Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
File:                     LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json)
Hash identifier:          26oPba/6F4WqTcEoTxDKRgXPxcsuMwLT6wmBOKbKaP4=
Subject key identifier:   DC:23:46:11:51:8B:5C:D3:58:AE:75:C7:36:2A:11:FD:7B:99:AD:0F
Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
Certificate issuer:       /CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Certificate serial:       01962F072290952D68B20D18F9528D417715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
Manifest number:          01F3
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: IP4ujJVqk5UohCLCA6tGHFm6tpQ.roa (hash: u2FH+am0hxvosviHA7cG2t5BKioAL7DxGSIWvLxxQUo=)
                          2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: mp5Hp5LUHSpOPcbouC4j1l3NNpzNkXweNwhXMF2TTCU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:22:90:95:2d:68:b2:0d:18:f9:52:8d:41:77:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=dc234611518b5cd358ae75c7362a11fd7b99ad0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:60:73:50:e4:82:08:85:a8:66:da:d6:14:90:
                    e0:93:54:c3:b6:7b:1d:c3:9f:8c:38:43:9a:1f:b5:
                    39:a6:16:40:4f:64:cb:4e:52:5b:ec:1c:16:2c:cd:
                    44:9c:d2:10:74:27:7d:4c:a2:91:fd:5e:af:4a:4b:
                    43:2d:eb:fa:d0:09:99:bd:ad:f6:3d:dd:01:a5:e6:
                    1e:9c:72:0f:37:31:b1:ab:5c:e4:86:3b:a5:b5:24:
                    59:cf:c9:b6:83:04:32:3e:73:66:d9:78:36:0e:58:
                    8e:be:3a:a9:47:4a:63:74:85:42:41:06:43:79:55:
                    85:3a:f9:24:d6:cb:49:0c:bc:ec:19:f6:1e:24:93:
                    6e:57:56:ca:f3:40:b0:b7:9e:59:dc:07:d2:21:95:
                    cb:c1:c0:44:66:ca:f6:e4:5e:c2:f1:52:d4:b9:00:
                    9f:5a:bd:98:15:af:cf:a0:54:8a:fc:cb:ac:94:91:
                    3f:8d:7c:ab:7c:54:23:2a:d9:4e:c6:23:27:3b:36:
                    fc:25:1d:13:36:4a:0f:5e:20:13:1b:da:4f:0a:9c:
                    f1:0d:e1:98:23:e1:20:db:6a:ea:8f:21:d2:c2:1e:
                    3f:05:fa:67:92:e6:bd:40:7e:6c:b7:2e:5f:c1:76:
                    ae:c3:0f:01:d9:66:27:55:d4:d2:b2:f1:e3:b1:53:
                    aa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:23:46:11:51:8B:5C:D3:58:AE:75:C7:36:2A:11:FD:7B:99:AD:0F
            X509v3 Authority Key Identifier:
                keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:85:c2:d8:01:14:60:c7:a4:66:9e:35:c0:7f:a3:61:9a:cb:
         9b:50:bd:9b:da:03:9d:e7:c9:83:60:a4:5d:83:35:1c:7d:b1:
         e3:77:bf:f1:85:2b:bf:ff:65:50:92:6e:2b:3a:a0:e8:c6:bd:
         ed:23:55:95:29:f0:19:5b:f0:6f:6a:14:2f:ea:a4:b2:ef:dc:
         77:83:87:f7:86:0a:25:28:eb:9c:1d:ca:de:f3:10:fd:2a:b4:
         f8:8a:33:09:04:19:90:d9:05:b1:51:55:8f:67:c3:24:29:08:
         8b:87:38:84:6b:cf:bb:a1:cb:bc:b5:5d:96:32:55:56:d1:d8:
         73:3f:29:b8:a5:d8:16:34:64:96:59:47:33:e2:8b:9b:a6:41:
         76:9a:de:c1:4d:3a:6d:e3:96:a6:42:38:6d:89:4c:f7:ff:6e:
         e2:ab:ef:6d:e4:2e:3f:85:7b:81:2e:44:f6:e8:0f:d7:3d:2f:
         21:51:95:79:64:ac:05:e6:ff:70:0c:da:37:21:e5:34:95:bd:
         cb:0c:c7:57:65:e1:df:57:e6:7b:4e:8d:e3:15:77:75:44:48:
         e1:7e:65:03:da:3c:31:71:b5:88:a4:e0:fd:9c:50:78:f5:38:
         05:76:57:ed:6e:aa:35:63:fe:90:da:8a:65:24:47:d8:72:96:
         48:5d:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----