Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File:                     05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier:          8TqdDZ4dao5rbYPZYS+PUQKFEc2QO+vScVaS/YWHAOk=
Subject key identifier:   99:EB:FD:CB:B6:2C:58:5A:6A:A0:1D:EA:F9:77:06:25:7A:A3:86:DA
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer:       /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial:       01962F070BDD5889D1C1063F7A9591D7F329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number:          05D3
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: 0ymuzvMMgruzz+gPfJuyTkCqGf7rVKXlAqKiYJ43oUQ=)
                          2: 1-HePaXJiClEhHOw237Wa73vaFTc.roa (hash: 4PUKfjaEAzPB9R2XBWxJhNfJbqqZiV/WF7YuGVgHgMI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0b:dd:58:89:d1:c1:06:3f:7a:95:91:d7:f3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=99ebfdcbb62c585a6aa01deaf97706257aa386da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:24:00:36:6b:a4:58:fc:21:d5:77:96:66:
                    a3:df:ca:e3:68:92:43:5d:8c:a6:fa:e9:f7:5d:63:
                    50:2d:0f:b0:a6:4c:98:c0:85:ab:dc:bf:1a:3f:b8:
                    9e:e8:ec:5e:19:53:fd:27:81:b6:a9:1d:c9:c0:53:
                    09:0c:b0:2e:ef:21:7a:7d:67:d3:f5:a6:b1:c3:f1:
                    df:b4:80:8a:6a:ed:a8:6b:6c:1f:35:0d:5b:83:41:
                    d5:41:c7:b5:88:ea:ee:a3:04:30:59:d3:5b:e3:7b:
                    7f:08:dc:33:87:42:f9:c3:52:c9:39:67:c0:b0:32:
                    bd:51:32:0f:38:0c:21:4b:71:f6:73:0f:b5:57:d7:
                    5f:d3:c4:90:a1:ac:24:82:c3:10:a2:6a:64:8a:2e:
                    d6:28:20:56:17:c2:ce:2b:aa:dd:c4:a5:69:00:d3:
                    f7:42:e1:e4:62:8e:13:fa:0c:49:18:e6:61:e9:e5:
                    1e:6f:a5:91:2b:c9:a4:f6:d6:87:7f:5e:38:3e:59:
                    0a:e8:45:9d:78:80:30:c6:8b:52:0f:91:12:38:12:
                    7a:8e:ee:8a:a5:c6:39:da:0c:27:d2:df:d5:48:31:
                    9f:07:c6:58:b2:26:e4:90:c1:93:7a:5d:f9:a3:55:
                    01:4d:8c:07:ea:6f:c8:fe:64:26:11:ce:70:c4:a4:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EB:FD:CB:B6:2C:58:5A:6A:A0:1D:EA:F9:77:06:25:7A:A3:86:DA
            X509v3 Authority Key Identifier:
                keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:4f:ab:1f:8b:d2:1b:f7:cc:55:97:30:69:72:57:26:00:e8:
         57:15:fa:79:5d:aa:50:d4:20:b8:de:f1:0b:5f:b0:3f:c1:24:
         35:9f:d2:06:53:5a:a0:13:4c:fd:20:4f:fe:37:7d:3c:b9:67:
         fe:ca:cb:e1:a8:df:73:57:fe:98:09:a5:24:5b:07:2f:30:01:
         dc:09:03:64:3f:28:07:de:37:1d:b8:c7:16:19:0d:64:3c:29:
         e8:ac:00:85:9b:ac:79:6a:9f:2b:82:1e:ef:a7:46:81:c6:a1:
         75:33:98:17:2e:d0:b9:bb:96:de:3f:8e:72:51:14:e7:7e:db:
         6a:b9:bf:38:6d:ad:6c:ad:cf:31:a9:ae:c9:b0:cc:72:f7:18:
         b4:5e:97:90:db:59:53:a9:af:ae:be:25:ac:69:d0:00:0b:ba:
         be:f0:77:6a:03:d9:ff:bf:76:b3:f7:e9:de:d6:10:7f:73:f7:
         e5:c4:f0:cc:81:48:ba:c8:08:d2:38:d0:8f:b8:75:3c:d0:9f:
         d0:50:32:0a:ce:d7:44:74:18:42:f6:cc:4e:07:ef:f5:a5:b9:
         08:ff:50:ce:8b:1f:81:51:bc:1d:41:10:89:d2:82:eb:8a:61:
         30:e5:8e:6a:f9:53:64:3a:5e:99:ce:3a:d6:5d:f1:f3:2d:bd:
         ad:23:0f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----