Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
File:                     grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json)
Hash identifier:          G7QiOyu8a6lq7QJWmUgwmAj5AWQWRkfWAnXXxOzAkz4=
Subject key identifier:   C4:BC:CE:D5:15:44:71:F9:81:FB:7C:06:FC:98:DD:E2:7A:23:46:0F
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Certificate issuer:       /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial:       01962F747CF7D1DF4C8E53102492A0647347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
Manifest number:          052D
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: UJLmCw34qWtSEnk-TuMcHNiR5vk.roa (hash: j5fkYAu7YGsQmsA7L/NleCKG1P5eFJG2QoHhfIjSYOI=)
                          2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: 6pH5AJANL7q2068L4BwxR9BdeteSL9ug/6MNupcuUmw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7c:f7:d1:df:4c:8e:53:10:24:92:a0:64:73:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=c4bcced5154471f981fb7c06fc98dde27a23460f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:7e:3e:19:ed:96:7b:8f:9c:ee:32:2f:63:
                    ac:ea:d7:51:ab:9a:03:cb:75:27:31:1a:1e:c9:56:
                    d3:2d:1d:cf:1b:da:71:9f:0e:2a:07:ae:a5:4f:0f:
                    62:44:64:c0:c0:3a:20:0c:d2:cf:68:92:e6:df:a3:
                    38:34:aa:44:e6:be:54:b3:22:d2:47:64:06:df:5f:
                    49:1e:fd:a7:5b:ee:12:73:ab:60:2a:5b:bf:f7:eb:
                    f6:fc:53:65:f3:72:1d:57:2a:b7:34:00:fa:be:91:
                    0d:55:9c:51:98:62:ea:1a:06:20:bf:11:bb:b2:d6:
                    80:7a:9b:55:b4:85:6c:e8:97:4b:43:30:3e:1e:9e:
                    4c:d0:ba:a2:67:21:de:a8:bb:b2:d8:c0:1b:29:e2:
                    39:5c:8e:35:88:87:d0:9d:22:c0:d4:7c:f4:1a:09:
                    b0:6c:6a:61:ba:bb:ec:88:0b:a8:4d:02:72:c7:c3:
                    cb:a1:e2:23:36:e6:f0:75:e8:e3:eb:bd:6b:30:c2:
                    85:ce:f2:14:2b:80:86:36:15:dc:63:3e:cc:3a:79:
                    90:72:77:65:57:a7:93:a7:41:3e:8e:ff:5d:93:a3:
                    73:e0:81:8c:4c:05:63:a9:9a:73:c4:b3:e4:51:e9:
                    0d:68:ea:1c:0b:29:d5:ef:b8:dd:88:76:d7:0e:b5:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BC:CE:D5:15:44:71:F9:81:FB:7C:06:FC:98:DD:E2:7A:23:46:0F
            X509v3 Authority Key Identifier:
                keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4f:02:6d:8c:ff:bf:8e:f2:a9:29:7c:ee:17:c5:42:9d:2c:
         f7:da:38:5f:a1:a3:61:12:ff:7b:0c:dd:d6:58:22:37:62:bb:
         41:37:c5:26:19:c4:6c:84:09:33:3c:fc:6c:81:a4:18:ce:da:
         12:15:ba:a2:b0:d7:30:61:3c:d2:24:d7:1a:52:a1:a0:cb:45:
         01:37:6e:77:38:09:82:06:89:79:a4:62:ce:cc:9c:bf:d7:52:
         59:a4:b7:e1:b9:cb:3f:61:31:33:eb:11:a8:16:26:75:3e:55:
         0e:88:07:93:5e:16:54:31:34:9f:67:b4:d6:28:79:2e:7d:c6:
         4b:2b:cf:66:83:3b:06:c5:54:e4:41:55:2a:07:4d:c0:ba:b0:
         5b:0a:89:46:19:af:4f:9f:0b:a6:d2:70:8f:9a:0e:e2:a2:1f:
         8e:9a:ea:b5:42:06:58:ac:be:72:b7:d6:fe:84:20:00:0b:f5:
         e6:86:68:9a:51:69:ca:f3:99:4f:1b:db:97:73:95:15:b5:5b:
         21:ae:fc:a3:b7:77:da:0b:65:af:4c:aa:7e:18:2e:79:e8:a2:
         00:0a:69:41:64:b3:47:58:0b:38:28:10:96:11:53:bc:28:00:
         cb:53:3e:f0:47:1a:ad:92:13:eb:6b:4a:9e:55:04:ba:a4:df:
         5e:76:ea:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----