Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
File:                     RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft (raw, json)
Hash identifier:          uSxqbbKu4xqPSttBOpbuJVgtbBVW/qIoWSbCEFV0mms=
Subject key identifier:   8D:58:4B:5E:5D:72:1C:09:CE:E1:2D:A8:23:34:96:3E:74:02:DD:98
Authority key identifier: 46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
Certificate issuer:       /CN=467350d5975a272a88bfb8810af45981cd55935a
Certificate serial:       01962F3D742AAA9D78CBEA44746014857105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
Manifest number:          0DE5
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl (hash: 49jqAOHnex3TrcouDxkAkc7HR+/P3a7551BZsj8ufCM=)
                          2: cM594o8l7Xh7Dw0EOXhcxgvWLYI.roa (hash: 1Ym4804A2QtxpGJhVDPpEbLS0giUeOdd5FG8xMIV330=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:74:2a:aa:9d:78:cb:ea:44:74:60:14:85:71:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467350d5975a272a88bfb8810af45981cd55935a
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=8d584b5e5d721c09cee12da82334963e7402dd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:71:4a:99:50:a4:05:51:1b:c1:4a:fe:3f:46:
                    c9:db:38:39:7f:83:68:a2:36:23:83:09:ab:66:f3:
                    b2:80:03:0b:f8:8a:ca:9f:21:66:39:73:50:52:b0:
                    05:f5:9c:d7:58:2b:da:67:9e:70:22:2b:26:d2:5c:
                    0f:23:05:5d:05:62:ae:ca:30:29:73:72:88:82:9b:
                    86:c6:7e:d2:1c:62:9c:a7:2a:f0:55:08:f1:78:71:
                    1b:25:4d:b0:4c:63:2f:bf:85:12:95:63:0e:20:0a:
                    01:a2:e0:e9:f3:86:9e:6a:30:a3:42:e2:58:2f:94:
                    64:d8:f6:ed:09:d3:8d:13:20:49:97:aa:49:70:6b:
                    8c:3d:dc:7c:16:a0:3d:bf:61:01:c6:e2:d4:d0:de:
                    e6:d9:d4:11:10:bc:87:ba:c3:ec:ad:f7:f8:55:b9:
                    2d:f0:08:f4:d6:55:14:d4:96:25:d5:06:be:ed:73:
                    f1:50:84:24:79:b9:bc:d6:19:b1:e5:af:07:b2:d1:
                    1c:a0:56:8b:80:80:fe:ae:d3:6b:31:22:de:dc:8d:
                    f2:89:3e:0c:76:2f:5e:8b:d0:68:8f:4f:1b:30:cd:
                    49:49:82:7e:f9:4b:ce:ce:53:d6:4b:74:30:26:bd:
                    3c:64:40:a9:34:12:44:85:21:9c:b9:50:e8:d5:e8:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:58:4B:5E:5D:72:1C:09:CE:E1:2D:A8:23:34:96:3E:74:02:DD:98
            X509v3 Authority Key Identifier:
                keyid:46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:21:3e:ec:a2:aa:fe:ca:12:56:97:c4:21:a3:02:02:4e:35:
         73:83:f8:44:dd:26:d6:e9:1f:b8:a2:2f:1e:3a:f3:1d:6a:36:
         e2:d9:4a:c4:3f:88:9d:01:66:78:3c:e4:a9:36:be:bb:0b:a2:
         d0:96:ef:c9:6e:92:eb:1c:59:d9:a1:9e:11:54:20:a8:d1:47:
         70:3e:ea:0f:a6:e4:94:e1:ff:e3:00:20:bb:2b:d0:fe:d2:77:
         5c:7d:e4:ec:d5:96:c8:db:bc:ca:f9:c4:e9:14:f0:ef:7e:0a:
         60:26:fb:5f:c3:83:85:10:3d:9e:63:44:02:e6:80:42:a9:8a:
         d3:cf:58:57:64:43:1b:b8:76:5f:fe:57:dd:54:ae:d7:d5:b7:
         55:30:a6:c3:16:2c:36:df:d3:4a:84:c1:cb:ae:6c:a0:14:92:
         a2:50:59:77:9c:85:cd:ef:b7:95:49:a6:c8:b3:6c:55:6b:8b:
         ba:67:64:c5:3d:36:d5:07:ea:ab:4a:b0:3a:9a:53:e0:32:2f:
         4d:37:69:9c:ad:96:d6:94:35:52:ae:02:2d:ec:ef:65:ad:7a:
         63:94:ec:ed:e3:aa:5b:c8:70:d2:7c:3f:79:4d:17:53:9c:17:
         1d:ef:5d:40:76:fd:d8:ee:0a:e0:82:35:7e:8e:7a:f1:ca:73:
         38:19:89:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----