Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
File:                     V1j80i-3oR3qizfkw_YiqnpHue4.mft (raw, json)
Hash identifier:          fU3/4w6FgL0W1dW/VikXdMl0Rx84XPslcpZsQ0NwRaY=
Subject key identifier:   41:A5:66:59:D0:EF:E4:2C:F3:9C:58:E9:CA:D5:35:88:02:E7:9C:4C
Authority key identifier: 57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
Certificate issuer:       /CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Certificate serial:       01962F741A57E854088A94D47533A57572D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
Manifest number:          11F8
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: 1cAFysoNqNIZH8FwmwvYqJt5bM4.roa (hash: ODKSC75jE0xq09vjpL4sB7ddbosHMLlBxEPWj0XoiqQ=)
                          2: V1j80i-3oR3qizfkw_YiqnpHue4.crl (hash: hOvZNhTIPbNIZV0Ue8UO4/J5ynp7susjFVWIoOgYu3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1a:57:e8:54:08:8a:94:d4:75:33:a5:75:72:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=41a56659d0efe42cf39c58e9cad5358802e79c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:1e:7e:40:c7:0f:e4:60:d8:48:24:c6:c8:
                    cd:ff:74:87:f2:98:a5:70:6c:2f:fe:a5:a8:86:5d:
                    7d:1c:58:ca:30:02:43:44:90:91:8f:e1:a4:ba:25:
                    63:23:99:ce:8a:67:e5:58:4c:2c:83:94:cb:e3:cc:
                    5f:96:ae:f7:26:7b:4e:88:c7:ea:94:fb:58:d9:18:
                    ab:67:e0:f4:e7:87:44:79:5b:c0:0c:e5:13:cf:50:
                    77:91:39:f1:cb:63:d5:c6:36:a2:66:ed:87:3f:12:
                    06:d4:99:d6:97:0d:11:d0:e1:b0:c0:25:ad:37:31:
                    a4:84:b7:ea:16:de:1e:1c:6d:c1:46:2f:2d:0e:e6:
                    6d:35:db:8d:27:4f:ed:1c:9a:cc:55:ad:f9:47:8c:
                    ec:22:ff:e5:fe:83:9c:35:15:cb:78:fd:88:69:4d:
                    0d:28:f5:7a:2f:7c:73:d4:66:b9:2d:ed:e5:7a:6a:
                    77:40:f1:75:94:70:fb:bb:73:ff:6a:50:7b:df:e9:
                    ab:5a:89:6f:1b:20:6a:9a:ae:f1:8b:f8:95:5a:e7:
                    bf:7c:d2:92:cf:96:02:27:0c:45:dd:71:4c:44:e2:
                    1c:d4:21:d7:78:eb:95:b3:91:a0:d3:5c:d4:9c:41:
                    8d:d3:da:02:d6:81:06:be:a0:af:76:b2:8a:68:a7:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A5:66:59:D0:EF:E4:2C:F3:9C:58:E9:CA:D5:35:88:02:E7:9C:4C
            X509v3 Authority Key Identifier:
                keyid:57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:ff:13:f5:7a:73:32:ed:47:dd:08:3a:a4:52:0c:17:f4:d9:
         aa:83:5c:0f:5f:da:a5:80:f7:1b:48:d3:5e:1b:17:40:1d:4c:
         0d:1f:da:1f:72:fe:e9:00:20:a3:05:4e:ab:0b:33:c3:3e:52:
         ea:d7:db:51:b1:da:a5:b9:c1:6f:b0:a3:7f:fe:0b:3c:53:e6:
         9b:3a:e4:bf:e1:68:7e:44:ff:47:43:c7:16:54:e6:50:37:4e:
         82:85:22:d0:54:7b:79:56:59:a3:8c:37:44:5c:42:57:5c:3a:
         ff:47:11:ec:65:3f:b6:9e:bc:d0:fc:e1:10:75:bd:50:c0:65:
         94:28:14:ac:d6:57:6d:9a:f8:04:3b:1d:2f:6e:ab:f3:b6:a8:
         61:16:37:a7:22:ce:45:97:0c:b2:b2:9c:b5:ff:42:70:f6:7a:
         ee:c2:93:a4:8b:d0:f9:49:8d:28:da:7a:ce:12:62:9c:15:b7:
         eb:07:8f:9e:3c:a7:ff:a7:d0:ff:f3:df:05:b3:c0:84:96:e9:
         fe:63:e6:c7:12:b8:e4:2a:65:23:04:e5:d9:49:c8:00:37:10:
         f6:ea:73:2d:6a:2f:43:f3:61:0e:58:aa:38:aa:54:f4:a7:23:
         e7:98:56:53:f8:73:39:5d:67:aa:9e:1a:56:9b:1a:aa:1f:fa:
         33:10:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----