Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File:                     1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier:          ZFsbLVnHntIkhM9215Fg2JRq/oTULFT6dcBkp23XAgg=
Subject key identifier:   97:5F:2B:17:31:57:4E:1E:93:67:63:41:2E:7F:4A:A2:DA:69:07:4D
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer:       /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial:       01962E997F7970B219D1EB9DA5903CD5E143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number:          0480
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: /yDerNYnsCDtiZdqUaKZzO9GZrwubbW7rhWDEUbPSu8=)
                          2: EZ9xcPpmaaiDdmg5D8Xp47gSAJw.roa (hash: /ZPFrrUhiRzvgJS9F6X6CPNQ9l9Fj7isIDOoSoDinwA=)
                          3: xTN3jN3JRtB4P5xBVjLw9cDkoVg.roa (hash: UKVupoJGtNRB7xSecoUEhumnrVWffmz284NYSDysuEw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7f:79:70:b2:19:d1:eb:9d:a5:90:3c:d5:e1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=975f2b1731574e1e936763412e7f4aa2da69074d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:0f:60:52:1c:69:7e:42:05:b4:23:a5:c5:
                    0f:5f:d3:83:35:25:e6:4c:21:13:84:ef:80:e3:a5:
                    cf:69:4d:01:53:c8:52:7e:33:b9:d6:99:7e:11:4e:
                    6c:57:ac:32:e6:92:86:a5:de:c9:8a:cc:01:6a:d7:
                    db:55:f4:d4:d2:b5:90:2d:42:ae:2b:78:c6:25:ab:
                    d7:5e:43:c6:39:8c:95:82:0c:3e:61:2f:63:d8:36:
                    0d:7c:35:b8:19:58:93:8a:71:99:10:f8:a2:d0:12:
                    92:d2:b9:0a:da:b0:36:e4:3e:0f:4b:1e:6b:ce:8f:
                    24:fa:ce:ca:c3:6a:30:2e:ef:97:a3:f1:e7:8e:aa:
                    2d:11:ca:1c:fc:36:9f:97:b4:03:a3:01:56:bb:fc:
                    82:73:16:3a:4c:ed:9c:e7:e1:5d:4a:59:c2:81:76:
                    73:e7:53:41:27:0a:53:ce:4e:b0:6f:16:13:71:e9:
                    f4:ed:50:af:04:e4:37:ee:32:e8:a3:47:71:5d:d7:
                    a3:1e:36:a4:64:59:b6:f2:fa:c2:72:ac:23:27:4d:
                    a7:de:95:93:09:5c:37:15:ab:43:19:e3:aa:3b:5a:
                    31:e4:78:01:2a:72:f8:2c:15:18:70:8c:fc:83:a0:
                    86:2f:fb:b2:cd:23:ed:47:8f:2a:bd:2d:f7:7b:24:
                    94:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5F:2B:17:31:57:4E:1E:93:67:63:41:2E:7F:4A:A2:DA:69:07:4D
            X509v3 Authority Key Identifier:
                keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:34:6e:41:b8:68:81:50:f1:e2:9f:22:b0:a7:28:3e:4d:ff:
         26:1b:69:b3:cd:e9:00:21:de:32:51:b3:09:5f:68:56:ad:51:
         d6:ce:0f:a8:20:4e:e4:b3:c3:73:fb:3c:d2:0b:9c:bf:57:6a:
         57:05:25:89:7b:24:b9:91:ee:f7:b4:7f:b6:45:5e:d8:b7:56:
         da:c8:f7:42:96:64:ac:ad:36:e1:bb:94:3f:1d:3c:2b:61:08:
         db:18:34:0a:b7:4e:83:8b:da:33:9d:59:0e:88:b8:f6:4b:1c:
         9c:8f:5d:05:e8:3b:2a:ab:f3:56:85:64:02:32:86:f4:31:17:
         c2:5d:fe:2c:9a:1e:fe:ca:10:7c:b0:c5:f2:22:bd:70:1b:35:
         bc:b0:8d:d0:16:7e:1c:c2:15:23:99:91:dd:0f:f2:db:4c:fd:
         61:38:7e:a0:8a:10:08:90:aa:04:93:eb:67:8e:3e:f5:08:b5:
         1a:78:73:c7:3c:2d:f8:7c:59:7f:bc:bc:da:3b:de:cd:31:8e:
         43:8b:6d:e8:f5:e1:b6:69:18:d9:73:48:ad:d2:91:de:72:e4:
         93:34:13:48:2d:13:46:59:28:39:52:8a:5c:c1:3c:e2:3e:fd:
         79:7e:53:1f:00:74:82:0b:a2:4e:96:d8:b7:8c:ed:0f:d8:df:
         bf:b7:c8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----