Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File:                     MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier:          oGShGYg+Md3EE1qssP/7oSCdHxR1qNf2lIQn7TS1rR4=
Subject key identifier:   58:C8:DB:83:78:47:4D:59:34:40:E3:2B:F2:3F:FF:70:F2:5E:8A:CB
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer:       /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial:       01962FAB1544EECECD530237F5CD056A742E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number:          0495
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: SrvvRdGf15PtJLwT/pSHI1w7ueEsyzhtb9Adj3Ah2zA=)
                          2: WgGE8SmHkkHtiKjEfowQOh6KXV8.roa (hash: 22fxBEDWF5kPp/e3BDEYhqrTgPBi1KncqCiTSsX2CWM=)
                          3: pvxgjOK61sSAIjSKXGp9wCqGnds.roa (hash: cyj8Q0roEhc5/yo7oP4F2A5FfhnYWsPzbSEckXutgEg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:15:44:ee:ce:cd:53:02:37:f5:cd:05:6a:74:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=58c8db8378474d593440e32bf23fff70f25e8acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:c8:68:f4:17:64:bc:36:77:e9:75:04:0a:
                    44:cb:5c:5f:32:5c:d3:b3:6d:35:29:93:57:c0:4f:
                    65:37:ef:fe:2d:81:72:c7:06:ae:3e:5d:47:f3:60:
                    64:d7:20:26:ab:72:3f:f1:98:93:45:05:9c:d0:f4:
                    cb:65:32:09:15:10:d1:9a:b0:d1:01:b2:8f:cb:89:
                    ff:f1:78:e2:52:ff:70:70:22:ef:9f:b4:b1:ca:d3:
                    c6:c8:05:8e:5d:a4:72:eb:cb:85:02:7a:37:ed:af:
                    47:2d:19:b6:ee:2a:36:24:68:a1:5b:b6:48:f7:5d:
                    be:42:4b:ba:73:34:66:a7:3c:ef:de:e4:95:31:3d:
                    5e:06:b4:f6:10:aa:f4:8c:15:7b:c4:41:8f:07:63:
                    b7:89:d2:c8:50:f8:e8:da:3d:69:e5:21:a7:46:fb:
                    70:1a:bc:7a:b2:1d:36:3b:7d:66:73:06:f7:09:69:
                    c0:94:d3:ac:d4:4c:76:bb:f2:af:30:9c:47:dd:e7:
                    49:a9:73:0d:99:de:c8:be:12:f7:9e:6a:88:e7:2e:
                    3f:46:b1:cf:b4:2a:47:05:e2:f9:33:2a:38:27:ad:
                    0c:10:56:c2:71:59:17:76:28:58:4a:e1:78:96:6e:
                    5b:d1:a5:88:07:25:43:0a:1a:d5:7e:d3:3b:e2:78:
                    f6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C8:DB:83:78:47:4D:59:34:40:E3:2B:F2:3F:FF:70:F2:5E:8A:CB
            X509v3 Authority Key Identifier:
                keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:a4:e8:c6:a0:3b:e5:b4:94:6e:9b:42:8f:3e:e5:15:db:c0:
         1f:85:94:8d:51:fd:f7:fd:85:a7:8e:15:3b:9e:dc:db:33:6d:
         7e:2e:e6:7a:81:2e:b1:64:37:d4:2c:d3:e7:f7:b9:b0:e7:d5:
         63:70:05:56:e2:be:06:a3:b5:4d:38:e6:a7:c6:3e:d6:63:fd:
         e4:82:8c:b2:9f:9f:d1:1e:7f:30:f6:c8:e5:0c:17:dd:75:1a:
         6d:ee:45:81:bc:c3:4b:a0:a5:26:6d:2d:e6:cd:77:81:58:4e:
         59:08:a7:ad:5f:ef:a7:8c:a3:e5:d9:07:51:7d:aa:d1:ae:9f:
         7a:5e:21:89:9c:2c:46:75:e7:44:a3:b7:69:dd:17:83:20:3b:
         85:74:5f:ae:79:6f:ac:5a:7a:b9:9d:e3:e5:79:2d:40:1b:7a:
         d2:d5:6f:d9:3c:a8:ff:09:fe:e0:cc:82:1c:33:7a:6f:d1:fe:
         4d:16:f7:6a:7e:46:e1:f5:72:78:5c:8e:d2:71:be:9b:56:63:
         97:31:ac:42:70:6f:4d:f7:78:17:74:c9:e9:46:6d:05:51:ef:
         d8:ad:fd:30:c3:b2:b9:9a:0d:ed:1a:6a:5f:9d:5e:a1:ca:02:
         ac:be:1d:4c:d7:b4:e0:80:a6:e8:2e:c2:e8:93:e7:8d:dc:e5:
         6c:9a:bb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----