Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File:                     cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier:          HcNMLyKVa4Hw8Vn5q4JlAYcNgDvsYBxTBP4U5CVn0zI=
Subject key identifier:   13:01:52:C2:FD:FB:2D:05:38:E8:7B:D6:37:8E:60:44:14:42:27:54
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer:       /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial:       01962FAB220883369A6B89760207BB312E43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number:          0458
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: ykFibHOGOkadZQnvbsCHWL7dhU2fJlGDaUvOVHxyz0c=)
                          2: jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa (hash: 55uzcUC8JFxJT35uBCSfhKl+d0CAv18T7HkOsVb7EDM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:22:08:83:36:9a:6b:89:76:02:07:bb:31:2e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=130152c2fdfb2d0538e87bd6378e604414422754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:b6:b5:80:93:e3:5a:5e:c0:77:15:7e:2e:
                    dd:21:25:a9:e4:12:08:8a:a2:ff:03:83:0c:90:98:
                    c1:3c:61:83:f1:c8:07:ab:5d:01:28:4a:c6:75:68:
                    50:ce:90:cc:81:51:61:51:f3:ba:51:3b:34:87:1a:
                    1a:42:52:b1:50:e3:37:c7:88:37:1d:7d:69:90:97:
                    19:20:f3:7b:9a:b1:e6:1e:7b:a7:9a:79:77:8d:d5:
                    2a:6f:a5:eb:20:49:4a:6c:ba:e8:ef:e7:ac:b3:e1:
                    5d:36:85:85:ec:94:09:c8:86:d2:d3:a6:1a:e3:c5:
                    5f:d9:dd:a2:45:83:f5:1c:34:08:7d:83:9a:14:4e:
                    31:ea:a5:20:1d:2b:4d:95:ac:46:ff:85:f5:79:ee:
                    44:ca:50:4a:ec:c4:56:d5:8c:49:f0:d1:f0:34:b4:
                    ad:29:2d:af:48:12:98:32:ac:3c:77:d4:7d:11:cd:
                    cf:2c:82:4a:20:3f:2c:c6:11:6c:6e:f0:74:07:09:
                    54:d5:a2:c2:d6:3f:81:7d:74:55:f0:84:ce:b1:7f:
                    87:9b:f7:7e:5a:38:e8:2b:f2:2d:1e:4c:11:ae:f2:
                    56:2b:86:9e:bf:40:f8:52:f0:63:84:e0:c4:aa:e6:
                    f8:5e:93:ab:58:33:8e:b8:bd:07:01:b1:12:12:1a:
                    9e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:01:52:C2:FD:FB:2D:05:38:E8:7B:D6:37:8E:60:44:14:42:27:54
            X509v3 Authority Key Identifier:
                keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:18:f9:1e:13:5d:f0:5b:63:0b:55:91:f1:f7:75:37:f6:72:
         e6:0f:be:3a:12:ce:03:90:2e:67:19:62:43:bb:c8:31:c5:68:
         c7:27:e8:0d:1f:f7:72:a1:c0:c2:08:e5:4d:66:43:bb:0a:f1:
         61:b7:6e:92:20:64:bb:ea:7c:87:df:c7:ed:1f:b0:30:87:56:
         de:a6:d8:4c:3d:7a:e9:80:68:e3:5f:ed:9a:b5:af:99:02:83:
         08:33:54:77:b5:46:c9:47:a3:7f:52:c6:a9:ab:5f:10:dc:11:
         17:a3:06:d0:f0:61:ba:31:14:36:94:18:8d:0d:21:76:d5:a8:
         d8:d0:18:3f:23:c3:47:8d:c9:07:5c:fd:8f:35:82:fc:c0:46:
         1d:eb:60:0d:e6:98:f9:66:b0:22:6a:f7:a6:71:4e:d4:b5:a8:
         75:3b:49:14:8d:ee:c1:9f:2a:8e:c8:b8:42:cb:1b:42:91:b8:
         75:65:e0:3a:18:83:b9:2c:53:aa:da:d4:dd:ba:64:8e:19:81:
         a6:e9:3b:7d:75:1e:27:63:54:a0:bd:c0:8f:47:b9:cf:3b:11:
         52:d6:a6:11:c1:05:72:2a:1a:ed:8c:b0:c9:8c:ef:59:ec:2d:
         7a:e7:36:21:30:91:e0:3c:17:e9:2a:3d:a7:4c:34:aa:ca:3e:
         e4:61:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----