Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File:                     UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier:          9bxn3G/CmCosWs2q8tuCY5S+b3zbf0r0QHJg3+EiJ6o=
Subject key identifier:   42:42:ED:5F:39:FF:D5:C4:D9:4D:3F:7F:81:04:50:FD:E8:71:0D:35
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer:       /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial:       01962FAB2FD9DDD0B3504B2FA867B112785E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number:          3A
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: OaK8k5jjSy7+FSjXMAdWCl+eFdpz6iHfKpr5+mS5fN0=)
                          2: ePyQopOScagWFzEkE8JnltAqMeo.roa (hash: HBo6Q0ESBQ76lXOKaYzIqOC//rtW1Zw5+A47hcrlRkM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2f:d9:dd:d0:b3:50:4b:2f:a8:67:b1:12:78:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=4242ed5f39ffd5c4d94d3f7f810450fde8710d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ca:dc:18:7c:02:e1:80:af:6f:a3:9d:ab:44:
                    86:51:48:61:66:ce:fe:f8:82:98:dc:2d:9f:6e:88:
                    65:12:bd:4b:c6:57:fe:d5:5a:ba:a3:07:9c:2e:cb:
                    33:9b:36:26:c9:6d:fc:40:26:db:dd:07:11:ab:b6:
                    e5:2a:70:e1:c4:eb:24:3d:26:9f:b9:d2:73:b5:e4:
                    98:fb:42:fa:75:b3:e8:79:ce:9b:a2:1f:86:e0:0b:
                    68:c4:79:28:46:8f:d9:32:0b:24:c9:8b:ba:fd:7e:
                    01:da:43:1f:dd:bf:7e:c1:99:a7:68:ea:da:4e:ce:
                    af:ae:d4:db:f6:65:d9:70:be:64:dd:51:c4:0e:83:
                    eb:aa:6f:75:ae:dc:87:3c:51:f2:04:11:90:fa:f7:
                    75:7c:ce:d5:2c:f4:f7:87:7d:9d:a8:b2:93:5a:87:
                    6a:cf:db:93:73:26:ae:28:8a:c3:da:99:ef:55:e2:
                    a6:5c:8d:c8:fa:5c:a2:bc:c5:74:22:fe:e1:30:e5:
                    ca:04:41:47:31:4b:d8:0a:ec:9e:7a:77:b8:11:d2:
                    de:12:2c:ea:1c:ed:02:bd:27:4b:f7:2d:16:76:28:
                    e1:56:d1:eb:d1:cc:e4:1b:93:6d:70:e5:6a:88:1d:
                    e2:92:2d:bf:b0:60:b0:57:df:29:0c:35:b8:8d:79:
                    17:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:42:ED:5F:39:FF:D5:C4:D9:4D:3F:7F:81:04:50:FD:E8:71:0D:35
            X509v3 Authority Key Identifier:
                keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:cf:b9:fb:81:9d:a2:1c:cd:ac:c0:72:89:fa:49:eb:7a:d2:
         ed:ce:c1:01:ac:b6:21:97:e0:77:19:86:b0:55:a0:9a:aa:c3:
         29:04:1b:a7:95:c5:e3:36:0a:af:2a:0d:9d:72:35:40:ba:32:
         4d:0e:a8:a2:97:ad:d8:76:4c:30:74:7a:7a:d7:48:7f:96:b1:
         ab:1d:47:f1:59:61:90:d6:58:49:78:62:14:85:76:b6:9b:32:
         0c:a9:0c:2c:b4:51:1a:01:5a:fd:86:9c:53:cf:e1:fb:14:ad:
         7b:58:06:95:c1:bb:8d:84:48:3d:31:57:e1:59:d8:5d:9f:4d:
         03:a4:4f:3b:e6:98:07:c2:e2:19:e3:8b:fe:e1:3a:00:b8:3b:
         11:01:3b:cc:c1:a0:d5:11:85:2d:3f:e6:75:c4:06:ab:61:25:
         ee:ed:33:79:9d:7c:e6:90:8c:40:c7:dc:0b:2b:76:b1:8c:d6:
         80:9d:1c:ee:bb:19:ae:bc:64:11:e5:72:70:74:b5:40:33:ee:
         df:dc:bf:31:9b:38:54:b4:24:9a:a4:7b:90:5d:fa:27:4b:e0:
         03:cc:44:8d:0e:e7:5f:ed:4c:b8:c1:e9:e1:bd:89:0f:df:f5:
         e6:6d:06:5b:d5:6f:ea:9c:9e:21:d8:d9:e2:a8:fb:84:6e:2c:
         cd:ed:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----