Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File:                     ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier:          nhzga5s/0G0q8DZwQd63PJmArgeaxdOnzP6TKmZ2DNA=
Subject key identifier:   C1:3C:1A:71:04:51:97:FB:0F:0C:C7:AD:3A:E9:C5:E1:4E:81:81:0F
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer:       /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial:       01962E61BD9522748B52721430165030DBA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number:          0B5E
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: AXfIK4qlQ58oqDiMwFfWaIdObenJD7TIxHf+tINDEI0=)
                          2: _GSW-DelEaPKU0jnYZYgZjzHWbE.roa (hash: pkcF+nXYhLnPPj/p92wHFinmwHpFMLg3KgigTAMrKPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bd:95:22:74:8b:52:72:14:30:16:50:30:db:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=c13c1a71045197fb0f0cc7ad3ae9c5e14e81810f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:60:e8:1b:cf:69:ba:5f:3e:dc:ce:0a:e4:
                    21:8e:c5:4c:a4:42:44:8e:07:45:9a:e0:33:8b:ed:
                    23:0f:af:fc:a2:d0:0f:d4:b3:04:0e:fe:67:62:56:
                    f0:b3:e7:a1:1e:a6:34:2c:49:c3:e7:de:d6:37:5c:
                    df:8c:99:7e:da:47:fa:55:87:af:0a:3a:5a:86:01:
                    ed:6f:3b:97:2d:19:03:ad:68:dd:c8:37:4c:f0:a0:
                    3a:a6:21:49:bb:63:89:db:c6:8c:0d:08:49:66:6a:
                    5b:35:cd:ff:96:b4:5f:4b:a6:db:95:43:52:f5:28:
                    7c:ac:f8:57:c8:2e:39:17:ee:6f:a4:4e:0f:f5:9f:
                    41:11:a8:fd:2f:c6:9d:85:1f:f9:c6:1b:a2:92:f8:
                    62:52:5d:63:0b:46:b8:ae:f3:82:00:c2:55:bc:69:
                    24:57:0b:70:96:49:8b:6a:9d:e0:2e:37:e1:55:f3:
                    c2:dc:06:83:27:0b:8d:de:23:49:d0:c0:3d:1c:f4:
                    d8:03:7a:78:18:d4:b7:b4:3d:e5:ac:e4:40:12:71:
                    60:ab:14:1c:20:e2:5f:2e:b4:74:71:e2:7e:78:aa:
                    d0:b9:77:39:a7:a3:03:d7:3c:78:c4:74:ec:9b:53:
                    18:9e:ee:29:31:64:a0:30:f3:b5:93:fc:32:4a:1a:
                    19:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3C:1A:71:04:51:97:FB:0F:0C:C7:AD:3A:E9:C5:E1:4E:81:81:0F
            X509v3 Authority Key Identifier:
                keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:08:8f:60:01:f5:1d:53:46:21:4c:73:50:a9:7e:16:d0:d4:
         c7:3d:08:01:2d:e0:2e:61:14:5b:55:c8:e2:90:67:3b:d5:be:
         3c:1a:52:56:21:00:8e:6d:c8:4d:ff:e6:24:bd:ed:f0:a4:1d:
         24:6a:ea:8a:ad:b1:81:4e:15:c7:5b:06:ba:dd:e8:6e:d3:a1:
         2b:4d:45:08:8e:9b:65:66:36:10:6d:ef:71:ef:c2:2f:b7:04:
         76:1c:47:17:36:04:e7:4e:74:ef:27:68:b2:81:6c:1a:1f:fb:
         38:ae:74:4b:88:ff:34:4c:d6:67:76:d2:a4:7d:b2:25:66:29:
         49:70:a5:36:73:f5:71:d1:c2:c4:11:bb:af:be:6d:d2:d3:75:
         5a:8b:f6:5d:a7:bc:7c:b9:34:ae:12:7e:48:77:45:98:1c:c8:
         bb:1d:44:05:d0:b3:16:b5:a1:92:f6:05:4c:fb:6a:92:ea:64:
         fe:9a:e2:78:3f:4e:a0:21:66:54:81:c6:51:5f:37:64:13:91:
         b5:d3:bb:e4:48:c4:7a:82:5a:ba:16:97:ff:16:5e:d7:02:5d:
         95:3f:a7:03:37:1b:9f:37:11:fb:47:54:ea:11:99:30:2b:b2:
         ec:27:ae:8d:b5:db:13:d2:74:34:ab:ae:10:49:fc:54:48:69:
         e2:fc:5f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----