Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File:                     G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier:          hyCSuhdtnASrDGMbGe0ML7mP8I88Rgs2xRajC+jE75g=
Subject key identifier:   E5:EC:43:06:05:C7:B8:AA:50:44:89:30:29:FE:7F:E7:EC:01:D6:67
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer:       /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial:       01962E98851DB45A0E675A78CDA1480F08C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number:          09F5
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: ohNxuql0abVHd++olfa7Xqq4+PA3dy0XeRnLR3tIyzU=)
                          2: TRfMCYgQom2qb1ltkPZ8pDFMPbw.roa (hash: B/bZzAE30Cbi1NKH6O3ZfRrv6UmAF6KTnp6VWp5movg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:85:1d:b4:5a:0e:67:5a:78:cd:a1:48:0f:08:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=e5ec430605c7b8aa5044893029fe7fe7ec01d667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:7e:ae:c5:11:24:53:98:68:c4:97:67:bd:
                    71:15:2a:1e:f8:9f:fe:9c:70:fa:4d:20:e5:54:ee:
                    f5:9f:ba:e0:20:93:86:68:74:4e:96:a7:6c:de:75:
                    48:21:b5:2c:96:56:fc:4c:1b:2d:d3:3b:66:46:b7:
                    b2:e1:f0:d5:e7:27:6b:93:ec:32:b2:bf:e3:de:97:
                    80:c0:69:24:1e:f2:9f:3c:49:80:9f:2b:50:4d:ca:
                    b3:87:18:b8:b3:08:bf:4c:51:7f:2b:22:12:05:f1:
                    da:64:3d:b2:34:2f:bf:c3:10:87:1c:5a:67:42:de:
                    db:7f:f0:e1:a6:0a:e7:e5:e3:4f:a4:d6:b9:f7:48:
                    5d:04:4d:4e:0e:96:98:7f:f8:e2:6c:d8:49:a8:13:
                    86:4a:65:73:bb:94:1d:96:15:14:bc:22:c0:91:d2:
                    c2:6b:d5:30:75:b9:1c:32:0b:44:c8:ed:34:e1:55:
                    56:bc:af:17:cb:1c:52:29:c2:89:b2:52:5f:b9:3c:
                    48:a3:93:d8:62:88:6f:c0:3d:49:70:54:cd:b5:48:
                    1c:40:ae:9e:d5:32:e8:76:d3:4c:79:22:8a:f7:73:
                    f1:26:0f:0b:41:9a:9a:d9:fb:eb:05:f7:28:2d:69:
                    50:a7:7f:b8:25:93:62:a0:c2:0e:e1:31:49:d6:f1:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EC:43:06:05:C7:B8:AA:50:44:89:30:29:FE:7F:E7:EC:01:D6:67
            X509v3 Authority Key Identifier:
                keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:77:22:c8:d3:66:5e:75:1f:28:d4:9d:03:28:fd:93:9c:db:
         fb:97:3e:cc:8d:0e:15:9b:64:d1:74:67:32:26:60:80:18:fa:
         8a:42:0d:ea:50:27:a3:79:4f:4e:99:8f:d4:59:46:84:4d:58:
         cc:d3:54:85:01:d3:af:7d:58:62:2a:26:5a:59:8c:00:05:c7:
         cc:c2:7b:07:a7:76:10:a6:c0:50:f1:89:d1:5f:8d:db:5e:66:
         31:e1:7f:07:d7:58:13:b0:f1:38:26:19:23:c4:e1:12:47:1b:
         52:7d:49:3d:55:9f:9a:32:95:f9:bb:e6:99:0c:73:6b:04:a0:
         dc:8c:f5:34:f1:90:be:be:18:32:3b:ef:cc:d0:b1:1b:d1:e0:
         93:a2:94:6b:27:26:73:cd:61:91:10:3e:c1:b7:2d:9f:ee:07:
         39:73:6d:5d:e9:bf:8e:1e:7e:7f:ec:5c:13:27:b5:61:b7:a7:
         d0:31:79:15:14:2e:63:cc:f0:3e:21:e1:c1:84:69:88:2f:fd:
         6b:1e:8e:91:ba:97:ef:00:61:42:fc:8d:8c:66:0b:7f:01:95:
         22:3b:8c:74:95:bf:36:4d:8e:6e:4a:1e:7c:0c:64:3a:c2:ea:
         d9:1f:21:af:f6:1f:69:7a:34:3b:e8:42:21:7e:a1:46:3d:47:
         69:54:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----