Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File:                     p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier:          u7+RORLczpqSsWnpWkYSBW2VDsSUnfmSSAUK4DVO6F4=
Subject key identifier:   81:31:3E:B1:9E:17:2E:77:E0:6F:BA:36:7D:30:56:2B:EB:F5:DE:F6
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer:       /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial:       01962E98F5F8A61CEE138C2F948E44796BFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number:          0C4C
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: YzYY5Pk4uD_RFCQ6kGkD8Ksosug.roa (hash: JV37Wu2EuvzzpKn9Z7XGUJb+gi9iNJI/YQAjXDOu0ds=)
                          2: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: IINm46gsV7JatA7LBqrZn498qBGcvexSqGhVWYpsABw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f5:f8:a6:1c:ee:13:8c:2f:94:8e:44:79:6b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=81313eb19e172e77e06fba367d30562bebf5def6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:63:f7:95:af:52:77:c3:7c:3f:6e:58:54:
                    fd:d3:f7:66:c3:f7:5c:60:f1:bc:0c:05:f7:fb:26:
                    ac:26:27:3b:c0:0f:e4:a9:d5:d2:8c:ba:82:ef:bb:
                    67:cc:7b:f7:b7:a9:a0:cb:33:b6:3c:4a:33:1b:3e:
                    e0:cc:ab:7a:a8:23:ed:18:61:43:49:20:48:96:f4:
                    7d:c8:8f:98:2a:09:a6:b7:a5:45:5a:a4:66:64:75:
                    68:50:02:37:2b:57:38:9f:3c:8a:5b:5a:99:40:12:
                    b2:4a:ea:24:b1:ea:b5:7b:be:ee:33:60:cb:6c:d4:
                    c6:e6:31:3d:b5:db:86:1a:ec:60:db:8b:fd:9a:2c:
                    70:31:63:4f:61:da:6e:3d:32:2e:10:a2:87:29:72:
                    af:ed:28:9d:8f:df:83:bf:27:7a:e2:b5:9e:ca:dc:
                    20:ab:51:4e:73:1f:aa:08:ef:90:66:ec:b0:d5:1d:
                    d1:07:61:af:07:51:06:f4:27:ee:d7:88:83:a0:9b:
                    1c:3e:08:63:44:88:7b:de:81:b2:74:14:94:4e:c4:
                    c6:cc:3b:35:a8:28:73:bd:f5:a6:a4:70:e6:2a:4a:
                    70:3e:fb:99:fc:6c:1e:f9:83:e4:8d:de:c7:13:f4:
                    85:b9:44:3d:5a:84:bf:54:be:b7:91:42:a9:f4:02:
                    f8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:31:3E:B1:9E:17:2E:77:E0:6F:BA:36:7D:30:56:2B:EB:F5:DE:F6
            X509v3 Authority Key Identifier:
                keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ec:a6:47:56:ab:c0:d4:c6:0b:19:b3:87:b0:d5:dc:a9:81:
         97:a4:88:8c:34:4e:b6:3d:c8:7d:10:79:05:5a:02:0f:09:4f:
         a6:a2:a4:91:92:ef:eb:1c:d3:d0:a3:d0:14:05:ae:e7:60:07:
         2c:b6:47:de:c4:6e:13:21:52:95:98:35:ab:26:7f:39:c9:d2:
         e2:6d:e1:62:f6:b4:74:88:ea:19:34:5d:87:76:45:01:23:20:
         3c:80:64:4f:66:95:4f:f4:1a:9f:a1:53:19:e1:b1:18:c8:6a:
         cd:d8:c2:74:78:8a:20:67:c6:79:41:63:44:52:29:c5:3f:53:
         31:f6:94:03:4d:d3:b1:53:d9:3b:45:9b:ce:6d:6f:eb:77:b3:
         cd:49:a8:db:56:b3:85:4b:66:31:d0:55:5f:f3:d7:01:12:d4:
         8d:9f:43:24:f1:6c:6d:34:cb:04:23:32:19:f3:b3:83:b6:05:
         fd:e8:61:96:ca:39:a2:a2:91:04:fb:ce:a8:55:92:29:42:a0:
         b1:29:b8:82:65:4e:d2:8a:28:66:a3:05:c7:bb:27:a9:0e:9e:
         25:a3:0c:fe:cd:a1:77:2d:60:16:60:67:36:29:33:0a:16:54:
         a0:f8:eb:a0:f9:f2:2a:03:cd:bc:50:d2:a2:fe:41:8b:7e:93:
         98:5e:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----