Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File:                     AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier:          +Y4VUAw+3Crrgc5GekM+HrKrG1XwqaAyXq4sfQRe93s=
Subject key identifier:   DA:DA:27:05:E4:2F:81:E9:7C:FD:76:C3:10:BB:54:DD:1A:27:BB:AD
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer:       /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial:       01962E2B043A4B07C078100367B7F4D0E232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number:          11B7
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: K4m1VuxwtbGC/hY923gz4pKX/hwi2YcJwmYTRkQCfBo=)
                          2: hqWXJdixoyBrN6tefJIPGEJ4XNw.roa (hash: jM1EQVCCuIqaZA8YHmIHlFvXnaAVW3MrjR0+9kCFwLU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:04:3a:4b:07:c0:78:10:03:67:b7:f4:d0:e2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=dada2705e42f81e97cfd76c310bb54dd1a27bbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b4:1f:83:42:54:b6:4c:8f:0e:7b:9d:d6:ac:
                    67:2b:d8:2a:b1:80:bd:ac:f2:e2:77:1c:3c:5c:ce:
                    5e:90:1f:15:cb:f1:0f:03:2d:db:3b:84:78:6f:60:
                    94:dd:dc:9f:e0:1f:03:04:8d:52:60:f8:ad:25:f0:
                    d9:70:a7:23:b6:c6:df:6c:f0:c4:ee:da:8e:c1:1f:
                    01:c4:28:7e:fd:50:f0:2c:63:6a:bd:47:86:77:5e:
                    2c:3e:4e:88:b6:ef:c0:15:60:f5:fb:4b:11:d4:a7:
                    ec:bc:46:95:a8:dc:ef:ac:12:fe:97:38:b9:d9:b5:
                    e4:79:b6:83:d0:b9:db:c4:35:bd:98:f4:f0:1b:d2:
                    a6:db:03:5e:b7:90:05:41:65:5a:fb:94:83:e7:78:
                    31:f0:15:b8:17:0b:0c:db:5a:72:b6:e6:a8:0c:a1:
                    ce:11:d5:a1:a0:f4:8b:ae:7b:a3:01:a8:e3:25:08:
                    69:01:d8:36:0f:84:41:c4:2d:cb:dc:6a:98:d4:04:
                    b0:7f:39:9e:c8:d5:d1:92:9d:bb:00:f4:84:05:3f:
                    84:23:77:a4:b1:fe:53:26:85:1e:7e:0f:f1:03:cf:
                    bf:10:50:77:aa:a8:e0:64:da:45:32:f6:cc:80:17:
                    c5:81:61:e9:90:81:3b:e1:05:78:c9:d4:ac:d8:c2:
                    d6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DA:27:05:E4:2F:81:E9:7C:FD:76:C3:10:BB:54:DD:1A:27:BB:AD
            X509v3 Authority Key Identifier:
                keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:53:9f:3a:32:bf:5f:06:1f:d5:2b:dc:3b:ab:63:04:53:34:
         26:b4:b4:63:5e:74:53:48:36:f2:b5:99:0d:ac:9b:97:f8:8c:
         e1:e7:d7:ad:40:87:3a:3e:37:e5:6d:4e:ff:06:e3:36:4a:d0:
         22:7c:d6:51:b7:6b:16:28:21:9a:0a:87:44:df:39:de:72:14:
         c3:82:3e:9b:12:5b:ee:ee:e1:f9:92:f8:36:0b:74:b0:3c:95:
         d8:3d:13:f7:cf:d0:4b:b2:50:32:22:79:e3:46:89:85:19:75:
         73:53:57:f4:e2:fc:bd:a7:08:fc:f1:50:67:85:27:e6:6a:dd:
         bd:9b:25:12:42:5e:a5:20:8e:da:a3:25:e9:07:f3:48:dc:86:
         d5:c9:bd:1a:b5:45:7f:79:9c:24:47:6f:c7:10:cd:45:32:0b:
         72:1f:e8:15:7a:56:ba:a3:48:de:0c:c5:2b:1c:19:1f:07:1c:
         41:9c:5a:5a:da:dd:6a:e0:85:90:5b:6c:d5:7f:6f:25:10:23:
         3f:93:92:a9:75:52:90:b9:fc:fe:83:24:50:c3:5d:37:54:71:
         18:f2:a2:38:30:f0:ad:00:b4:6b:b4:e3:92:fc:15:16:90:c2:
         2e:76:bb:d9:fc:a3:3f:18:d5:73:8a:f5:b0:d1:a7:da:ff:ae:
         09:a9:b4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----