Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
File:                     pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft (raw, json)
Hash identifier:          eXu+6bzw2wAK7zZOxH9N38S8BRqfFjORJCVm+XoW1UE=
Subject key identifier:   F0:63:EE:6A:32:D5:B5:87:11:CC:5B:EF:CC:49:D5:A4:96:59:35:6E
Authority key identifier: A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
Certificate issuer:       /CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Certificate serial:       01962F74BF8D082BA831CFBF0E6109058DB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: Zul1tgj5h7XyL00R81W1mi6g1V0.roa (hash: JA2Lp3OQPetYYVSiRbEJs9OwBpQrX9gJ6sScomlZ4Xo=)
                          2: pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl (hash: 5jvVQ0k6ZMJ9FLz0s+Vq84aHst+XKXB4xoEIAMesUCE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bf:8d:08:2b:a8:31:cf:bf:0e:61:09:05:8d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=f063ee6a32d5b58711cc5befcc49d5a49659356e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4b:84:00:7d:3c:00:1d:9e:ef:4c:e0:fa:9c:
                    5f:0e:46:ca:e2:55:4e:73:5f:30:2d:d8:16:9d:6c:
                    25:9e:5c:73:d9:f4:e6:89:a9:1d:22:fa:1f:0c:c4:
                    c9:97:6b:ba:ce:44:2b:bd:94:c8:3a:e6:e2:41:ca:
                    d2:3d:bc:0d:b5:0f:4e:6b:e7:e7:83:10:29:fc:c5:
                    74:97:fa:84:75:77:22:3c:8e:fa:9c:d6:35:16:a7:
                    0b:2d:a6:1f:80:31:a9:63:16:2b:3c:dc:75:3e:dd:
                    e1:87:de:90:0e:ea:58:01:bf:b4:5c:6b:4c:fb:42:
                    b4:6c:ca:27:6b:6a:90:5f:ad:98:b7:69:7c:f7:76:
                    cb:78:a3:96:41:55:97:1b:7a:c4:be:c2:33:a8:d9:
                    a7:64:2d:e3:28:72:c8:9c:bf:91:ea:e4:95:30:f1:
                    40:e1:1a:b4:b0:46:62:36:6b:da:dc:93:35:c9:11:
                    1f:1a:8b:bc:35:bc:00:3d:e1:1c:49:10:a2:b1:2d:
                    8c:7d:9a:b0:5a:b6:28:20:f3:b4:f3:48:51:52:40:
                    73:fb:a6:f5:69:ec:2f:30:9c:f2:1e:dd:29:e7:46:
                    4c:ee:1e:bf:5f:3f:55:3c:93:15:3e:13:72:7c:95:
                    b0:d1:b2:e6:ed:30:29:89:1d:2a:35:ae:66:d1:ce:
                    d9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:63:EE:6A:32:D5:B5:87:11:CC:5B:EF:CC:49:D5:A4:96:59:35:6E
            X509v3 Authority Key Identifier:
                keyid:A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a8:9d:aa:e3:14:a4:2a:4b:4f:69:d2:af:41:8e:af:74:f7:
         23:11:00:68:0b:b9:b2:b4:ea:4d:56:66:55:dd:22:3f:72:f9:
         39:04:c9:ce:81:cc:c4:43:3b:4b:09:55:09:ce:20:74:d3:45:
         e0:f5:f7:cf:31:4f:da:10:bb:64:39:8c:7b:3f:fb:e7:64:99:
         a9:45:90:55:a9:d2:2b:7a:62:82:cb:1b:70:0e:97:00:19:15:
         dd:6f:ea:2f:8a:9b:42:a0:16:b8:e1:23:4c:74:4c:f9:4b:4b:
         90:d2:ab:39:a2:18:8d:62:1b:8d:3b:9c:b5:73:cf:bb:a9:9a:
         68:71:88:30:e0:c1:60:a5:b3:57:3e:86:b8:f8:f1:a6:86:9f:
         99:d1:3e:ff:7d:2a:a7:b1:7a:19:7c:91:09:f6:de:f4:6a:a7:
         da:eb:65:1a:72:d4:11:98:7b:c7:be:9e:89:50:a3:27:42:41:
         75:64:9b:3e:28:32:91:49:8f:15:54:d6:59:ef:be:ca:6a:b0:
         8a:c2:de:88:f3:d0:61:8e:7e:85:b0:ca:7a:19:1f:28:09:81:
         c3:55:73:a3:10:74:67:17:c9:37:a4:f9:96:c6:cb:43:72:a0:
         8f:ae:40:ac:4d:ff:58:3d:86:7a:68:17:a9:8d:38:5d:47:e4:
         b6:bc:53:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----