Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
File:                     ijSno_66-8hACr4dwS8ixsHopb4.mft (raw, json)
Hash identifier:          MVxcVprjHxTJKKHWgWxn2TFZKHLepJBLQVWvVWJO9Tw=
Subject key identifier:   7E:B0:8B:12:BD:6F:09:76:34:77:5D:DF:9F:DE:D8:A2:D7:E7:37:90
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Certificate issuer:       /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial:       01962E9916E73071820DE5B3A471BB66934E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
Manifest number:          055C
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: ijSno_66-8hACr4dwS8ixsHopb4.crl (hash: U53HTwSBPIbVyLlXlBlPWkGBAVw0bMV6SSE2Y82lMXU=)
                          2: yGEgCYl8bZ9Zznwa_NCt-fjvfH0.roa (hash: tqsjDiQKQV8NCrndn0YK64CRZXV/LsyL/cUUrtUlQAs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:16:e7:30:71:82:0d:e5:b3:a4:71:bb:66:93:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=7eb08b12bd6f097634775ddf9fded8a2d7e73790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:b5:8b:1f:6c:49:97:75:a6:de:d4:a6:dd:
                    4f:43:32:8f:1c:df:ef:d9:fe:f8:c9:e3:80:68:27:
                    4f:81:96:cc:84:18:4b:fc:d4:e9:f6:df:69:3b:f3:
                    b1:43:2d:8b:bf:ca:4a:5d:02:f5:b0:9e:be:16:ee:
                    99:e4:3d:bd:94:2e:42:8f:b7:fb:14:d2:dc:d1:0d:
                    d8:0f:2b:95:ea:d8:7c:1b:ff:62:c6:8f:2a:ab:8c:
                    c4:a5:97:d5:e7:af:0d:e1:a4:81:26:e5:cb:b0:84:
                    8e:a4:d3:92:e7:0b:96:78:05:14:60:e3:59:2a:19:
                    ee:b5:26:c6:e1:47:12:a0:77:68:40:07:dd:78:21:
                    c4:06:bf:d5:91:2e:6c:eb:48:4b:60:40:9f:77:02:
                    51:67:b8:1b:be:18:8f:a2:43:9f:52:e7:b6:a1:44:
                    53:e2:d6:6b:df:92:e4:1d:b7:30:37:b0:34:5b:09:
                    a9:56:8b:31:57:78:aa:87:d0:02:bf:d2:22:e5:d3:
                    cd:78:da:36:93:c1:3d:28:e6:46:85:4d:60:07:78:
                    37:09:18:b8:c9:68:b6:bf:52:66:41:55:9d:23:f0:
                    7c:c0:cc:b5:d3:89:48:ab:db:30:ef:3c:07:5e:b8:
                    13:db:56:07:28:e7:7b:69:99:96:7e:66:b4:4b:2b:
                    51:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B0:8B:12:BD:6F:09:76:34:77:5D:DF:9F:DE:D8:A2:D7:E7:37:90
            X509v3 Authority Key Identifier:
                keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:df:19:c5:67:9d:1f:46:c4:57:19:51:e2:22:7c:3a:22:e0:
         31:58:82:77:d1:b7:e1:12:62:ad:f1:e1:91:65:eb:aa:12:f9:
         3c:72:ab:94:56:1b:ce:11:20:ff:e2:b0:21:f1:d8:41:5d:cf:
         dd:44:26:22:4b:35:b7:cb:bb:96:2b:c7:21:a6:6d:8b:65:49:
         9e:ce:df:f1:72:b0:1b:01:68:3b:e8:1b:dd:5f:be:28:e8:f7:
         f9:89:a5:e9:ee:a6:56:bb:2b:3b:a9:d1:7b:7b:99:2f:df:94:
         40:d1:ad:aa:ac:1f:a3:7e:26:94:b9:1c:3f:c0:3c:a1:0b:f5:
         43:2c:32:9e:2b:c1:f8:cf:82:7e:d7:0a:5d:13:06:df:3e:b6:
         2f:d8:5e:ce:95:36:4b:d1:ac:1e:f6:e8:27:af:b6:75:cb:12:
         96:c0:63:e3:0b:3e:f6:34:35:fb:a0:e1:e3:56:53:a3:12:aa:
         32:62:43:55:48:d7:97:57:46:f9:2f:11:ff:f3:58:f3:67:09:
         94:99:35:c8:84:e8:20:0e:12:29:b0:87:b7:c8:56:48:13:0f:
         c8:07:60:3c:78:d8:7f:74:93:6c:0d:41:fb:71:60:7f:90:1c:
         dd:ed:94:3c:f2:6e:c8:3e:d3:fd:2a:8d:c6:38:22:dc:48:c0:
         15:78:ab:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----