Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
File:                     curcen7OR31fTXdyQ7YPK7u3VgM.mft (raw, json)
Hash identifier:          v5+IMQb1dBcoSSVBwPyFX4f3jIPbm2slxKc5FYeZouo=
Subject key identifier:   C5:CE:9B:FB:DC:8C:A1:9B:C9:E7:03:1B:27:AD:DD:3F:35:1E:CF:61
Authority key identifier: 72:EA:DC:7A:7E:CE:47:7D:5F:4D:77:72:43:B6:0F:2B:BB:B7:56:03
Certificate issuer:       /CN=72eadc7a7ece477d5f4d777243b60f2bbbb75603
Certificate serial:       01962F065FD0BF6D73C8836E56D7C37BDED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
Manifest number:          0754
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: curcen7OR31fTXdyQ7YPK7u3VgM.crl (hash: L2UTBFRW6hjjU//iaXqSGoF4lphZxPry4cVzKofaxZs=)
                          2: mFFNgz0LoOIjeTT2_r0-wBPyYQM.roa (hash: 8oKdatfS4ydJsathXE08ETrnAsR4fEoI1qYHumOim1w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5f:d0:bf:6d:73:c8:83:6e:56:d7:c3:7b:de:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72eadc7a7ece477d5f4d777243b60f2bbbb75603
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=c5ce9bfbdc8ca19bc9e7031b27addd3f351ecf61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ac:0b:92:0e:7c:43:3f:07:96:b0:ba:eb:aa:
                    ff:9f:a1:83:59:e3:c2:4a:51:9d:ab:b9:6d:df:61:
                    2c:bd:74:53:39:59:8c:00:9e:77:d9:3c:38:16:46:
                    9e:b3:0b:dc:b8:ae:ed:1e:38:7f:e4:aa:79:a8:81:
                    e9:05:69:d4:1d:73:69:4c:46:e1:7f:8d:b5:d3:25:
                    c6:70:43:0b:25:20:82:2e:c8:3f:9c:b0:3e:1b:95:
                    e1:75:f3:95:33:24:b7:6f:2f:2c:52:29:33:f7:08:
                    bf:29:bd:35:bd:72:4b:f7:8b:50:b9:c7:69:57:86:
                    8e:3f:fa:d8:ca:34:80:23:89:4c:16:e3:80:32:55:
                    94:9c:8b:e1:f1:78:e5:8b:a3:97:df:80:63:5d:f1:
                    0e:97:eb:5d:34:7b:a4:e9:ec:26:75:fa:e2:8a:9d:
                    21:27:38:e5:5f:9f:e8:7f:cb:1d:93:fe:cb:56:0a:
                    e9:14:7d:3b:94:3e:fc:ae:86:17:1f:a7:5b:fc:17:
                    f1:12:a3:ef:d4:60:64:5f:10:7a:8a:80:49:cc:f7:
                    54:a2:2b:f7:af:94:82:27:c4:6c:db:2e:9e:68:c8:
                    d9:b6:f5:cf:d9:06:b6:9f:2f:22:84:8c:3d:76:f9:
                    6f:9e:b0:15:7b:8c:d1:05:77:aa:67:c9:eb:5f:e1:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CE:9B:FB:DC:8C:A1:9B:C9:E7:03:1B:27:AD:DD:3F:35:1E:CF:61
            X509v3 Authority Key Identifier:
                keyid:72:EA:DC:7A:7E:CE:47:7D:5F:4D:77:72:43:B6:0F:2B:BB:B7:56:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c2:3f:0d:98:69:de:6b:0b:61:88:ec:07:8c:f8:ce:76:38:
         3a:52:6c:da:9c:60:14:f4:3b:ea:c6:b4:45:f2:b7:15:60:58:
         d4:93:1f:97:44:b0:dd:19:9c:b8:0f:2e:11:cb:d5:0c:b5:28:
         a4:1d:0d:77:04:8e:4b:10:3d:56:75:2e:64:cc:9c:e0:aa:6c:
         f4:e3:c9:db:76:bf:03:30:c4:57:3b:60:74:a6:9b:64:54:4d:
         fd:27:1d:b0:82:0e:ab:66:c1:55:d0:7a:b0:d2:fa:07:b3:ce:
         15:d8:ad:4e:ec:92:00:60:de:37:c6:83:2f:bc:28:86:12:4e:
         e5:2a:53:4a:2c:9b:a6:16:5a:2c:8e:b4:cf:1c:a4:e7:eb:9c:
         e1:d1:82:de:9d:73:35:6e:9b:e3:d1:10:b3:0f:6e:10:ae:f5:
         a5:0d:a5:b0:6a:08:46:aa:cb:f2:15:b0:bf:c5:aa:19:9c:ae:
         9f:77:b0:2f:00:60:e7:52:d1:0b:ec:50:6b:ae:c4:99:46:0a:
         53:dd:cf:0b:d8:21:8b:dc:ed:84:22:11:72:2c:a0:c6:02:de:
         5a:fb:5a:26:ff:f3:ae:d6:80:9f:3b:8b:07:75:15:40:82:69:
         a6:8d:13:22:c7:d5:8f:b3:30:73:b9:8e:bc:e8:b6:09:a1:58:
         29:60:87:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----