Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File:                     1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier:          KIaFxRSUSlmom5LIBfqymjz8dGu8osrh+C2kot1LNgM=
Subject key identifier:   25:E7:73:B2:2F:35:ED:3B:C2:29:3B:EE:58:EB:B6:2C:BB:69:E1:2C
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer:       /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial:       01962F06A92F3992AAC6493AB3273E995C3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number:          12C5
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: ZUC89aP4Eip3/XOXbYbfVhKiKqrSy7jBoPhEybm8qC8=)
                          2: gHlRquCMx6iwfFhK1AbziJf-SOA.roa (hash: vGvXkm75uZ6w5eWBxSl4fiUVkztcBJ6xWRWL2h8kjfg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a9:2f:39:92:aa:c6:49:3a:b3:27:3e:99:5c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=25e773b22f35ed3bc2293bee58ebb62cbb69e12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:54:7d:49:a3:a3:b3:10:62:20:bc:90:ca:
                    80:d7:a3:e1:9e:74:fa:ed:22:ae:cf:c9:fa:f1:b7:
                    e5:44:f0:f5:4c:87:c9:d4:43:75:dd:75:de:2c:27:
                    36:0e:74:80:2a:e2:7e:9c:ab:ce:22:28:b1:c7:cc:
                    e0:1d:20:dd:b0:9c:eb:b7:de:7d:f6:87:0a:23:e9:
                    60:e0:03:c3:fd:91:7b:17:1f:1a:f3:2f:f4:0e:64:
                    8d:6e:01:ba:80:98:f1:94:e3:7f:55:97:e7:86:54:
                    58:79:96:72:40:13:9b:b0:6f:82:33:68:43:76:c6:
                    1b:00:4a:25:18:ab:b0:64:89:4e:7f:fe:a3:63:6d:
                    d8:79:40:96:71:cd:93:86:27:46:1b:7a:7a:7b:bf:
                    87:12:3a:35:5e:0d:0d:7d:44:e3:c8:2f:dd:ef:a7:
                    4a:ff:41:30:68:2e:0d:39:34:16:c5:e5:03:62:80:
                    6d:1c:11:4a:55:6b:10:cc:ac:b9:92:23:6f:d1:ad:
                    e0:ba:64:83:f7:eb:2c:ca:c7:81:bb:a4:67:a5:29:
                    8a:67:de:bc:cc:42:bb:f1:0a:ba:f9:b6:e4:da:c5:
                    b3:67:76:5f:bb:2b:7c:d3:fa:35:61:c5:c5:4a:11:
                    ce:ef:6c:70:1d:dd:f9:6f:af:7d:5c:54:ca:ab:81:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E7:73:B2:2F:35:ED:3B:C2:29:3B:EE:58:EB:B6:2C:BB:69:E1:2C
            X509v3 Authority Key Identifier:
                keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:25:10:31:d2:67:56:ac:0e:ce:9b:f6:05:92:d0:87:f8:7f:
         d5:d0:2e:c9:2c:76:4c:4f:40:2c:e9:c9:8d:e0:37:6d:a5:be:
         f1:a7:27:4c:3a:5e:f4:91:a0:be:fe:bc:e7:91:f9:2f:ad:78:
         a7:54:ec:a7:19:81:67:81:7a:58:9f:65:aa:00:d6:45:2a:b0:
         e0:19:df:c7:03:1a:07:05:c2:dd:35:a1:57:25:39:c7:14:a2:
         ce:ca:c0:c9:a6:bd:55:07:68:f1:01:ed:b9:73:20:0b:70:c9:
         59:1c:b2:86:c0:68:5f:3f:ca:4c:30:a4:ac:53:ee:2f:be:fc:
         62:f6:4a:1f:24:10:b1:b6:83:a5:07:6e:42:a0:24:a9:11:42:
         56:dd:44:8e:5d:84:e2:28:04:86:27:d0:5a:f8:98:8c:3a:e1:
         41:21:db:15:8f:cd:27:21:36:9b:e4:48:4c:b7:1d:8b:f3:a1:
         8a:50:e6:f2:28:0c:4d:be:31:3e:00:00:bb:ad:a4:24:66:85:
         69:5c:54:25:6c:f6:83:c2:80:e0:08:1a:a6:b8:df:a0:24:27:
         79:78:20:59:b9:f2:6d:3e:1c:20:7d:b2:85:14:05:1c:fe:85:
         16:03:a5:f1:3c:99:9b:95:54:3a:a9:55:b4:da:26:b4:b2:8c:
         ee:50:09:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----