Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
File:                     AydVBXxpvXun2iJSAQnkm1sEzAM.mft (raw, json)
Hash identifier:          CsoOhDGY+Hmw8WtH20TzQftmjN8sR5GjYp1zV64scNQ=
Subject key identifier:   93:FD:15:F5:F6:B8:81:C6:4C:99:C5:5A:71:F2:AD:D6:25:9C:C8:61
Authority key identifier: 03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
Certificate issuer:       /CN=032755057c69bd7ba7da22520109e49b5b04cc03
Certificate serial:       0196D8F803AADDE2937BB4BF6FCF28A89CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
Manifest number:          1545
Signing time:             Fri 16 May 2025 12:00:54 +0000
Manifest this update:     Fri 16 May 2025 12:00:54 +0000
Manifest next update:     Sat 17 May 2025 12:00:54 +0000
Files and hashes:         1: AydVBXxpvXun2iJSAQnkm1sEzAM.crl (hash: vEt2ir8bCH4A0HN9yoX0rw2GJCi7Wsgo8o2Eytukcbk=)
                          2: EJzvV6VT4JO2fNcaeaZDcT8DKYo.roa (hash: bG9n2ritOo8P4pLXuKhyV+b01tNOeWKOB0xqyu4uUe4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d8:f8:03:aa:dd:e2:93:7b:b4:bf:6f:cf:28:a8:9c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032755057c69bd7ba7da22520109e49b5b04cc03
        Validity
            Not Before: May 16 12:00:54 2025 GMT
            Not After : May 17 12:00:54 2025 GMT
        Subject: CN=93fd15f5f6b881c64c99c55a71f2add6259cc861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:cb:95:1d:41:94:b1:ef:ac:30:43:d3:fb:
                    c1:cb:ab:1d:37:e4:6a:b1:f5:5f:09:2b:e0:22:ff:
                    08:a0:62:dc:0e:8a:76:dc:7b:66:a8:d0:a6:c7:76:
                    d5:52:d2:d7:f9:6f:cb:68:90:0c:e6:de:22:af:ad:
                    69:4f:69:52:a2:94:4f:12:08:67:25:cc:39:39:20:
                    87:b9:4c:38:bb:b1:ce:eb:b3:15:80:76:10:5b:72:
                    52:d2:e0:23:75:0f:2c:97:e1:07:68:9d:ff:92:2f:
                    ef:f2:92:4a:ad:b3:50:c1:7c:43:96:3a:b2:2f:ac:
                    6d:55:41:5d:b1:c1:7a:63:6f:72:55:03:58:3b:61:
                    fe:19:5e:7d:88:2f:06:45:a6:19:2b:ad:82:61:8e:
                    b3:ee:6c:6b:13:29:c0:8a:4b:c5:b2:c5:21:74:07:
                    df:d9:98:38:6c:67:79:28:83:0e:fe:76:43:bb:9d:
                    3c:93:7b:f4:da:51:6f:fd:07:56:e1:51:54:4f:b4:
                    38:d6:70:95:2d:68:02:6b:0c:ed:e3:3c:65:65:84:
                    d3:bf:ce:b5:2b:4f:0b:e0:92:84:63:98:0b:c3:c7:
                    d7:5d:30:e4:6e:32:83:8b:bf:b1:59:f2:ba:a7:b6:
                    2e:db:27:a3:68:06:64:b9:82:19:01:25:29:59:85:
                    74:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FD:15:F5:F6:B8:81:C6:4C:99:C5:5A:71:F2:AD:D6:25:9C:C8:61
            X509v3 Authority Key Identifier:
                keyid:03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:60:3e:99:33:77:03:50:1b:ca:a5:88:60:bf:03:14:e4:5d:
         71:07:78:9e:76:96:6b:fa:b4:57:9b:37:3e:ae:c1:97:17:d1:
         65:c4:60:36:e0:6a:24:5d:4c:6b:5c:4f:83:76:24:57:9a:83:
         4c:06:fb:d9:ef:68:f4:6c:94:7a:95:a6:38:6a:b2:2e:9f:f9:
         79:bd:d1:03:49:81:39:e3:87:f8:5b:c7:a9:0a:a3:c0:1a:9a:
         df:1d:fd:55:b9:41:c2:9f:bc:de:3a:37:ac:ab:17:6f:f1:53:
         f2:eb:c7:c3:d6:8d:6e:8b:43:3f:24:fa:b7:2f:6e:c0:b7:90:
         bf:bd:4a:a7:95:74:f0:56:5d:aa:77:cf:8e:a3:12:e0:0a:f6:
         70:ee:cd:65:d9:30:43:c8:c2:17:b1:ad:c7:cb:8b:35:f3:c6:
         49:d8:b2:bc:ec:e0:59:42:20:64:c1:56:e4:19:2e:38:d3:96:
         3e:de:a1:63:17:cc:cd:f6:c3:0a:b5:0c:c5:0c:e5:b0:3e:b9:
         57:b9:79:d0:aa:9f:27:4b:03:bf:86:d5:5f:3c:14:71:12:95:
         92:09:6b:d7:89:ef:d4:da:6a:82:a1:77:79:20:30:c1:00:6b:
         2c:68:10:10:57:6f:6a:8f:04:b0:f4:f9:9c:df:2a:93:56:3a:
         43:01:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----