Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File:                     syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier:          iOoAzHtbVpMrgKS9RGb3WnfFwNC0XFeI7yePCEk+iWc=
Subject key identifier:   4C:79:FE:82:63:7F:14:95:D0:3C:39:4A:EE:80:92:4E:25:01:CF:E1
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer:       /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial:       01962ECFD4CE5B8B5042CCAE2E3A5A5314FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number:          102A
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: 7Vf5R0kVboHfQe1HmwZydUmPy3w.roa (hash: CSR8lVlOICslmIH5THMhkf2ZR8pm8M7MZ0mWBD2ElFE=)
                          2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: 6VyMKkN+9lKenFBaZiBRKLM/nkXM/AnmRXXc2b3P4d0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d4:ce:5b:8b:50:42:cc:ae:2e:3a:5a:53:14:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=4c79fe82637f1495d03c394aee80924e2501cfe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:56:c7:bf:d9:24:0d:02:82:21:e6:44:75:
                    8c:ab:f2:b4:ea:ca:95:18:90:05:3b:30:e7:a3:22:
                    8e:e7:04:b0:a1:99:6f:41:a3:57:bb:2a:fe:39:38:
                    77:11:7d:99:35:43:3a:df:fb:28:c2:8e:af:cd:01:
                    fd:c0:da:5f:32:2c:31:b5:6a:2c:40:a6:dd:1d:b2:
                    f6:f1:21:b1:c6:e1:4b:36:1f:10:a2:a3:92:d3:98:
                    4c:99:df:bc:9e:f6:3d:ff:96:1d:a3:da:49:ce:66:
                    56:b4:90:41:80:64:87:d2:1e:e1:07:dc:20:c5:85:
                    ac:b2:0c:08:4f:b2:8a:0f:fe:b6:34:68:57:9a:07:
                    55:96:33:ce:36:87:13:b4:7b:6a:d8:fc:7e:22:2f:
                    c8:be:cf:8a:32:0b:4c:b9:3f:bb:14:1d:56:f2:c8:
                    e9:fe:a9:02:8f:87:1c:20:0e:f2:73:34:6f:64:ee:
                    bc:82:2f:48:8b:7b:f8:91:f2:5c:66:52:e0:79:71:
                    b0:37:a6:5d:20:4a:e6:3e:fa:81:7f:ad:43:c1:3a:
                    9a:10:d9:f7:a3:8f:eb:c3:6e:6e:0a:c4:e2:7c:6e:
                    50:29:b0:00:5c:16:a8:9f:d6:b4:1e:1b:f1:6c:60:
                    5b:b7:f8:b4:83:51:98:48:32:2c:00:b3:6e:0b:02:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:79:FE:82:63:7F:14:95:D0:3C:39:4A:EE:80:92:4E:25:01:CF:E1
            X509v3 Authority Key Identifier:
                keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:a4:bd:4a:aa:42:2e:19:04:94:2f:3b:6f:61:a1:ce:31:b2:
         ed:e8:be:c6:26:15:32:22:64:54:14:14:87:a0:3b:1b:66:34:
         53:1d:98:96:c1:b8:c5:6b:f0:8b:87:c0:d1:d4:2d:0b:a1:52:
         7e:9a:80:8c:cc:30:71:16:30:2e:72:3a:12:6a:07:b6:4f:fb:
         8d:df:85:87:55:09:e1:07:53:98:77:ad:d8:2c:4b:33:ad:d9:
         53:ea:a6:0b:50:55:e0:5d:3e:7d:fe:ee:2a:0a:5f:2b:d4:ef:
         f6:ac:0a:eb:9f:86:ed:5c:b0:d9:58:21:c4:61:7b:29:b5:ef:
         0d:e9:4d:dc:fe:dd:14:ed:45:88:4b:86:6c:52:42:85:8d:ab:
         5b:48:45:ce:26:24:c6:3e:d1:89:e0:51:91:27:04:ea:06:49:
         1a:0c:3a:12:5d:b6:4c:4d:e2:d0:a0:f6:f3:f0:2e:a5:09:0b:
         8f:d3:1f:eb:1b:0a:d5:ba:df:3f:2d:83:85:24:6f:c0:8c:30:
         a2:f7:ad:61:5e:8b:86:d9:49:1f:d2:4c:df:ee:69:d9:b8:4d:
         16:af:aa:c1:de:81:ea:2e:d6:f3:0f:9e:62:76:5b:c6:11:7e:
         b6:44:82:7e:0f:d2:b2:a8:04:3a:62:af:63:9d:38:20:1d:db:
         6d:87:ac:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----