Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File:                     AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier:          XnbGbo2rouSLstM7+yRUbx6qgzNTYd2Mr50BZTvBNYo=
Subject key identifier:   69:60:D7:0A:51:F3:CB:79:B3:0C:38:B1:A4:D4:D5:FA:E8:18:6C:D2
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer:       /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial:       01962F3D4506B3071C5C7EED8B9E0AC73E94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number:          0375
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: AOxP0cW+b7xRhV4U+HNpcXAyN3Fnw3Tusgydo3kZslQ=)
                          2: BX2JPGJy6RMaPcWuXvWlFqwNrIA.roa (hash: u+UX2pAd1eP7HJXW9NY0JTLVGtLaRb7rjxt8LHxvOj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:45:06:b3:07:1c:5c:7e:ed:8b:9e:0a:c7:3e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=6960d70a51f3cb79b30c38b1a4d4d5fae8186cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c6:91:4f:e5:65:10:9e:38:2c:83:f0:b0:55:
                    12:63:2a:7d:ea:02:96:ea:2b:14:53:68:cd:b8:17:
                    0c:bf:85:12:cc:bc:31:d7:1a:80:c0:56:1d:23:c6:
                    67:6d:a8:2a:a5:1c:9f:41:ce:24:79:e5:0f:f6:bf:
                    af:2c:69:2b:a2:4b:ec:cc:0e:e6:4d:72:f3:3b:93:
                    83:32:ca:a9:b7:05:7b:a0:b7:14:05:00:42:3e:1a:
                    cd:e7:5e:6d:3b:f1:73:a7:48:42:95:43:8d:23:1b:
                    54:86:f8:6f:ee:d4:35:82:ba:2e:79:3f:0a:a2:86:
                    a6:b6:42:d4:50:e7:5e:27:1b:7f:5d:cc:01:67:e0:
                    07:c0:7d:fc:33:84:c9:a0:bb:45:e8:72:f3:f5:35:
                    52:63:52:d3:18:16:55:5a:6b:90:11:92:99:e0:2a:
                    cf:3f:50:5b:5b:24:ef:19:86:39:81:ba:1f:0a:01:
                    e4:dc:72:9a:3a:db:57:06:81:37:ef:99:16:cf:43:
                    08:05:97:54:6a:7c:0a:e8:26:9a:46:ce:be:d6:d2:
                    e1:45:09:3d:21:01:13:c2:e1:36:e8:90:a3:2e:c5:
                    0b:80:da:c1:6e:24:05:f3:7b:fc:2e:cc:4d:06:aa:
                    fc:a0:70:7e:67:49:e0:2f:a0:99:90:68:65:2e:f8:
                    98:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:60:D7:0A:51:F3:CB:79:B3:0C:38:B1:A4:D4:D5:FA:E8:18:6C:D2
            X509v3 Authority Key Identifier:
                keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d8:75:1b:ac:43:d2:33:2d:e8:81:a2:4c:a5:03:be:1e:16:
         14:3d:3d:bd:e7:7e:e3:86:52:23:e6:14:0f:b7:b4:3e:b6:38:
         83:7b:be:36:70:95:a0:4b:c4:ea:eb:a6:56:cd:d5:59:f7:ef:
         d9:44:4d:08:d8:29:1f:ed:94:df:2d:09:c1:e0:e9:1d:c7:0d:
         4d:60:26:b3:4c:e0:b6:61:a1:28:26:43:bb:32:ac:5f:31:42:
         94:37:fa:2a:ae:7c:8d:96:5d:fd:12:b5:a0:e1:b3:fc:14:49:
         b7:d1:a3:f9:34:16:88:fc:6a:c2:2d:71:4a:8d:59:d7:d8:2d:
         dd:aa:d2:2f:04:4a:2e:1f:d9:17:c6:5f:f6:3b:19:ac:fe:d3:
         c9:01:ee:d0:9f:f7:47:c0:cf:cb:b6:24:c4:30:af:7c:a3:f1:
         5b:15:0a:2c:05:d0:e8:ff:99:90:2f:b2:81:9b:4b:ce:fd:71:
         98:a8:bb:76:46:55:72:7e:c1:b3:ce:61:cb:79:ef:09:98:f1:
         90:6a:79:b6:94:50:53:b8:bf:c9:a1:27:a3:bc:d3:29:e8:08:
         d9:27:98:bc:c7:b7:63:08:31:cf:1e:e2:ef:aa:1a:f9:91:6a:
         07:84:52:67:e0:ea:8b:bc:ef:73:27:09:55:82:57:df:a3:de:
         97:21:c4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----