Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File:                     B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier:          Npwg4UvZr4TpCGyWOOUbFDi5iBJTY3XJbjaNjMvJ4H8=
Subject key identifier:   48:23:5E:02:48:E9:59:AE:71:63:01:2D:01:E3:DF:0C:E3:2A:0D:E2
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer:       /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial:       01962FAB45C28D9C729C1BD9588614007C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number:          13C0
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: gDWS6o+HZ6ZIOUuHep2YTbkA2PHWbfZZs2rzPjJddtM=)
                          2: ymgejZXQAFGY4W5XJssEnhi7B6U.roa (hash: 6jBjJYjwNGCZyUd70W3B/Q80kGLCgiNFZzX5URwj3Fo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:45:c2:8d:9c:72:9c:1b:d9:58:86:14:00:7c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=48235e0248e959ae7163012d01e3df0ce32a0de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:de:32:32:66:80:3a:e2:92:f2:78:c5:6d:33:
                    8a:c9:f5:01:f1:ca:17:fb:4b:e8:05:e2:05:8e:05:
                    88:ec:de:4c:33:7f:e6:1e:2f:a0:d2:de:4b:1b:b8:
                    43:43:48:c5:d1:91:da:20:d1:e9:24:69:7d:f6:b5:
                    c5:50:03:14:6f:3c:b8:e7:91:de:f9:d5:80:80:6b:
                    80:cb:95:fb:4c:35:eb:89:1d:c3:6f:5e:53:56:ad:
                    84:32:77:19:b9:16:a1:b8:cc:33:4d:2c:6b:85:0c:
                    a3:d6:81:c3:06:e9:29:2a:d4:6a:61:09:25:fa:c1:
                    50:61:17:0c:be:80:62:a0:5f:f1:7b:20:54:93:e9:
                    39:30:71:4a:9a:6c:84:eb:be:b8:20:85:b8:01:dc:
                    26:24:5c:a4:e7:95:52:74:a6:8d:7e:fa:03:c1:eb:
                    c4:c6:8b:86:1a:cd:42:3b:61:68:f9:06:61:f5:62:
                    3c:a8:99:8a:79:64:79:80:3f:09:f3:83:23:4a:20:
                    23:36:38:b5:c2:f3:c2:49:19:81:d3:e8:68:d9:c3:
                    50:1b:33:c9:83:89:ba:2a:ee:0b:6f:72:fd:3b:8d:
                    3e:ef:35:45:2d:a9:39:84:04:4d:de:2e:b9:0a:7c:
                    2c:e0:0f:72:0e:d9:11:aa:c8:91:6f:ae:b8:d0:5f:
                    19:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:23:5E:02:48:E9:59:AE:71:63:01:2D:01:E3:DF:0C:E3:2A:0D:E2
            X509v3 Authority Key Identifier:
                keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7e:64:2a:51:e5:f3:8e:fd:c3:3d:aa:67:93:75:10:03:39:
         95:e8:11:f7:14:ab:91:30:44:be:b8:62:d0:de:ad:df:80:ad:
         e9:92:bf:35:3a:ce:cd:ee:e4:36:a1:da:30:a6:2f:32:de:1b:
         ac:e3:a0:ed:0c:57:11:33:e6:24:83:ba:c9:3f:42:ef:59:fe:
         e3:c0:d3:b0:32:db:2b:7e:b3:e8:3e:7a:98:f3:54:57:f3:b2:
         db:0f:3d:3e:2f:fa:89:aa:92:5d:b8:63:c0:50:6f:1f:3b:66:
         45:8a:97:f5:b0:8c:5a:48:0d:4b:3a:d5:c7:ae:01:64:22:db:
         ef:d5:ea:32:67:4e:41:ee:ee:05:a0:16:47:c4:5c:eb:00:9e:
         f2:ee:47:22:f1:3c:72:2d:19:43:f7:66:c2:d4:47:52:a6:0b:
         73:7d:1e:fa:0e:9f:a5:01:99:43:a1:8b:47:c9:5c:cb:e5:d7:
         4b:70:fc:e7:e8:a6:11:95:10:d3:dd:fa:0d:d2:73:e6:c8:89:
         69:f4:cd:64:25:ec:b6:9d:ad:d2:27:01:2f:af:85:88:f1:03:
         82:6e:fa:d4:f4:8f:f7:8c:40:f8:8c:62:3e:43:00:47:99:cc:
         45:83:6f:fd:e8:19:04:2d:5a:9a:91:c9:67:2e:a5:02:5a:a4:
         20:53:9b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----