Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.mft
File:                     T03F1MB2_YQmOrcubxe1_0rLhEg.mft (raw, json)
Hash identifier:          jSurMTAjSqogGTyGd/n5TIMpZNviIYtOBgOouFeCB9E=
Subject key identifier:   EF:25:7D:91:00:6B:78:82:C7:D2:CF:8F:AD:70:25:EC:24:B5:F0:5D
Authority key identifier: 4F:4D:C5:D4:C0:76:FD:84:26:3A:B7:2E:6F:17:B5:FF:4A:CB:84:48
Certificate issuer:       /CN=4f4dc5d4c076fd84263ab72e6f17b5ff4acb8448
Certificate serial:       01962FAB3DBB2BF7755B9CD281C3764FBADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T03F1MB2_YQmOrcubxe1_0rLhEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.mft
Manifest number:          0807
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: 5iUoguj_iK1nNW8vHsVzOldAdSU.roa (hash: pKY+cX83EfJeSDoR6xrNZru3sgyhL3gHqEm0luVXgrc=)
                          2: T03F1MB2_YQmOrcubxe1_0rLhEg.crl (hash: 908cmYjKwhFkUe+ej1+33dLBUoCISaJpEUDslTrgFDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3d:bb:2b:f7:75:5b:9c:d2:81:c3:76:4f:ba:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4dc5d4c076fd84263ab72e6f17b5ff4acb8448
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=ef257d91006b7882c7d2cf8fad7025ec24b5f05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ed:67:96:c4:b8:5f:6e:fe:79:35:65:1a:54:
                    d9:53:8a:e5:8a:24:96:1c:cb:ad:9b:3b:c6:01:56:
                    54:9f:eb:69:35:54:cb:fe:56:1a:35:5f:e5:b3:5f:
                    d0:e3:75:ee:23:72:0a:59:48:41:44:05:a5:85:6a:
                    d0:52:51:e3:bc:5d:fd:00:a5:2b:ca:bf:71:b0:29:
                    97:ef:ac:c7:58:1a:2c:c2:f5:3a:07:a4:88:b8:c0:
                    80:0a:a2:4c:b5:57:55:d2:23:13:3d:30:33:5f:c2:
                    47:c1:55:12:e2:ad:f4:e3:e6:59:32:21:fa:90:14:
                    8d:4f:74:86:47:ea:da:a1:0e:0a:10:a0:c9:b4:d0:
                    79:54:61:db:ba:2a:6e:1a:0c:d8:a9:a3:8e:33:6f:
                    c0:ec:fa:e4:04:eb:47:7d:e7:ad:55:63:5e:0f:86:
                    00:b0:4c:f4:29:3e:de:f5:7f:ec:fc:af:cb:20:5c:
                    83:04:7d:8a:cc:6a:fb:45:f7:94:1d:82:59:2b:5b:
                    fa:64:f9:07:15:8f:14:c8:99:cf:6e:2f:71:e1:6c:
                    29:8c:27:44:bc:89:cf:27:55:31:65:23:26:98:bd:
                    3a:cb:11:fd:39:a9:3f:04:34:70:3b:a2:a0:a1:ca:
                    4d:30:84:c0:36:a2:c0:5c:e8:f8:a2:1b:a9:aa:e7:
                    cb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:25:7D:91:00:6B:78:82:C7:D2:CF:8F:AD:70:25:EC:24:B5:F0:5D
            X509v3 Authority Key Identifier:
                keyid:4F:4D:C5:D4:C0:76:FD:84:26:3A:B7:2E:6F:17:B5:FF:4A:CB:84:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T03F1MB2_YQmOrcubxe1_0rLhEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:96:7f:4b:fb:52:f7:45:52:00:8a:7c:11:b9:89:f4:f0:56:
         60:35:5b:92:b5:af:26:62:10:3a:4f:8e:81:13:98:e6:b7:24:
         48:be:14:76:41:66:77:49:5e:40:56:c8:44:e2:26:04:2a:73:
         00:73:03:b6:e8:b6:56:66:f5:68:8e:8f:98:5f:5a:59:1d:68:
         d0:32:b5:b4:15:fb:b3:30:17:d0:20:a7:29:5c:b1:55:84:1a:
         bf:6f:84:a7:67:66:a5:c4:e2:39:e5:ce:ba:10:46:46:58:25:
         b4:56:d1:d5:fb:03:02:30:89:c2:9f:81:ba:50:02:95:2b:47:
         07:c5:1f:3e:56:04:06:f4:0d:47:ab:fd:9b:8f:df:c0:03:f0:
         f7:81:b4:6d:7a:18:44:c3:94:64:7d:db:ab:6a:48:a4:f4:c4:
         71:00:7c:4d:ae:eb:50:f3:d8:0d:4c:21:01:a3:3f:40:4c:57:
         a5:a4:86:50:72:0f:df:3f:74:55:de:d9:63:c1:07:78:6b:fb:
         40:00:c3:9f:0b:3b:cd:3c:46:17:3d:5c:3a:66:47:19:2f:a2:
         6f:2c:d9:df:b7:67:e2:85:03:ed:54:10:8d:c3:9e:20:ec:96:
         be:ea:e9:14:0f:29:66:ce:33:64:71:cc:39:70:87:1a:60:8e:
         80:10:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----