Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File:                     fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier:          D4mw2MvjSKsG8bnu7S8On/nhym3IBS6Fy/DzM38mnk0=
Subject key identifier:   85:17:9A:B0:40:8B:E1:E8:F5:68:78:15:DA:30:84:47:AE:61:56:54
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer:       /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial:       01962E618217707D733CB1CDC3D026529602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number:          0E93
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: 3L4Ds4lPDiLLOvZ8T2NW6fHNbRs.roa (hash: NwLfkOcBti2VO8eJgA/iflwdsDMiN5aPUXSbDozw53I=)
                          2: Gg8qXyeg-gil2NOkr3thvUZqwIE.roa (hash: pEcvppDB8KUs5+dwI7YABXPT/TWvmUqee92Iz6LzfZk=)
                          3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: /CQX2Ock1buVd7naO4P6BTrFDI2lbqCnI3TVVCz+7JQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:82:17:70:7d:73:3c:b1:cd:c3:d0:26:52:96:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=85179ab0408be1e8f5687815da308447ae615654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4c:37:9e:e7:39:7a:d2:4f:6e:e4:4d:ad:ea:
                    d4:d4:99:1d:c7:b8:68:e0:e1:60:07:28:59:c1:53:
                    14:fb:a6:3b:f5:35:2b:5f:a8:aa:4b:61:13:38:8a:
                    d6:28:9b:c4:19:55:ba:e1:c6:a4:e1:ba:ff:0d:30:
                    c5:78:87:4b:b1:63:d3:d9:94:b6:c4:76:94:5b:6e:
                    e2:31:49:76:51:3c:e5:a7:12:85:ea:e8:09:9d:14:
                    a3:dc:38:ee:96:bd:fe:bb:d8:5e:11:bc:09:ce:d3:
                    98:52:ab:39:d9:91:82:d4:4d:f6:5e:41:3a:09:e6:
                    76:57:f4:a5:95:71:9e:fb:a7:0b:15:1a:b9:c7:59:
                    cd:07:7a:86:0f:72:e5:96:8f:55:f5:77:53:74:48:
                    e3:19:81:19:70:7b:cd:ce:20:08:bd:e0:83:69:68:
                    95:4f:ea:62:19:59:b5:b4:b7:07:ab:98:00:0e:5a:
                    8a:8a:35:60:e3:f7:b2:3a:c4:75:3f:96:76:6f:52:
                    ac:98:99:49:a5:30:56:3e:6a:48:8b:01:9c:7c:9b:
                    14:55:91:f6:30:de:74:35:c6:2e:1d:a9:45:ca:a9:
                    47:bc:65:42:32:61:58:a6:fd:3a:66:54:4e:b2:96:
                    ff:f7:cf:a8:bd:0d:11:3a:0f:b3:94:b1:2d:26:cb:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:17:9A:B0:40:8B:E1:E8:F5:68:78:15:DA:30:84:47:AE:61:56:54
            X509v3 Authority Key Identifier:
                keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:46:ec:e8:ae:cb:20:da:4d:53:75:cf:84:d9:d4:6a:27:40:
         67:7d:a2:27:9c:d7:0a:9a:97:f0:08:20:1b:4e:28:d6:15:10:
         d5:3b:1b:35:23:25:bb:ce:d7:63:36:f8:3d:06:33:e6:00:5b:
         c9:84:10:c7:33:a7:40:cc:54:4b:9c:bd:9b:42:36:39:c9:44:
         ef:9a:2a:66:5a:0d:f4:d8:95:8a:90:d4:d1:7c:17:8a:74:0a:
         0c:bf:92:f4:a9:ee:90:bd:02:1d:07:39:ac:ee:2a:47:1c:f4:
         02:ca:d1:85:34:e4:49:25:1a:a9:cd:64:20:8c:0d:8d:79:b8:
         05:42:5b:c1:f0:44:8e:54:f9:1f:b2:6d:db:14:36:7a:10:a0:
         42:88:47:ea:54:3f:24:d3:e6:5d:4a:67:55:60:10:ff:26:7c:
         60:ad:62:30:f7:13:29:90:b4:dd:79:40:e2:4b:c6:88:de:5c:
         2d:c3:bf:56:bb:e7:35:77:7b:ee:04:ed:37:76:7e:15:b3:96:
         12:61:a2:20:1e:41:6e:22:52:5d:94:28:23:f4:68:36:8a:34:
         4b:49:05:4f:3b:21:a6:f6:ad:d1:9e:15:37:bd:3d:a3:de:d5:
         20:67:cf:ef:0d:18:30:ea:45:0c:f7:01:39:6a:f4:36:e2:36:
         c3:b9:3d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----