Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
File:                     pMK1k9mMCS_TCmAepdJEqr08sU0.mft (raw, json)
Hash identifier:          2SkPNJPOeMo0IezV0PkHgPXno2W/ERa+VajOfnaQgOU=
Subject key identifier:   38:9D:50:46:80:83:FB:DF:31:DB:A2:33:10:ED:B0:5A:75:5D:BE:0F
Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
Certificate issuer:       /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Certificate serial:       01962F3DD65F4090BAF76C9F64D6B13A8BDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: U7nNEW5XGU3Qw3Z5TlXa8n1A0Xo.roa (hash: El8KNdvpLmelwHnPspzpd+ZkXP2SnewzZSQOjMbCymQ=)
                          2: pMK1k9mMCS_TCmAepdJEqr08sU0.crl (hash: MB4e4uql1BukTyd3nY1pCTGvjamVD5A0DtnekqDn+bg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d6:5f:40:90:ba:f7:6c:9f:64:d6:b1:3a:8b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=389d50468083fbdf31dba23310edb05a755dbe0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:6c:a7:54:7a:bb:72:ca:1d:a4:80:5b:5c:
                    f5:c7:72:c4:c8:a6:90:6d:c3:38:e6:02:57:70:6a:
                    03:03:b8:94:68:24:4b:4b:c5:7a:fb:0b:bc:83:ea:
                    ed:ad:67:e9:0e:cf:25:66:f8:44:8f:90:7f:b3:e1:
                    71:ec:e9:5f:49:cc:94:8d:39:2b:c4:74:12:c6:4d:
                    5c:1a:b8:d4:9f:8a:c0:34:9c:86:ea:a1:21:28:65:
                    54:2e:d2:8f:04:88:2b:be:7d:e5:38:44:66:db:04:
                    63:4d:15:cd:c7:a1:05:3f:e1:ba:fd:45:c7:57:ea:
                    a9:54:bf:f4:d0:21:1b:29:a1:a4:5c:64:16:0a:1b:
                    2a:49:de:f9:f9:b7:1d:2c:41:33:d9:a1:e9:8b:d7:
                    af:c0:fe:de:91:64:ce:3f:d8:5e:ff:e8:4a:89:04:
                    47:01:d5:dc:e4:94:98:a0:e2:8d:fb:11:4f:30:61:
                    c0:e4:62:22:ce:e3:8f:f5:49:75:fe:bd:fe:d8:38:
                    08:f5:16:ac:28:c3:9c:2f:91:c9:27:d2:54:83:3d:
                    c4:b5:5a:40:14:1a:b3:ff:71:27:bb:7f:68:d8:92:
                    52:60:0d:93:eb:7d:60:cc:1e:30:3d:71:e8:2e:1a:
                    13:65:c0:a5:bf:b4:91:41:a2:fc:1e:03:dd:12:52:
                    3f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9D:50:46:80:83:FB:DF:31:DB:A2:33:10:ED:B0:5A:75:5D:BE:0F
            X509v3 Authority Key Identifier:
                keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e5:59:eb:95:a7:e8:9e:e6:c7:cd:9d:78:dd:cf:49:a2:f2:
         8d:97:b8:69:8c:f2:d0:f0:94:94:0c:47:fb:ee:bf:63:2f:b5:
         e7:84:83:0b:c1:40:c9:ce:87:eb:15:b8:de:c5:62:56:10:5c:
         d7:6e:43:68:2d:7f:c0:04:84:ef:79:09:dd:a3:2e:ca:c2:6f:
         c1:75:e5:f4:cf:e2:72:c5:86:74:2a:9b:c2:5b:eb:fe:9a:59:
         7d:6d:bd:49:7f:f4:4e:75:8b:4b:f5:69:bb:b9:26:bb:71:0e:
         52:29:1b:cf:29:54:4b:57:7d:b4:2f:7c:8d:59:7a:b7:3c:8e:
         47:ae:57:98:ef:57:48:50:39:18:37:3f:f8:8c:64:d5:f4:a8:
         93:28:6d:ee:53:df:c3:31:d4:82:78:87:99:8b:2a:09:0d:18:
         70:cd:42:4b:eb:75:cb:c8:6e:a3:38:72:01:c6:37:6e:2e:8c:
         3a:e8:37:b2:ce:ba:6b:ea:14:fa:bf:d9:e5:93:0b:0f:ca:12:
         00:fd:21:12:c6:1e:da:55:dd:5b:b7:0d:08:d8:72:cb:92:6d:
         d7:70:63:69:d0:1f:2d:da:02:39:97:40:80:1f:2e:34:66:3f:
         86:74:51:56:78:77:e4:a6:0e:bd:85:17:67:b4:ea:8a:a5:f2:
         5e:9f:dc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----