Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File:                     tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier:          nrxlKV39rAPoPYf5z0kYnCcsmA8hvnlVPkBnFuWpMC4=
Subject key identifier:   53:74:D0:07:41:9E:A0:26:5E:A6:7F:58:1A:CC:B2:50:C1:2E:B2:C2
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer:       /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial:       01962DF441A80ED5D6F5689474E4F8205055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number:          054D
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: ivwFvfWDs+z/lhEY3fDXTiEwhXmvm6KYeLLIqz5clpQ=)
                          2: wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa (hash: pBWXcPqjDxvwQjU9omFEQSPm1JUMryg0VPK+ErbtywE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:41:a8:0e:d5:d6:f5:68:94:74:e4:f8:20:50:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=5374d007419ea0265ea67f581accb250c12eb2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:37:0e:4c:60:16:1c:5c:0d:74:ac:f3:1b:93:
                    f8:d3:43:93:0e:9e:a6:4b:37:68:07:f4:ed:d2:9e:
                    86:f2:bf:26:42:71:28:fc:43:13:ad:ce:e4:ad:84:
                    5b:8a:bb:ad:fa:6b:97:fd:ef:cd:4b:f4:65:b9:0c:
                    0d:07:9d:7b:63:55:e3:6a:cd:b5:49:64:95:85:29:
                    e3:3b:f6:8c:a9:e1:34:a0:fe:c4:bc:51:56:81:13:
                    cc:40:66:4c:20:8c:53:0f:57:3e:e7:b6:b9:87:42:
                    1b:13:17:c1:06:75:48:90:de:14:35:2a:a0:9c:e4:
                    4d:38:58:79:43:9f:e1:b0:25:88:1a:33:71:d5:e0:
                    85:eb:58:32:37:11:bb:4a:46:2b:f0:5f:9d:c8:f4:
                    21:b9:9e:d1:64:f1:5c:e8:bd:b4:90:56:bd:8f:0d:
                    46:2e:43:e6:1d:59:1e:0e:20:2d:7a:8f:17:6a:3a:
                    74:ba:86:aa:08:18:04:40:98:db:44:6a:a7:ee:a8:
                    7b:86:17:1e:75:52:33:fd:66:6f:30:0e:73:b0:a9:
                    1d:61:64:44:99:3b:13:cc:c6:93:b4:76:81:73:e6:
                    26:90:51:84:e8:c5:9c:72:b1:bb:67:43:fd:3b:e3:
                    b8:93:33:46:10:70:35:17:a8:9f:a0:70:94:10:be:
                    30:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:74:D0:07:41:9E:A0:26:5E:A6:7F:58:1A:CC:B2:50:C1:2E:B2:C2
            X509v3 Authority Key Identifier:
                keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:34:45:41:bb:2f:4d:c5:2a:97:80:c3:28:b0:42:eb:40:1d:
         52:10:e3:f1:d7:2f:9b:06:28:cb:8a:89:79:be:95:5c:3f:17:
         3d:6d:f7:37:d8:ef:ab:7d:1a:ec:ec:b9:f5:f5:f9:20:3c:de:
         d3:d8:8b:f2:16:8c:1e:0c:12:27:e5:71:9d:c4:86:3f:81:96:
         b0:10:3d:b1:92:30:fe:d3:ef:2e:c9:b8:c2:3f:02:1b:14:70:
         09:2f:c5:f1:72:da:22:82:70:32:a4:b5:24:dd:71:62:6a:b4:
         dc:f6:5f:9a:e6:7f:5d:53:29:30:8e:c2:a9:2f:52:95:6a:08:
         88:ee:c7:3e:6d:0f:42:9c:5d:74:bf:d7:c0:eb:06:62:d2:85:
         9b:a5:96:ec:59:e2:04:db:97:9b:46:2f:38:81:e7:3b:d2:c7:
         95:b5:7a:6e:56:ad:03:74:48:08:80:50:2a:b1:e2:1a:fd:a9:
         c2:fb:62:08:58:cd:51:3d:51:5c:d3:6a:08:04:ef:44:da:0d:
         4c:7e:ad:54:36:ee:b0:2b:e7:a8:63:df:3d:2c:2d:3e:11:fd:
         d0:96:0b:6f:bf:53:b0:7f:74:6d:78:ff:b5:92:50:33:9c:d4:
         4a:ca:9a:db:7c:2d:1d:61:ca:9d:68:9e:da:b7:a0:22:75:29:
         27:0d:ae:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----