Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File:                     0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier:          apiZjjj6TKyprEmFpp+Dgm2WgkPWG8ZkXa9BCS6aiYo=
Subject key identifier:   B4:DF:AC:56:B3:F2:51:62:8C:98:5A:9E:BA:73:EA:A5:9D:A8:39:15
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer:       /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial:       01962F74A4757E62B776B11A52D477EF0C49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number:          13C4
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: IabsKem9pE5eTs3lHB5ss8VH0qFdx2o345lqakTnS1c=)
                          2: n6mO0jwfMCGtBTJz4z0BBFhaaaw.roa (hash: depvn6FAlXY00NO5eAYz1KXbUInLhBp+Jz+PGCqafeo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a4:75:7e:62:b7:76:b1:1a:52:d4:77:ef:0c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=b4dfac56b3f251628c985a9eba73eaa59da83915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:17:b5:91:e8:d2:25:15:65:44:5c:99:c9:
                    0f:34:da:c0:d7:22:a6:f1:ee:a8:cb:da:fa:fd:bc:
                    ac:90:ca:11:63:d3:2f:2e:32:7f:7e:66:cc:46:5d:
                    9b:52:a3:60:01:91:fe:e1:75:df:f9:35:76:ac:2d:
                    55:8e:5f:5f:a3:17:b3:b7:4d:d0:b4:b0:8c:f4:e2:
                    b2:a0:96:36:7b:9a:c4:7b:31:74:56:7b:c6:d7:51:
                    f9:6b:82:3d:b4:78:58:b4:79:1c:a0:af:8c:fa:02:
                    ed:04:58:d4:73:e8:36:68:68:d7:b8:e7:bb:6c:8a:
                    b4:80:5b:b3:79:c3:8d:db:9e:aa:8b:28:69:8f:e1:
                    2d:1a:ab:e8:88:b6:00:b2:ec:9a:de:04:70:ac:ee:
                    99:45:91:c3:61:c8:fb:a0:4c:5a:dd:ed:14:02:8b:
                    16:d2:34:96:0b:33:e3:7a:5b:19:11:9a:aa:d7:6c:
                    7e:4e:14:21:10:c5:16:18:93:4e:11:95:8d:3a:32:
                    96:6f:ab:f6:e5:39:a0:b4:4d:65:70:f3:49:26:d8:
                    6f:7e:6a:21:8f:0e:c3:df:a0:ed:96:64:58:b4:a9:
                    3a:18:bd:dc:71:48:6e:6a:2b:0b:ae:2b:36:75:62:
                    56:f3:51:f1:77:21:36:5a:e1:a6:66:ca:b2:79:c5:
                    00:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DF:AC:56:B3:F2:51:62:8C:98:5A:9E:BA:73:EA:A5:9D:A8:39:15
            X509v3 Authority Key Identifier:
                keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b1:cd:81:a5:9f:9c:e0:96:ac:10:33:aa:8e:c0:5c:58:5d:
         16:99:1d:14:68:d6:7c:25:83:88:96:16:a4:0a:d8:a7:2b:fd:
         ae:ce:52:f1:5d:48:a1:ac:b7:b6:78:24:d6:88:43:b2:b2:6d:
         bd:12:72:87:43:a1:b0:50:72:5b:67:80:86:df:a3:bc:32:71:
         be:2c:69:6a:cb:e5:87:e7:13:2d:16:d5:f7:b2:ec:7a:98:ad:
         75:45:54:7f:9f:48:27:d1:bb:2d:92:c7:00:51:f0:3d:5f:14:
         a4:2f:e7:da:0a:02:8c:0d:c2:34:78:ff:73:01:9f:ce:2d:72:
         d1:23:4a:53:24:37:89:e4:65:9f:db:58:33:d8:a7:e9:d3:fd:
         37:e3:d1:c9:4d:a2:f2:ca:ca:dc:db:00:4b:f7:54:98:1f:df:
         4e:3a:29:e2:68:cc:49:1c:32:fb:90:9a:cd:10:8b:3a:92:d7:
         97:b7:b5:b7:95:eb:b5:ff:a1:de:cc:a5:f7:a3:2f:ae:1e:92:
         8a:73:c0:57:a2:82:2b:c5:89:42:1a:c4:28:7e:df:ba:88:05:
         f2:97:33:e3:40:bf:ac:c4:c0:07:20:4a:8d:27:30:ee:1a:64:
         5c:58:09:7c:00:07:d2:8b:9f:f6:14:70:ec:44:95:cf:77:57:
         0a:61:9d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----