Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File:                     A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier:          VHE8IFLjNYrkdl5n0Uals/JixACMrMGnXNNtXn97Cn0=
Subject key identifier:   F3:A9:6A:67:A8:3E:92:BE:63:E1:BC:C1:E2:B7:4D:9D:EA:59:FE:CF
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer:       /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial:       01962E988BAB696EE896039BD5F54C58F76D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number:          05C8
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: 4pnay7W25K0AeesnBqp7D/Y88b3nZNjiCs3HllZWFgU=)
                          2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8b:ab:69:6e:e8:96:03:9b:d5:f5:4c:58:f7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=f3a96a67a83e92be63e1bcc1e2b74d9dea59fecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:ba:ce:02:d1:60:30:79:ae:58:71:47:a6:
                    aa:81:95:57:26:35:0f:3c:e9:e5:93:08:16:7d:83:
                    34:34:49:f9:31:ad:a7:e2:51:ec:f7:8f:6d:89:30:
                    3f:7a:3f:ba:83:d5:d4:65:77:98:b5:2f:d7:9a:cd:
                    3d:ca:8c:74:00:17:5b:f7:6a:dc:22:d1:c7:10:06:
                    21:fe:05:c6:30:a3:7e:b3:42:44:09:ea:b6:11:e9:
                    94:64:fe:0b:d2:c1:7a:7a:c5:45:87:a6:b6:88:07:
                    ed:31:3e:bd:ab:73:8b:ab:1a:78:34:ec:09:5a:1d:
                    30:b0:f2:27:15:ab:7c:66:1a:ae:91:0d:63:bd:9e:
                    3e:39:55:de:e3:c0:c3:d3:75:0d:a0:6a:9a:ee:ec:
                    de:43:fc:48:3d:eb:5a:ae:0c:34:88:25:0b:3a:09:
                    5e:98:db:40:2f:b2:3a:c0:dd:da:94:47:f6:6e:21:
                    d9:e8:42:70:ec:79:aa:88:7a:88:96:da:c5:c6:5d:
                    57:45:8f:71:52:f8:e1:fb:97:e1:73:02:ca:18:25:
                    b8:d5:c2:a0:4e:00:f3:38:84:dc:23:04:6e:d7:b6:
                    37:9c:02:be:1f:e1:ce:05:8f:9d:c7:12:55:2f:84:
                    20:f2:d5:15:44:12:35:9d:81:91:af:8d:27:bb:f7:
                    81:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A9:6A:67:A8:3E:92:BE:63:E1:BC:C1:E2:B7:4D:9D:EA:59:FE:CF
            X509v3 Authority Key Identifier:
                keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:57:d7:d9:15:89:c2:37:12:70:8d:08:41:54:47:48:05:e2:
         12:85:6d:0f:79:f9:4a:6a:49:6b:fa:05:61:ee:86:5d:2e:c6:
         0d:68:01:db:4f:62:de:e5:3b:37:21:c1:07:34:ed:94:9c:6d:
         dd:61:cf:79:8a:b0:e0:0a:c6:ca:f3:e4:2b:93:64:d9:84:87:
         d3:41:e2:43:68:f3:ee:76:6d:1d:c6:02:bc:f4:f4:67:b9:f8:
         4b:d8:ad:35:4f:7f:03:be:ea:0b:5a:7a:2e:28:6b:14:7e:cc:
         25:36:43:0b:98:28:cb:f1:aa:96:9c:ca:1a:d3:23:2e:62:3f:
         e7:60:c9:31:cd:0d:42:31:14:a2:ad:f4:71:11:d2:5f:66:f8:
         65:df:ba:96:3e:d7:0f:b2:3c:69:21:5c:32:5b:ac:99:67:57:
         96:36:29:d2:60:40:f1:db:6e:24:72:88:66:f1:29:74:45:92:
         f5:87:b3:a5:b9:a9:4b:66:7d:ea:2a:e8:94:2e:16:d5:85:ac:
         12:25:01:dc:93:bd:9f:f6:35:ca:49:a8:3c:f3:4e:d3:3b:8c:
         e3:4b:f3:d5:ea:1c:b5:85:9f:56:d0:dd:fc:87:77:88:8a:68:
         0f:9f:38:3c:ac:2b:b7:99:2f:48:b5:a8:50:b2:9d:6f:de:8d:
         bf:ba:eb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----