Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
File:                     1AYg6l2vilSq6hfyy57N8114UwY.mft (raw, json)
Hash identifier:          KBkNgf+NHwhWgXJrq1IZUNHmjr/SCf6MqggYQoyH7sU=
Subject key identifier:   4C:6A:38:2E:13:96:34:79:1B:08:5D:D9:47:33:4E:12:75:BE:E3:57
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Certificate issuer:       /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial:       01962E61E0C2C215176FC6A73F053BF36E7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
Manifest number:          0FC2
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: 1AYg6l2vilSq6hfyy57N8114UwY.crl (hash: fiFiN5bGU/w6HvbrxgaoLTfxTzw3Q+QCZLR1GANYXC4=)
                          2: gGx-x2iRamyRfnlhx5me1YxCw6s.roa (hash: JLnMtxeLdoGYGRa/pvkNkIdX/aY0zlXxd7zsjwME0tw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e0:c2:c2:15:17:6f:c6:a7:3f:05:3b:f3:6e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=4c6a382e139634791b085dd947334e1275bee357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dd:38:ca:e7:d4:ca:98:35:3d:85:2b:0f:56:
                    65:35:2f:64:06:84:87:f6:ed:d7:48:ca:4f:7f:81:
                    27:8c:11:e1:80:2b:46:8e:2b:ff:af:a6:06:9b:df:
                    6f:48:c3:58:b1:cd:e8:0f:85:43:7d:f5:10:ac:67:
                    73:af:52:26:c9:bd:03:19:7c:5d:0e:7c:86:81:06:
                    77:8d:8d:40:9b:f3:88:24:d6:c7:65:67:fb:d1:72:
                    9c:0d:44:45:90:ce:75:a6:ed:33:55:55:c8:02:5f:
                    0a:d6:99:dd:46:e2:1f:60:37:ad:4c:8a:e6:a6:3e:
                    2c:30:7f:7a:ad:a7:07:bd:97:bc:a9:b2:7a:93:80:
                    30:f5:d2:b7:6e:24:b0:52:5f:f6:a8:79:d7:a0:00:
                    6d:85:de:41:11:5e:4e:34:29:54:39:f0:c1:47:b5:
                    07:15:e8:61:07:d5:0f:c6:df:98:ce:47:b6:ae:a2:
                    34:ce:79:f3:6e:bc:b7:94:0a:57:ed:e6:b6:57:1a:
                    6b:92:8f:ef:17:0e:6f:79:6c:1e:e5:f4:7a:c8:d0:
                    3f:40:31:5e:c9:e0:e3:60:62:a9:a9:40:87:a5:f2:
                    61:ba:8d:53:74:b8:00:f3:27:8c:d4:35:cd:9c:c4:
                    6d:64:27:e1:ba:34:f2:18:4e:c6:5a:7a:f1:b3:5c:
                    c2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6A:38:2E:13:96:34:79:1B:08:5D:D9:47:33:4E:12:75:BE:E3:57
            X509v3 Authority Key Identifier:
                keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:8b:06:bc:dc:19:2a:ed:19:b5:04:92:c7:1c:8a:02:6e:3e:
         de:1c:e2:ad:a4:6a:a9:f8:2d:99:89:20:47:c3:0b:af:f9:ed:
         1d:d5:be:68:b2:ee:9b:5f:1b:f2:20:c3:c0:08:49:43:cb:57:
         1b:21:4f:12:c0:a6:e1:4b:ee:03:7e:d3:32:3e:dd:20:11:3c:
         d9:17:ce:09:0f:ff:3a:0f:01:69:8b:97:91:2a:6a:12:3a:fb:
         ba:f7:28:dd:e5:e6:6f:1f:eb:64:2c:01:2d:83:f9:17:63:5d:
         ff:10:5d:62:f5:35:c3:3c:5e:fc:81:af:cb:06:d1:9a:3a:09:
         52:ba:cf:1d:68:ef:34:da:d7:c5:62:3d:1b:ad:bb:1f:6b:eb:
         61:f9:b6:40:48:43:74:42:32:21:52:c1:58:8f:d9:23:40:56:
         09:ba:b1:ad:5b:7a:c5:5f:ac:db:17:22:0a:42:4e:52:0c:5f:
         5d:05:99:5c:d0:3c:9c:0f:c1:95:96:eb:29:13:9d:66:41:8f:
         69:b4:69:f0:28:81:8f:59:f8:4c:97:1a:48:eb:42:fc:e7:c1:
         59:22:94:e4:1f:0d:be:50:9d:8d:ba:23:22:ac:6f:46:11:c0:
         d2:20:6d:35:f6:14:df:ec:25:81:55:90:fe:bb:de:65:eb:f7:
         5e:49:ae:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----