Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File:                     RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier:          JE5jf7M9+HTub+wsly4FkLoPKWzBMhzkqCxOgUDmrok=
Subject key identifier:   47:51:7E:06:CC:10:61:90:1F:C2:78:61:D3:4D:73:00:37:5F:4D:87
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer:       /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial:       01962F0685891FA0A14FAFD4C923D6581E42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number:          12B8
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: 1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa (hash: sw8ry0bOHDndmxXW/2FyYZ7exmAZ4VvNy12eeZpqa3o=)
                          2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: RgdBypF/fB5ImsD89CwV/uDzEbWvdPPvqqGKnP+U50w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:85:89:1f:a0:a1:4f:af:d4:c9:23:d6:58:1e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=47517e06cc1061901fc27861d34d7300375f4d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:06:ee:f7:ea:62:3c:87:f3:ec:f2:b6:dc:
                    94:3d:02:f5:7d:23:2b:3c:b4:ee:ea:26:0b:80:87:
                    c0:11:63:af:b5:20:1b:b6:ce:15:59:b1:f1:f7:0a:
                    f3:e9:01:00:64:c1:b1:a8:10:84:5e:08:84:c2:de:
                    27:2e:1b:6b:c9:fa:93:8e:40:18:e4:ba:48:25:a7:
                    ed:35:42:d9:c8:0a:7a:a0:08:75:1e:85:58:09:7c:
                    ec:7b:04:ab:46:f0:ed:4d:1c:9c:d5:a6:43:5c:97:
                    40:60:3d:f9:70:b4:d6:1a:d2:74:e8:a1:bb:f1:05:
                    36:ba:b3:c2:0b:f4:38:7b:3f:4d:5d:1a:4f:ce:04:
                    02:8c:cf:d8:16:5e:c3:24:33:cb:fc:1e:d6:cc:b5:
                    37:3c:48:52:76:bd:b6:92:b8:f3:f5:bf:ad:d7:bc:
                    25:b9:32:10:7e:02:66:b8:b0:6b:28:d3:ac:64:31:
                    f4:54:98:47:36:2e:37:30:17:9a:1d:70:1c:a4:fb:
                    f5:8e:54:74:f0:0c:fa:ca:01:3f:04:38:01:b9:e2:
                    e7:f5:9a:c1:2a:ce:5b:0d:70:09:08:7d:ab:d3:c4:
                    81:33:21:d2:4d:b5:9c:ba:45:e8:b5:20:20:8c:7e:
                    88:07:11:8c:de:56:cc:63:d1:70:1e:a7:53:1f:dc:
                    ef:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:51:7E:06:CC:10:61:90:1F:C2:78:61:D3:4D:73:00:37:5F:4D:87
            X509v3 Authority Key Identifier:
                keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c5:f9:6e:61:47:4f:97:c0:f3:a3:2f:c8:51:70:e9:95:53:
         2e:9d:c9:a2:1b:3f:2c:b8:c3:73:32:7b:d4:7b:7e:47:0d:3b:
         a0:c7:42:c9:b7:bb:53:9c:35:1c:7c:98:c4:8d:98:13:cc:29:
         4e:62:a2:5d:c4:0c:f7:e7:95:45:2a:03:da:38:42:94:99:ca:
         37:ac:dd:d8:78:9f:c9:f4:6e:06:5d:bf:bc:e0:98:77:fd:f7:
         bd:0f:3b:b6:a7:9a:4f:d9:ee:59:55:77:ac:3a:f7:08:50:4d:
         9b:d5:b3:ae:f5:5d:90:07:5a:d4:f0:33:e4:86:b5:2f:4e:0e:
         03:ae:7f:20:2b:ec:5d:e6:a2:e9:ae:3c:37:17:12:38:47:29:
         b5:1f:a7:a6:d7:06:65:a2:3d:35:d1:0d:56:75:3c:01:88:fe:
         d5:fa:ab:b9:ba:b2:58:1f:9e:da:0b:53:07:50:45:09:bd:ad:
         45:a4:98:2f:11:4d:4c:6f:7b:9b:24:03:e2:b4:6a:b4:0b:8f:
         ed:e9:d1:ae:48:ee:8b:c6:63:82:e6:b4:46:49:ed:ad:96:02:
         70:ba:f5:87:14:e5:ee:8f:aa:1a:66:cb:eb:5f:8c:5c:08:d5:
         6a:0c:65:89:e3:1c:62:bb:4c:cf:ec:1b:ff:78:85:84:67:96:
         85:c9:bb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----