Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File:                     A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier:          HRYPO1ZycSa9Ml7czWyC6C+lFKJJyC90x17Hj4hBXcI=
Subject key identifier:   4D:B3:52:F8:66:3C:BC:19:7E:94:36:6E:21:C2:81:E9:FA:EE:0B:04
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer:       /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial:       01962E61B949C36312A71F42C796AFDC8F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number:          0554
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: 761oAlsqcDHxo18hZsjfeY/vUpIRjCCDlgTvwnBujtE=)
                          2: p0cL-vdhY3KSfcwz6s4koNapmbw.roa (hash: 9RImGj5UfNKUq/CzlTB6jfp8TR4Xc1sqYedIB3MDaIs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b9:49:c3:63:12:a7:1f:42:c7:96:af:dc:8f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=4db352f8663cbc197e94366e21c281e9faee0b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:a1:e2:0b:28:11:a2:cd:bf:5f:f7:e3:f2:
                    df:45:4e:8b:c0:32:72:e7:54:b7:1c:97:7f:4c:33:
                    a9:d0:a8:b3:75:a3:f9:05:79:2c:c3:e3:14:51:23:
                    94:d3:c8:29:6b:3b:e8:c0:b3:ab:02:c0:f5:3e:d8:
                    08:05:e0:4e:aa:78:98:a7:63:69:c5:e4:00:13:2d:
                    03:b0:b6:aa:8d:60:ca:64:0f:c7:aa:7f:5f:f4:4d:
                    3b:dc:a2:1f:57:d9:0a:8a:cf:53:a6:ae:18:f2:77:
                    ce:f4:9c:6c:6c:6d:28:10:39:b8:b4:96:25:8a:85:
                    fd:66:3d:f9:f3:9a:8a:2d:d5:8c:26:d3:c3:78:f2:
                    68:90:3b:53:30:ef:fd:c1:ad:f8:44:96:bb:79:0b:
                    cf:5f:b2:0b:05:73:18:07:ea:b6:63:5d:e6:12:d5:
                    b6:1a:66:3c:c4:c5:c5:55:1f:0b:78:83:9b:3b:63:
                    67:79:86:53:74:24:54:ad:67:a6:27:a9:12:7d:56:
                    ed:23:18:07:80:18:ad:c0:fc:19:73:32:ce:ed:54:
                    e8:47:03:a3:3b:c7:3b:01:3e:80:cd:d6:53:25:32:
                    f6:c7:5c:44:35:7d:00:0d:ee:4f:df:65:19:a0:86:
                    70:13:ed:fc:92:82:e7:82:f9:ad:1e:22:2e:4c:71:
                    c9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B3:52:F8:66:3C:BC:19:7E:94:36:6E:21:C2:81:E9:FA:EE:0B:04
            X509v3 Authority Key Identifier:
                keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8b:0a:34:e0:e7:5d:e0:a9:b5:cc:1a:c1:5e:12:58:a8:ea:
         c9:06:35:9d:34:3d:69:33:8f:e0:7e:ae:45:61:34:c8:9b:1c:
         0b:a0:16:17:86:d1:cb:0e:9f:79:3f:c5:f2:1f:51:bc:f6:0f:
         4d:1e:d8:b2:78:3c:11:3e:69:29:fa:09:8a:05:d2:38:3a:7b:
         ab:7e:14:c7:b0:0a:32:cd:e7:59:46:ae:de:d9:cd:e1:7d:78:
         48:f1:a3:82:22:34:8a:d8:71:b8:b4:7f:36:07:84:31:25:c6:
         dd:74:12:34:2f:d8:37:07:22:12:0f:99:d2:64:1d:38:76:e6:
         d0:f5:f6:56:45:86:c4:f0:1e:30:a8:f4:e9:60:2b:eb:af:f7:
         41:67:eb:5a:07:28:ab:5b:5a:92:25:43:af:c3:92:2b:18:78:
         67:49:e1:a0:d6:b1:c7:66:d7:79:93:f5:9d:53:ce:3d:f1:3b:
         b1:0b:85:c1:c1:51:d2:ae:9e:f3:4d:a1:7e:3a:3b:88:f9:22:
         18:05:be:b4:f0:74:57:dd:74:f9:8c:45:87:a7:b6:09:20:75:
         e9:19:78:af:00:90:30:4e:73:69:83:47:2d:e8:16:6d:fe:e9:
         2f:ad:c3:42:ff:45:8c:ad:19:f5:76:4e:95:b4:c8:89:d5:c4:
         d3:64:59:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----