Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File:                     Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier:          EzEOLrds9x32woqKeiSl7LgXnXU0x5uGPQb4AFo21q4=
Subject key identifier:   8F:4A:57:D2:25:BB:3B:D2:A1:A8:7D:78:CF:B8:56:FA:72:34:DD:19
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer:       /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial:       01962ECF75C930486740DE7645D365F0C0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number:          0680
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: VWnS+ZkavUYz3ZOrr9msnkGd+IKgeLW3ZGb43XMuoM8=)
                          2: s-6iu0euq8mwctWc84gynbP4Gz8.roa (hash: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:75:c9:30:48:67:40:de:76:45:d3:65:f0:c0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=8f4a57d225bb3bd2a1a87d78cfb856fa7234dd19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:99:23:c7:0d:cf:53:c0:72:42:61:c2:bf:59:
                    8d:b3:21:d9:7f:6e:b4:26:5f:bf:69:97:03:73:ae:
                    7f:9d:ff:f0:6d:ad:f4:5e:3c:44:ff:4a:1f:20:54:
                    8c:50:04:ad:43:c7:bc:8f:d5:40:2b:47:43:9d:d6:
                    35:be:95:b3:fe:5c:87:b4:10:be:db:5f:7d:cb:ac:
                    28:e9:37:7a:92:f5:a7:61:37:72:0b:81:10:70:27:
                    c8:a0:5e:8d:80:14:9b:4b:0e:b5:d2:81:0a:b3:5b:
                    e0:e5:53:14:b0:df:dc:b3:32:b3:a1:f6:ea:1f:2e:
                    67:a7:d5:a8:6c:0c:57:4b:3d:46:b0:a1:51:bc:c1:
                    bb:c2:f4:1c:fe:bb:27:be:29:a3:55:fa:95:5c:71:
                    de:65:07:54:3f:96:be:01:0d:d1:9d:9d:89:66:73:
                    8d:48:7c:ce:45:af:8a:a0:3b:2c:b7:c4:43:7e:77:
                    6d:94:3f:5a:4b:76:0f:fa:84:6a:65:66:97:e4:34:
                    46:25:85:ed:3d:6a:fd:b1:e1:6f:da:75:ce:d3:6d:
                    e2:20:1e:8d:cc:d3:45:84:c8:44:d2:f6:08:09:c2:
                    3f:5b:1d:7f:5b:c5:44:63:7c:25:12:bb:e7:4d:91:
                    1f:47:af:48:8e:e3:c9:87:3b:dd:cc:9b:66:bc:15:
                    6f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4A:57:D2:25:BB:3B:D2:A1:A8:7D:78:CF:B8:56:FA:72:34:DD:19
            X509v3 Authority Key Identifier:
                keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:30:5d:4b:b8:3a:e5:89:34:f6:40:12:a4:3f:96:ac:51:ed:
         7b:05:c7:22:c6:7d:04:b4:3c:25:ce:a9:1c:36:86:b7:aa:a7:
         d7:aa:ff:63:d1:0a:19:08:ac:1a:0a:6b:e0:13:c1:02:74:01:
         49:86:e2:73:c8:76:75:3d:30:85:7c:41:65:b6:c5:4e:0b:83:
         66:5d:15:47:72:66:55:62:8f:e7:92:db:2a:f6:c6:14:6c:1c:
         4d:3f:34:76:cd:e9:c8:b3:1b:a0:5f:eb:d6:16:4b:bb:27:ef:
         d2:b2:7c:24:ab:c4:0d:40:0d:d3:17:33:1b:1c:59:33:82:b5:
         bf:3e:28:71:55:34:3f:f0:b2:64:af:89:3f:f3:a9:5a:11:d5:
         48:7a:43:fd:93:5a:e5:39:4b:b0:46:55:c3:4c:6e:6a:af:78:
         91:35:ba:03:12:37:c2:5f:c2:f5:30:ad:e5:05:4a:f3:64:a2:
         3d:3d:16:ee:4c:c6:86:14:f5:dd:73:16:76:d6:ac:93:f9:46:
         39:2f:7b:46:4f:c6:a3:15:8a:f1:17:3d:55:e5:54:53:6f:ba:
         fb:20:74:b7:61:60:7c:ac:37:ff:ca:fb:e3:f6:89:ab:bd:26:
         e2:62:df:ee:ec:39:f4:ab:ca:5d:96:c2:5c:03:71:c7:4d:00:
         0a:a3:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----