Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
File:                     cSsCxFx16_ctVtM8KAKXwq6H6y0.mft (raw, json)
Hash identifier:          J0UdzBoljFi/R5qgA5bFecMuSSAHIdpsumwz1wf1nf0=
Subject key identifier:   BA:2F:30:FC:E6:D2:18:35:F0:92:BF:E3:C4:2E:CB:4B:2B:6B:F8:6C
Authority key identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
Certificate issuer:       /CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Certificate serial:       01962F7469133C4A91B1EC6AA9843646187A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
Manifest number:          0139
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: cSsCxFx16_ctVtM8KAKXwq6H6y0.crl (hash: 2QPZQ3hqAaHFN9gbM4G1poH0ihied04Vh9nqi4gCq4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:69:13:3c:4a:91:b1:ec:6a:a9:84:36:46:18:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=ba2f30fce6d21835f092bfe3c42ecb4b2b6bf86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8a:32:09:9b:64:b7:0f:f9:9f:15:68:6c:df:
                    d5:ad:98:0f:6d:43:a6:51:bd:fa:40:d4:84:56:b5:
                    10:00:5c:9f:a2:95:00:26:af:86:6a:42:7b:e4:00:
                    2d:24:85:71:69:00:8f:66:0b:24:85:5f:e1:cd:5b:
                    a4:72:7e:12:08:c2:aa:7f:33:ac:34:ca:81:52:8d:
                    c0:50:d2:66:2c:fe:0d:06:f8:55:e4:83:79:93:81:
                    95:3e:13:5f:01:21:17:3a:f8:ee:d6:68:11:5d:da:
                    f7:f1:6c:8f:8a:19:64:85:66:56:d3:6a:ed:8c:71:
                    7c:e2:53:70:0b:24:c6:aa:ec:67:6c:8d:f3:f3:98:
                    01:5d:8b:84:f6:bd:b9:df:1c:33:c5:cb:4b:72:eb:
                    52:68:40:7c:cc:14:f0:8d:2b:46:46:7a:04:95:17:
                    34:b3:cf:69:d8:50:2c:82:1f:d0:31:47:7e:ab:4b:
                    2c:b0:83:ef:10:a6:f1:e3:d1:05:a3:24:dc:67:89:
                    4d:88:18:32:8e:02:88:26:ab:ba:a5:69:b9:d6:66:
                    64:6f:6f:14:78:d9:c8:64:4b:0d:75:06:1e:36:30:
                    6b:70:f7:29:f3:1f:1b:56:22:d1:f4:74:0d:ff:2e:
                    1f:15:e7:ab:6b:8b:df:b2:29:b3:00:b3:21:54:80:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2F:30:FC:E6:D2:18:35:F0:92:BF:E3:C4:2E:CB:4B:2B:6B:F8:6C
            X509v3 Authority Key Identifier:
                keyid:71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:61:3f:ef:29:ef:2f:5b:7a:60:c8:f3:2b:cb:33:13:d7:d1:
         65:24:22:c8:15:5d:17:1c:60:86:76:ad:f1:28:24:4b:e2:6e:
         d1:de:83:f3:7e:1d:f3:91:6b:35:d6:58:66:fb:4c:ea:a6:cc:
         5d:e0:af:30:80:f7:0a:cb:ae:34:4c:aa:48:c2:0f:4a:17:fa:
         d0:b5:6d:93:9b:a6:67:8f:ac:a9:ae:34:0a:4b:fa:e4:14:9c:
         f9:4e:3c:91:e9:a6:a2:da:d1:a0:3e:f4:56:76:cd:2c:d6:d4:
         f4:17:99:60:2a:55:05:39:75:31:38:d2:14:5b:ad:22:62:b3:
         00:26:12:66:7f:65:36:4f:3c:04:94:a0:59:e6:9b:cd:64:59:
         f6:b0:37:bb:18:46:b3:67:d0:2c:6d:7b:76:4e:38:c9:53:e8:
         85:a9:8a:40:7c:e6:dc:d7:0d:63:7d:eb:89:00:90:21:a9:8c:
         5a:97:38:8a:46:80:18:b4:7d:b9:e6:97:e3:f2:a4:97:b9:3b:
         61:d4:6d:3f:58:b5:57:8c:52:ef:1c:36:3d:8c:1b:d9:46:0a:
         c7:b1:a7:49:76:26:8e:f2:00:72:41:40:eb:b1:82:40:5f:76:
         70:77:f6:ca:31:18:a1:96:24:0b:1b:28:f9:9a:35:fa:6a:2b:
         a6:31:1b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----