Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
File:                     23DOek5uSrOk6p8IH1kupfbSuao.mft (raw, json)
Hash identifier:          4KJ2iHv7bRwaO87ahz+IpZeXsukzy6bXnT0g+5OOGww=
Subject key identifier:   39:D5:70:20:FC:49:2D:47:BA:45:6D:09:F9:5C:E0:15:9C:CA:75:70
Authority key identifier: DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
Certificate issuer:       /CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Certificate serial:       01962F0745A0D707031362EA3F95E5174273
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
Manifest number:          052D
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: 1-zGyc8-sNFoNd9jrRwy0ohv-lr8.roa (hash: X6damPmptp3XphV2HfGbEnZgUQ5Ok8UVDdDjwWdsAA0=)
                          2: 23DOek5uSrOk6p8IH1kupfbSuao.crl (hash: yYIbC60Hb8E5CTAd3WYY8vRw6e8hulbd7oWPwGvcFu8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:45:a0:d7:07:03:13:62:ea:3f:95:e5:17:42:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=39d57020fc492d47ba456d09f95ce0159cca7570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:fb:e8:88:42:b6:a9:70:98:d5:99:48:88:
                    b1:3f:0a:84:1f:30:43:fb:7c:e5:a8:fb:9d:4a:6a:
                    0e:2a:47:ff:90:7a:13:3f:6f:af:de:37:59:e4:4d:
                    30:22:bc:9a:73:16:95:31:46:82:bd:a9:39:c6:e3:
                    3c:d9:15:e5:8b:4b:aa:06:43:66:5f:21:21:3e:fe:
                    14:96:c0:cb:d6:22:2b:67:8b:fd:82:62:eb:3e:58:
                    16:fa:01:e2:3d:db:76:e6:9a:de:00:7a:7d:2c:91:
                    b3:f1:28:6b:2a:06:79:c7:72:93:54:82:e7:9a:9c:
                    3d:a1:84:59:8c:9a:54:e3:d2:d7:eb:f6:8f:7a:4c:
                    e3:f7:7c:92:d0:a3:7f:a6:97:56:a5:e4:98:d7:e4:
                    50:e3:d5:9c:36:f4:47:62:ce:f8:6d:20:37:5a:f0:
                    7a:f0:bb:79:c8:f4:2e:4b:2a:c7:90:11:78:d5:28:
                    83:82:32:fc:da:fb:7b:9e:55:fa:a0:88:78:b2:74:
                    ba:bb:d7:ed:a9:54:f2:a8:29:ce:06:d7:9e:19:57:
                    7d:e5:c3:64:5f:f7:a0:4c:02:6e:95:78:5c:dd:76:
                    b1:77:70:9d:fb:8e:6d:5d:06:40:b3:3c:34:e4:2a:
                    83:c3:cb:69:11:7c:aa:85:c8:a2:85:f8:a3:da:49:
                    03:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D5:70:20:FC:49:2D:47:BA:45:6D:09:F9:5C:E0:15:9C:CA:75:70
            X509v3 Authority Key Identifier:
                keyid:DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:95:4d:b2:61:6d:93:34:ab:e7:f2:0d:08:b2:bb:82:77:e7:
         1a:21:b7:f6:25:77:df:20:8c:76:b3:fc:a8:f0:c3:9d:5b:79:
         4f:18:cb:84:f2:86:e9:54:36:d6:f3:63:29:b6:62:13:24:8c:
         9c:68:c2:80:2f:1b:e3:bd:05:aa:1a:73:5c:eb:51:c5:b4:57:
         c0:73:75:0b:24:4f:13:1a:33:11:29:d1:99:71:ed:d7:0a:47:
         59:72:8d:8c:7f:38:79:ac:63:86:79:93:6a:db:ca:2f:59:4a:
         32:bb:87:e9:0c:d0:ca:83:5c:aa:b3:ef:37:63:ec:5b:df:10:
         1f:d9:33:ca:de:b6:b0:8e:49:56:3b:f4:90:67:b1:b0:31:f7:
         d8:25:d4:3b:ff:fc:49:a6:7e:ae:2c:5a:df:b6:52:c8:87:23:
         94:99:39:61:94:25:d8:b5:e6:37:fc:e9:5b:6c:bd:23:a0:8a:
         10:96:57:c3:11:b6:38:4a:a6:ca:84:b9:24:68:02:31:8e:c5:
         c8:f4:3d:87:2a:55:ed:4f:5d:f1:4a:b9:14:8d:93:75:71:87:
         21:92:c7:3c:8d:bb:a5:1e:34:8e:99:80:bd:72:37:2f:0a:a6:
         db:97:c0:0f:eb:94:60:ae:b4:83:27:73:64:a3:31:c1:80:36:
         cb:5b:f6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----