Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File:                     A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier:          0DSpAntej8/dkmE4GCR6EZhH8guwbZw66qss8F+rPEQ=
Subject key identifier:   D5:41:2E:73:EE:49:AA:A4:23:A0:F4:19:50:63:39:60:BE:1D:3E:26
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer:       /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial:       01962E999CACB6742FDE622D2ADABEA16A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number:          03B0
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: vrNjpjOGFGBqdh525piA5GOtFgLxCuaxMfgZ+GUdRO8=)
                          2: ihNwlKbuNiGlnJM8yFd2Nxrvaqo.roa (hash: auV56nH817P5x20E5reCmB5GZHUds7d7BudXxN/HlG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9c:ac:b6:74:2f:de:62:2d:2a:da:be:a1:6a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=d5412e73ee49aaa423a0f41950633960be1d3e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:85:ca:01:5e:38:41:d1:cc:14:63:c0:40:
                    30:98:9b:58:60:4d:5f:06:a1:40:ab:5c:26:5f:06:
                    55:bf:da:62:d5:41:21:39:e6:2f:d1:8a:30:22:38:
                    6f:bf:1f:03:41:b5:b7:5b:50:f8:b3:ca:d6:b7:f2:
                    23:3f:12:b7:58:51:15:5a:b5:6a:b2:08:69:42:7c:
                    af:48:db:e0:52:9f:90:45:7c:31:e3:2e:01:3e:72:
                    ec:9b:b8:65:7c:8c:0f:aa:dd:ee:6e:4c:6c:79:69:
                    2b:2d:31:c4:9f:31:60:6f:e3:ce:62:cf:cb:46:b3:
                    27:bd:c0:81:72:30:9a:95:14:8a:b4:22:8e:62:6d:
                    35:1b:6a:d8:89:f3:fe:f2:47:94:e5:24:d4:eb:fa:
                    02:d4:39:d0:b1:95:33:de:2f:08:b9:46:20:b0:f7:
                    0c:4d:3a:82:06:b6:fc:e8:72:8b:1c:99:13:c6:23:
                    45:e1:35:6a:b0:f2:2f:4d:f2:9f:97:58:93:3e:65:
                    39:74:ba:04:eb:6e:be:21:44:60:a7:ce:46:8e:64:
                    63:56:b7:95:f6:28:d6:5b:d7:bb:f1:40:a0:01:21:
                    41:58:b5:de:69:20:60:c3:65:6b:e2:63:04:1d:ad:
                    45:97:58:40:77:9b:f8:8b:5e:26:da:86:38:90:4f:
                    2b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:41:2E:73:EE:49:AA:A4:23:A0:F4:19:50:63:39:60:BE:1D:3E:26
            X509v3 Authority Key Identifier:
                keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:84:15:e0:fd:3d:b6:b7:ff:6f:eb:e2:84:87:3e:d6:fa:9e:
         88:0b:b3:c8:30:3a:b5:41:52:61:84:da:36:59:81:63:56:96:
         ea:fb:4b:09:a2:e5:fd:80:99:f7:80:44:6d:cd:5d:74:c0:1a:
         d2:30:ed:b1:b6:04:c2:47:04:b5:c5:cd:b8:d6:f6:bd:94:61:
         55:c0:2b:af:4c:84:fc:a5:3b:8d:e0:c7:4e:24:a6:49:e6:6d:
         9a:cf:3e:74:d4:bc:49:99:f8:db:5a:ab:92:38:b9:97:78:ff:
         d9:7c:8b:fd:2b:82:1b:f8:11:b5:bd:5f:2e:11:7f:0d:89:4b:
         fe:17:c0:44:95:95:78:cd:47:6d:e9:b4:46:d9:07:18:45:cb:
         9a:4b:63:76:34:bf:2c:41:36:f8:3e:ba:4a:e5:4a:28:09:21:
         77:b3:1a:00:0e:4a:de:9f:49:13:33:96:5d:ec:f8:5f:be:96:
         8a:e4:26:41:d5:3e:40:31:9e:97:92:b9:10:26:95:e1:57:81:
         94:71:f2:e9:01:73:1a:e2:26:d6:0a:23:c7:e2:75:e0:94:1e:
         59:65:b8:a4:53:5c:bb:6e:18:a7:19:0d:53:76:10:0e:b4:02:
         52:18:16:f3:9e:d4:e4:0d:0b:76:08:42:46:d6:33:b7:c2:8d:
         48:9a:f6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----