Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/ciMl7PNoyRSKfEEoHWB_ptgEoMk.mft
File:                     ciMl7PNoyRSKfEEoHWB_ptgEoMk.mft (raw, json)
Hash identifier:          YkKcuH6D/Kibf+nL4ePeQpvRN0X15x6tnle6qnmO/AM=
Subject key identifier:   B2:5A:F6:67:86:E4:06:C8:58:F4:0D:29:53:31:04:41:C4:14:A2:06
Authority key identifier: 72:23:25:EC:F3:68:C9:14:8A:7C:41:28:1D:60:7F:A6:D8:04:A0:C9
Certificate issuer:       /CN=722325ecf368c9148a7c41281d607fa6d804a0c9
Certificate serial:       01954710790DFE4D5969594C35FB6F28C13C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciMl7PNoyRSKfEEoHWB_ptgEoMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/ciMl7PNoyRSKfEEoHWB_ptgEoMk.mft
Manifest number:          07BE
Signing time:             Thu 27 Feb 2025 11:00:16 +0000
Manifest this update:     Thu 27 Feb 2025 11:00:16 +0000
Manifest next update:     Fri 28 Feb 2025 11:00:16 +0000
Files and hashes:         1: BmfcOnYElMh5PaCoOK8fAlhsffE.roa (hash: X8evOs6zwE8U3kmLtLJ0PEiZyO0j2fSRThXJ71ro0bc=)
                          2: ciMl7PNoyRSKfEEoHWB_ptgEoMk.crl (hash: iX+NCJ4JgiYIM0uBML5JAbm0lfJubxmdskQem+ZjeG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:10:79:0d:fe:4d:59:69:59:4c:35:fb:6f:28:c1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722325ecf368c9148a7c41281d607fa6d804a0c9
        Validity
            Not Before: Feb 27 11:00:16 2025 GMT
            Not After : Feb 28 11:00:16 2025 GMT
        Subject: CN=b25af66786e406c858f40d2953310441c414a206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:8d:46:7b:de:07:3e:69:82:50:b2:0f:61:
                    cb:a5:e2:27:52:76:28:1f:22:10:ae:09:a3:a3:fd:
                    d7:19:8b:2e:8f:80:86:d8:d1:f8:72:24:bb:f0:fc:
                    e5:47:a2:17:e6:aa:88:01:3e:e6:f5:36:de:15:f3:
                    98:c1:93:30:d6:4d:95:6a:5a:0d:01:92:a7:88:d4:
                    aa:51:11:41:1e:a7:75:79:c7:30:91:a7:05:c1:d9:
                    05:6e:1b:3f:12:2b:21:ee:b1:93:f2:89:65:98:da:
                    53:db:01:45:79:9a:72:94:33:46:9c:82:7b:b4:d0:
                    45:32:24:66:0f:7d:db:53:dd:4e:4c:51:1f:a3:2b:
                    7d:94:03:08:96:f9:b8:58:94:ed:81:dd:93:40:31:
                    c6:46:30:df:88:9c:08:6c:76:74:2f:f3:5b:cc:3a:
                    24:25:04:0e:05:f4:d6:67:c6:d3:1f:c5:78:6e:e9:
                    34:f3:be:76:86:a3:72:8b:d4:f2:56:cf:1f:b4:4e:
                    95:85:2e:e4:37:65:61:e7:f2:f5:64:28:0b:76:ae:
                    cf:52:6a:46:a2:c8:57:a4:8a:f0:a2:e1:34:a9:c4:
                    40:fb:10:43:d1:56:ef:7d:94:37:31:52:a8:ed:20:
                    06:08:04:af:41:1d:14:e1:8c:d1:27:26:de:9d:0f:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5A:F6:67:86:E4:06:C8:58:F4:0D:29:53:31:04:41:C4:14:A2:06
            X509v3 Authority Key Identifier:
                keyid:72:23:25:EC:F3:68:C9:14:8A:7C:41:28:1D:60:7F:A6:D8:04:A0:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciMl7PNoyRSKfEEoHWB_ptgEoMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/ciMl7PNoyRSKfEEoHWB_ptgEoMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/ciMl7PNoyRSKfEEoHWB_ptgEoMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c1:c2:b9:e7:13:c5:35:b0:a1:78:5e:23:86:d7:40:44:f8:
         64:d4:f8:29:ed:c0:b5:4e:1c:78:da:e4:68:81:bd:2a:01:81:
         e6:39:be:f5:46:d9:54:a3:1d:4a:ab:13:ec:5e:e1:19:05:43:
         a9:5d:02:00:11:45:69:37:33:69:52:c0:86:3d:63:4e:74:1b:
         e3:1a:30:75:21:f8:6b:1e:39:b9:a3:e9:d7:eb:0d:43:16:b2:
         54:e7:5d:49:f1:f4:bf:a4:bb:15:01:63:ed:80:0d:d5:27:c3:
         f3:75:92:ab:60:12:f6:c5:21:b8:67:62:f9:78:33:c4:a1:ae:
         23:68:30:28:c5:52:7f:67:c7:3e:e9:e1:39:f7:49:0e:08:9a:
         bd:d6:c4:f5:8b:21:12:2e:7f:38:85:03:8b:3a:73:97:83:b8:
         d8:b2:b0:81:3f:d4:e3:b6:90:64:d0:91:e4:1c:9b:f5:87:37:
         80:2c:c0:99:5d:42:38:87:14:82:51:89:98:53:8b:e7:4d:b7:
         fd:07:df:4e:32:84:8f:12:d4:31:46:2f:73:66:b4:48:d6:83:
         ee:47:c5:25:98:1e:39:60:91:77:5d:00:15:d7:4f:38:d5:24:
         3a:b8:4d:1a:75:06:6b:2e:fe:8e:4d:01:05:e3:50:32:1f:2d:
         e0:dc:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----