3:e8:38:
         bf:b5:36:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----