Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File:                     C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier:          iZ3gvUaliWjkzLEPyr5b7wS6UZy7AGMZM6POr5VgJ/U=
Subject key identifier:   FD:93:EB:45:DA:F6:E9:D2:AD:20:B8:E1:D0:8D:10:FE:47:47:DC:39
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer:       /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial:       01962FAB3CBB5D2ACA779EE98F790B9526A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number:          0C80
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: FfjAPgdPXOxqsgotnwisjWEPpqy1BechVjdYgT0O8Eo=)
                          2: c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa (hash: 6J584Pfcm2xEEOIgm8HDbt6jhB1m8yFiIXBl5VE/wrs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3c:bb:5d:2a:ca:77:9e:e9:8f:79:0b:95:26:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=fd93eb45daf6e9d2ad20b8e1d08d10fe4747dc39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:57:44:3d:f0:30:8c:3a:73:28:07:e4:d6:c1:
                    b8:24:bc:eb:79:53:9f:66:28:79:6c:41:e7:60:c1:
                    aa:d8:a9:6e:93:22:a7:25:fe:c4:07:3d:dc:17:c2:
                    59:a9:e3:8f:82:09:af:84:48:9e:23:c5:cb:60:25:
                    a3:e9:e7:c0:30:59:2c:29:2b:71:86:19:8f:86:97:
                    3f:93:1c:d9:f4:16:cb:ec:e6:60:78:e0:ff:f4:e9:
                    0d:7a:65:a4:a3:89:ce:b5:fa:86:53:36:29:12:34:
                    f5:09:6e:3a:78:a6:da:99:26:d0:bb:c1:a3:45:66:
                    7b:c0:52:54:69:25:36:f8:37:41:15:af:48:30:5f:
                    0a:27:9e:9b:15:49:db:08:91:5e:9a:1d:2b:af:31:
                    74:3d:ba:ec:d0:a0:c4:97:58:7e:8d:03:3b:74:fa:
                    a4:24:e9:38:60:20:12:b6:14:b3:53:fe:c9:ed:dc:
                    10:7a:86:f5:17:50:62:12:17:eb:20:2e:7d:a7:fa:
                    a1:b2:36:68:09:93:84:60:62:53:c7:26:9b:7d:ce:
                    de:6d:54:ea:1b:15:82:9f:e1:07:5c:7c:4a:6e:67:
                    c3:59:3f:58:21:76:96:8c:5f:8b:9c:a3:bc:76:b8:
                    bd:9f:c5:ee:f0:b9:58:25:2d:b7:e3:2a:17:61:a8:
                    d9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:93:EB:45:DA:F6:E9:D2:AD:20:B8:E1:D0:8D:10:FE:47:47:DC:39
            X509v3 Authority Key Identifier:
                keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3d:5c:17:f0:95:53:81:7e:cb:1d:35:6d:55:dd:ae:82:4d:
         0f:87:17:0e:63:e9:ed:d4:41:72:dd:41:32:9b:10:51:48:65:
         88:11:6b:da:e6:2f:2c:73:d8:f3:6a:8a:24:7b:30:d4:d5:fa:
         0c:2a:7b:4f:a0:59:f0:d5:e1:c5:9b:15:3d:ba:b5:5b:5c:22:
         c3:9b:be:7f:08:93:85:05:cd:19:22:ef:d0:e3:83:65:e3:55:
         e0:50:08:06:0d:ba:ad:a3:bc:19:24:cf:79:73:18:6e:60:7f:
         7e:57:73:5c:ef:0f:be:6f:9f:7d:b7:cf:d3:ef:c2:69:f1:96:
         9f:63:01:ca:4a:69:d0:f8:f2:4f:1e:4b:9a:e1:9d:5c:8d:76:
         3e:88:c3:f3:0f:0c:e9:fe:23:84:92:5b:ef:d1:be:63:6b:e9:
         b5:0d:61:cc:85:4a:99:f1:16:42:03:2b:92:03:fe:cf:1e:b8:
         14:2b:6e:5e:02:e9:45:b7:51:f6:34:25:3d:07:1f:b4:d0:a7:
         4f:31:93:a3:f4:63:0b:ae:40:27:5c:59:c3:bc:e3:a1:0c:43:
         e4:04:9e:fa:18:5a:69:62:c8:38:ea:33:39:e3:24:79:d0:bd:
         22:74:8a:6d:88:26:03:7f:2b:e7:45:ff:48:05:cf:75:25:9c:
         24:4a:fb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----