Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
File:                     cBKlLoiwGDLPDuN8zath3s59EsY.mft (raw, json)
Hash identifier:          P0NTO4WPtB10NFgFnuPK0vgTueg/BEiCThAGvjC7+Ic=
Subject key identifier:   09:1E:D7:9D:A8:F2:93:E2:ED:3F:19:16:15:5F:FE:4A:13:E7:74:DB
Authority key identifier: 70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
Certificate issuer:       /CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Certificate serial:       01962F3D3F74CA5A089FDAAE3E3B59CECE7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
Manifest number:          096B
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: cBKlLoiwGDLPDuN8zath3s59EsY.crl (hash: lWtKblaKY+8R0OKFj4tsPmoschzdQn2NF0NlZQ7w46s=)
                          2: muE7z7bw5WUF44PtXee-WtjAnUQ.roa (hash: eOTAuS8cb5e4NeqERvCCoU2l75Ey2kGH2CxTpug1Tes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3f:74:ca:5a:08:9f:da:ae:3e:3b:59:ce:ce:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=091ed79da8f293e2ed3f1916155ffe4a13e774db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:fe:13:2a:bb:18:c5:ba:94:02:e3:9d:28:5d:
                    54:0c:66:4d:9e:0a:d8:42:43:32:bc:83:d2:ba:76:
                    ad:00:dc:8b:b2:af:37:5d:66:29:7f:ff:b9:ae:2c:
                    52:6d:c0:f4:46:f8:62:9b:80:f0:b2:dc:f7:98:bd:
                    20:ce:c3:e5:29:da:b9:5b:ac:46:73:de:d5:7e:15:
                    5a:5f:92:04:94:2d:68:8d:64:2a:c8:76:3c:18:c7:
                    4b:84:3d:a7:7c:9e:b1:ba:ab:31:62:a7:e6:58:74:
                    3f:6c:60:4e:15:af:d1:60:67:88:18:7c:5c:d7:4a:
                    26:86:1d:97:29:3f:1d:f0:8d:71:38:cd:e8:6c:f5:
                    31:cc:88:dd:d6:17:66:ae:01:d3:71:76:6f:84:ba:
                    c9:a6:cb:20:42:ae:eb:2c:a7:6b:12:e5:12:b8:3e:
                    d9:76:00:80:8e:10:83:93:d3:9b:2d:1b:8d:80:61:
                    d0:e5:6a:67:a0:97:0a:3b:8f:b2:18:42:9d:0e:2b:
                    1c:f7:0d:8f:1c:95:28:12:af:f0:92:25:57:a5:27:
                    bd:e4:d9:f6:72:82:d1:76:69:e8:89:4b:0d:92:3d:
                    64:0a:b5:ee:73:40:cb:56:71:c4:5b:ac:6d:d8:50:
                    be:73:7d:c9:57:3b:d2:28:50:1a:5b:e3:d7:3c:fd:
                    d2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1E:D7:9D:A8:F2:93:E2:ED:3F:19:16:15:5F:FE:4A:13:E7:74:DB
            X509v3 Authority Key Identifier:
                keyid:70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3a:4f:0a:dc:57:f5:b3:e7:c1:14:a9:d4:b6:93:4d:fe:c7:
         89:47:e5:9e:a4:2c:05:e0:cb:95:26:66:d8:b4:ac:07:20:ee:
         80:72:e5:5e:e4:90:23:92:61:17:1f:b2:5d:c0:f5:9f:28:38:
         53:3c:21:0c:c1:c0:54:01:81:a7:cf:13:26:06:37:f7:a2:a8:
         37:14:a7:b4:36:29:08:6a:c9:76:a1:69:9f:15:5c:71:3e:77:
         ea:b9:80:19:dd:72:7e:cc:6b:bb:0e:ab:af:31:0a:8f:81:ac:
         46:65:75:e3:63:63:e1:a1:9b:9e:96:96:e7:ff:df:18:8f:39:
         f5:69:84:10:a3:a2:74:68:3a:9d:cf:29:62:aa:2a:84:a7:c7:
         cd:a6:76:11:53:c0:93:7c:c7:6c:b2:b2:3c:49:36:40:4a:94:
         ae:4a:0b:0a:d2:a2:f0:55:bc:7c:0c:36:7a:9f:07:1f:d6:ae:
         b7:a2:6f:57:f3:f3:53:b3:bf:c0:35:cd:2c:47:6d:2b:f1:27:
         28:74:5e:d9:72:5f:84:c0:90:d4:9e:d1:af:37:4a:3c:cf:96:
         22:e0:01:c9:1a:82:73:c8:e5:1a:aa:18:a7:3c:26:7a:c0:07:
         27:39:b3:ad:9c:d2:5c:64:f1:29:f5:af:62:23:72:57:60:ea:
         75:43:98:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----