Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
File:                     1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft (raw, json)
Hash identifier:          gLGxRkXYSqNIGqS3/gyV00QwxnurgTJMC86zM3pPW9E=
Subject key identifier:   E6:23:5D:7A:08:D5:FF:1D:8A:D9:67:43:91:D2:96:46:B6:F9:45:3F
Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
Certificate issuer:       /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Certificate serial:       01962F7430295D24D61FF66270ACBDF677AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
Manifest number:          025F
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl (hash: 8XaY2yHd/3ozMyEUMS/GmhnvOTdt2C/jYaPkPMwVpHo=)
                          2: lGuoxPEC-ZxNvepE_9KweYRG1rA.roa (hash: ddFvRAgGNbgqtawi7X97di7STYJ32kUEwzdijgE2enE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:30:29:5d:24:d6:1f:f6:62:70:ac:bd:f6:77:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=e6235d7a08d5ff1d8ad9674391d29646b6f9453f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:93:fe:95:28:3c:85:6f:24:3a:ee:75:09:3d:
                    1b:71:a1:2a:30:b4:11:4f:42:24:55:8c:c6:18:2f:
                    58:9e:04:82:38:41:13:05:1c:7e:d3:55:18:3e:16:
                    0a:cf:a4:6f:b3:29:f1:1c:e3:89:67:9c:47:63:74:
                    63:36:fa:b0:bc:16:54:f6:95:a4:f6:e2:1e:e3:ce:
                    b8:19:96:a8:e8:9a:26:a2:c0:c6:a6:b1:82:7b:04:
                    bf:29:10:ae:43:74:d8:7a:73:8c:23:09:37:cf:5f:
                    9b:c0:55:78:95:a7:d5:95:df:3e:38:b2:2f:7f:5e:
                    a0:62:5c:69:e5:0a:00:d1:ed:84:4d:66:28:09:b6:
                    ac:a5:bd:40:06:f6:0e:5a:f3:74:a4:df:7f:d4:84:
                    9b:c8:40:db:6b:60:18:f1:4d:fb:9e:11:c2:9c:e4:
                    2c:50:f8:e9:91:35:6d:3f:1c:87:fe:ac:ca:45:97:
                    be:5b:6e:48:72:24:10:07:c3:7d:01:2e:c2:f7:e9:
                    cf:78:57:6e:a7:19:b7:0b:3d:32:e2:0e:54:ad:40:
                    29:53:e7:92:4d:b1:7d:2a:5c:8e:86:73:a8:ab:d7:
                    fe:8d:ed:37:f9:da:43:bb:de:af:11:ec:ce:5b:1c:
                    0c:55:25:3b:0d:dd:d7:c1:de:13:cf:98:f8:9f:3a:
                    c7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:23:5D:7A:08:D5:FF:1D:8A:D9:67:43:91:D2:96:46:B6:F9:45:3F
            X509v3 Authority Key Identifier:
                keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:e6:40:16:fc:ac:5f:44:ee:ef:e6:92:c1:dc:12:bf:24:94:
         d2:bb:cb:e8:1b:ab:e3:68:ba:2b:48:38:e3:b2:0a:a4:e9:f7:
         f8:65:82:f7:25:c0:4d:b1:bc:44:fd:11:05:12:73:8c:f6:1e:
         43:d2:6a:fe:a2:f2:c1:c2:d2:52:32:ad:48:d7:6c:53:70:75:
         e3:31:46:f0:c3:1e:8d:46:03:14:47:a9:49:68:29:d6:a2:6c:
         a0:d2:43:19:02:98:95:dd:b2:c8:40:24:81:ed:dd:a1:78:9d:
         9a:24:24:d8:46:fd:07:ed:47:d3:90:33:94:45:fe:78:6a:09:
         23:d4:c7:5e:a5:0d:7a:40:68:22:cd:29:2f:26:8a:a7:34:73:
         98:a2:07:de:5e:a0:12:42:a3:ea:e1:30:30:bb:af:d1:38:f5:
         1f:04:f5:ff:d2:bd:66:fd:9b:bf:e4:91:7b:eb:fd:07:97:1b:
         07:8a:bc:10:6b:db:01:00:44:7b:b5:b9:00:00:de:48:fa:72:
         b6:ad:e5:0d:0a:db:da:d8:fa:07:f8:b4:cb:97:3a:01:2c:32:
         dd:3f:fe:e6:35:2e:c3:e9:dc:88:34:77:31:da:d3:25:b9:8e:
         9f:c0:9c:68:c7:ab:34:00:c8:83:2a:c5:ab:c8:0a:39:f7:ec:
         3b:76:cd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----