Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
File:                     V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft (raw, json)
Hash identifier:          z020HhZ4bbZAMvxlBFl9V7XIaMyXdkYAS0GweHSm3gk=
Subject key identifier:   CB:21:5D:1C:16:E7:41:E0:1E:81:78:D8:3B:AE:7C:84:D5:19:EA:51
Authority key identifier: 57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
Certificate issuer:       /CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Certificate serial:       01962FAB8B379EDC7439712D75E2E703889D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
Manifest number:          0647
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: 0MC1362R9lRRGpq84ZgFyJggIsA.roa (hash: 2oe5jKK2VDNOSC6ja+1wPu+cY+lyRN63lTJAf4/SoR0=)
                          2: V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl (hash: pF/TXmCgWLv27lx6fEPThFwb4cJPn4ms4jFD8zzwvK8=)
                          3: hxG-StCBPxemsj2qpKGT4GGzhQk.roa (hash: MYz1XQtFxhUeNPc3mCJTjKjV6pO6a8sxO3y4ixSgakg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8b:37:9e:dc:74:39:71:2d:75:e2:e7:03:88:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=cb215d1c16e741e01e8178d83bae7c84d519ea51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:48:a5:87:da:b0:fc:52:2f:2a:6b:50:5a:35:
                    89:cf:34:ec:d8:88:93:e0:1d:e1:c1:9f:1c:2c:6c:
                    78:8a:42:c7:97:20:f4:5a:90:d6:54:00:bc:7e:3b:
                    08:9b:f0:4b:f7:21:e0:b0:1d:8f:00:02:21:d5:57:
                    6e:fe:8e:b5:96:5b:fb:8f:b2:40:37:25:33:47:28:
                    42:d6:8f:35:5d:ec:92:3f:d3:79:5f:ab:6a:0a:f9:
                    8d:36:d7:42:a7:66:44:c4:38:40:ad:22:e9:82:91:
                    37:a4:2b:a2:65:85:57:6e:8d:38:c2:0c:90:9d:98:
                    e9:89:5e:ff:89:80:bf:d9:51:57:53:be:eb:6f:74:
                    cf:78:6d:6b:77:9c:30:a8:59:47:e6:1e:96:ea:88:
                    bf:50:a0:a3:7a:be:ef:fc:3d:58:cd:3e:72:45:99:
                    4a:64:54:a0:cf:dd:c4:14:40:ed:46:79:d4:75:de:
                    14:a9:4b:60:9a:e2:16:97:0f:5d:89:59:8e:e8:20:
                    1c:d4:47:52:05:57:b9:21:3e:1f:72:93:78:b2:c1:
                    a3:4b:3d:d1:2c:da:73:c5:04:bf:65:6d:11:81:23:
                    ed:6a:02:2a:c8:5a:8a:5b:7b:60:39:a4:9a:a9:1b:
                    a8:f3:e7:e3:87:25:96:fa:68:b5:58:71:9c:fd:61:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:21:5D:1C:16:E7:41:E0:1E:81:78:D8:3B:AE:7C:84:D5:19:EA:51
            X509v3 Authority Key Identifier:
                keyid:57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5f:93:86:04:77:ac:5b:0e:fb:1c:e9:bb:cb:3b:b7:e2:9d:
         28:e5:44:f4:6e:60:5e:2c:d7:ce:ab:88:67:c4:a5:f8:27:82:
         dc:fd:53:c4:f5:a8:f0:21:a7:72:f7:17:7e:d1:4b:a8:5d:50:
         5a:29:7a:3a:18:ba:97:b7:a1:07:5b:3a:b0:ec:05:91:0f:0f:
         20:3b:4e:56:91:39:bd:af:b1:a2:2f:f2:bf:04:70:f8:11:f9:
         f9:7c:06:a3:14:0b:c6:c8:4c:6e:e5:66:8c:68:b9:69:da:db:
         11:4d:1b:5d:8a:ee:43:69:2c:c9:9f:e0:cb:8d:96:02:d2:01:
         9f:e5:70:07:78:6c:b0:9a:26:4d:e1:e3:0b:74:20:58:bb:1b:
         a4:b1:0c:bb:8a:0b:80:62:b4:40:95:ee:04:ee:14:81:45:78:
         ae:e9:05:a0:97:37:29:94:c8:e7:53:cb:3d:13:53:5e:bd:4c:
         0d:de:a6:09:59:c0:8f:14:89:46:ae:11:41:2e:65:ea:99:80:
         45:e2:8e:e5:4d:a2:c5:40:da:78:ad:1e:a0:bd:96:33:88:c2:
         7d:52:4c:69:e0:0b:18:77:bd:4a:bd:2c:e1:67:c7:3c:cc:f1:
         67:66:6b:d3:aa:12:b5:4a:06:4f:a5:7e:62:c9:90:36:c0:31:
         31:11:e8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----