Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File:                     sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier:          zq7DNX/Q0Dm5PuJ2vFNM7zHLQB8j7lRFcijny5gQPEc=
Subject key identifier:   0D:72:2A:9B:03:A2:4F:D6:AE:1F:52:F1:3E:E3:E2:38:79:E5:7B:50
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer:       /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial:       01962E991EC1E71827635E877F810C577AC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number:          0809
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: mMmymzplWMeJzzgdG7P3tHtpBaQ.roa (hash: /bqXbIc2T1Ug7GTSXeUaRuS3D15TA3H+LDCDm5yP2ts=)
                          2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: UHvU0jIV0IQea7cK9HKFHcUjZOnWxW5q5zfG+iGFczc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1e:c1:e7:18:27:63:5e:87:7f:81:0c:57:7a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=0d722a9b03a24fd6ae1f52f13ee3e23879e57b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:af:82:ae:50:26:99:50:cc:ec:d1:f3:c4:9c:
                    66:51:78:4b:96:be:4b:f6:5e:65:40:86:20:02:23:
                    52:d2:15:20:91:aa:02:f3:f9:cc:82:58:f0:60:17:
                    d3:ff:b2:3e:d5:8f:d0:f4:f4:37:51:fa:99:28:e3:
                    38:53:7d:b2:9f:b9:94:a8:ef:73:0f:5c:ac:a2:2d:
                    3d:a0:45:cd:22:df:5e:ac:58:26:ed:d8:2f:a0:73:
                    f8:12:60:17:7c:e4:73:70:d5:e8:c1:44:11:ac:1d:
                    49:3a:77:8d:d4:8c:31:d7:ae:f2:71:fb:72:15:da:
                    52:69:b0:57:45:b4:47:92:a9:fe:dd:04:32:65:fe:
                    d1:a0:97:c4:5a:98:fa:97:e5:01:b4:ba:03:ed:18:
                    87:21:2c:94:77:ed:36:2a:66:60:76:0f:b3:b8:42:
                    68:3b:44:68:32:15:07:1e:41:6a:ca:61:d8:f3:bd:
                    6c:34:f6:be:92:56:6f:fc:32:f6:ba:c5:1b:a2:1a:
                    ec:b1:76:58:25:ee:b1:5f:97:3c:93:b2:f7:ff:88:
                    a8:d2:89:59:a2:2e:50:33:81:51:95:f9:70:63:f1:
                    84:d9:00:13:c8:5a:a3:2b:d1:a0:ef:6f:8e:14:c9:
                    c1:df:f1:cb:d5:4d:c3:f2:71:14:52:1b:4e:bd:79:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:72:2A:9B:03:A2:4F:D6:AE:1F:52:F1:3E:E3:E2:38:79:E5:7B:50
            X509v3 Authority Key Identifier:
                keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1b:50:fb:5b:43:f1:dd:9c:5e:7e:02:3f:c6:92:c5:a0:2e:
         45:9b:88:13:f8:77:d9:ca:73:69:41:0c:40:b9:9e:23:ab:d5:
         b3:4c:79:6b:e1:ce:b9:a8:ab:48:01:da:dd:3c:ac:df:2d:02:
         de:41:71:ad:6f:6e:22:7c:1e:bb:c1:21:54:7f:a5:4a:b9:23:
         89:71:5a:80:85:43:ac:55:0b:cd:c5:09:6b:74:f0:c4:5f:84:
         2f:b5:9e:94:30:35:ac:6c:45:e1:af:02:70:a6:e6:8c:29:58:
         71:e2:7d:02:5e:0e:99:dc:9b:2b:77:0e:df:3c:c9:3b:65:82:
         dc:60:a4:ce:37:b7:ec:e6:cb:9c:34:aa:66:eb:16:9e:cb:48:
         b8:7b:f3:8c:c1:23:4d:5a:54:6c:b6:8a:ad:0b:b4:d7:ed:9c:
         13:17:26:ae:93:e8:3d:ec:03:eb:ef:fc:2c:02:27:88:a0:97:
         20:1e:0d:df:30:9c:6a:b9:84:51:79:60:dd:99:0b:25:8f:a4:
         0a:6c:61:b1:c7:3e:95:34:1b:82:64:19:a7:74:8d:78:d0:86:
         4f:a4:ac:0e:62:81:9b:4c:e6:79:19:a8:19:17:ae:02:35:f5:
         29:95:3a:b9:b6:1b:0c:07:02:b1:e8:e3:2d:68:65:b7:15:71:
         4b:94:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----