Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
File:                     RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft (raw, json)
Hash identifier:          OCxmzAGE8Lg4Gltvbv6MTXHVZ7e2TRwdjUhY1TlEwUA=
Subject key identifier:   F4:F9:1D:F6:87:55:0E:2B:85:4A:2D:21:F9:24:4B:05:93:92:CA:65
Authority key identifier: 47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
Certificate issuer:       /CN=470bc021b657a594ee58d9d36d8d91831d085174
Certificate serial:       01962F749EBD1FAB7A90F87E011D5DC9E07A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
Manifest number:          08F7
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl (hash: fywf58GyLro2NSMy1Xck5fcpS4ljk9NxAMcpflxRN44=)
                          2: k6bkvh9iuXhGi6Ifo-aZZ61eWcY.roa (hash: yZJ6vuAHa/37ymvkns64WkhZR926EDrpu1i04hE/yKg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9e:bd:1f:ab:7a:90:f8:7e:01:1d:5d:c9:e0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470bc021b657a594ee58d9d36d8d91831d085174
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=f4f91df687550e2b854a2d21f9244b059392ca65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:ba:49:40:5f:42:cd:b9:e5:7e:b5:31:9c:
                    18:dd:7c:db:f7:36:da:6d:91:c4:55:98:09:58:cc:
                    db:6d:eb:d3:61:71:3a:23:b5:8d:e5:67:79:90:65:
                    f6:73:e4:a5:eb:7d:a2:72:bf:9f:e5:66:5f:4d:d0:
                    f3:d3:ee:69:b3:81:1d:20:0d:46:43:a0:80:c5:16:
                    f7:cb:3d:13:ff:55:d4:36:f1:24:32:c6:8c:24:49:
                    34:53:8e:c0:06:8f:0b:20:66:d6:54:31:1c:95:fa:
                    77:39:a0:35:2b:f7:5e:81:b4:03:f7:a2:38:7f:9d:
                    9d:42:42:ee:03:62:98:e9:f8:3e:a0:3c:f2:44:94:
                    eb:b6:a7:91:9b:32:e2:85:cd:c9:0e:a6:2e:82:1f:
                    42:f4:d9:95:30:25:16:27:c4:f2:ca:d1:6d:56:d1:
                    ac:53:0b:b0:3b:03:5e:23:62:c5:fb:a3:38:83:51:
                    e8:f3:e7:c8:ed:d1:4d:2d:83:45:db:3f:1d:ca:ca:
                    fc:0b:fd:c5:e2:18:09:0c:8a:a3:9e:0a:af:d4:24:
                    f7:24:33:a4:8f:e1:08:8e:1a:62:7d:31:31:7e:a7:
                    5d:b2:6e:ae:a3:87:57:09:33:33:29:1d:4e:60:57:
                    81:eb:64:26:0e:ee:22:99:a5:ce:87:d2:51:8c:ce:
                    cd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F9:1D:F6:87:55:0E:2B:85:4A:2D:21:F9:24:4B:05:93:92:CA:65
            X509v3 Authority Key Identifier:
                keyid:47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0a:c5:b0:da:b6:35:ee:19:f2:82:8e:21:78:38:28:39:dc:
         cd:35:3a:c7:6f:a0:cb:73:dd:3f:5c:4b:57:0c:bd:3b:57:13:
         e7:de:ac:f1:fd:4c:4e:e2:61:1a:6f:80:62:e9:2e:37:c3:6f:
         c8:cb:90:7e:2d:56:e7:26:68:c0:c4:7d:4e:8f:3b:5c:b2:f5:
         bc:61:e6:0a:15:46:38:31:2c:b3:9e:ab:d6:b8:8b:28:0f:5c:
         de:0c:0a:9f:fd:c5:5d:78:ad:13:a7:b6:2d:5f:7c:bd:e8:0f:
         24:85:cd:bc:fd:43:0e:97:9a:18:22:45:4e:e1:9b:fb:80:6a:
         6d:48:ea:1f:91:c4:55:a2:51:8a:c3:60:2e:31:80:09:00:b4:
         c2:c2:a2:46:c1:74:79:f3:cc:2c:ec:0e:da:09:90:c2:8b:05:
         ab:ff:4d:b8:ff:c1:43:92:0f:5d:68:ac:88:82:34:9a:87:20:
         5b:db:c0:aa:2a:e3:3e:bd:67:66:84:2d:b8:23:94:41:72:8b:
         ec:00:c6:ad:6c:41:8e:2c:be:a7:79:66:9b:a0:42:26:fb:d0:
         96:d5:dc:62:5d:67:2f:4c:8f:9a:82:cb:33:44:99:71:e5:92:
         c6:4c:5c:5c:dd:1f:6c:aa:72:2f:00:a2:f0:b9:bb:89:8e:b2:
         b9:40:f3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----