Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File:                     xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier:          oK5aG68a54P0Ssx5yL5JmK8fGSxv9thmjJ089tiqwdY=
Subject key identifier:   15:AA:74:79:6F:8B:53:F0:55:D6:C2:4F:E7:3D:16:3F:DE:70:7F:7F
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer:       /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial:       01962E99996A51BD13768638203031BC2FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=)
                          2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=)
                          3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: b9M7zRJ5/iMSekbURfxPwdsAvo/foB7ZM5ExeKM1mlU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:99:6a:51:bd:13:76:86:38:20:30:31:bc:2f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=15aa74796f8b53f055d6c24fe73d163fde707f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:66:b9:6f:16:2e:e4:db:b3:67:13:04:f7:
                    c0:9c:d7:5b:0d:fc:d4:a3:c0:97:72:97:26:d0:9a:
                    2f:04:fb:39:dc:dc:97:f4:15:c8:9f:67:ba:a2:8e:
                    4f:44:f3:4b:ab:43:cd:c4:f6:71:a8:85:08:66:02:
                    d9:bf:3b:f2:78:94:82:29:18:f2:9a:cc:65:3d:56:
                    3b:55:55:49:1e:31:0c:1c:43:70:fa:59:74:40:3b:
                    d7:19:50:b8:c5:87:f9:28:18:04:f6:5c:c6:aa:5a:
                    05:94:67:e1:57:49:b6:1e:68:dc:37:a9:8d:9a:14:
                    e3:16:b5:9d:ea:fa:e9:99:b3:b0:03:e7:bd:98:8b:
                    9b:cd:24:9e:99:a2:98:a4:a1:ad:63:41:a1:9e:76:
                    0a:fe:4b:07:52:02:42:5a:9b:fa:81:1b:a6:9e:d8:
                    71:7a:b9:25:73:fc:e1:07:dd:aa:d5:73:71:ed:19:
                    07:ec:c0:f6:c1:3f:bc:92:1a:1d:39:10:eb:7d:67:
                    c5:d9:28:19:92:ba:be:8e:99:43:9e:b1:8d:c3:6b:
                    2b:02:f9:5c:73:fb:fb:5a:b4:32:67:ad:eb:cb:93:
                    2c:c1:e3:28:05:8c:46:d7:1f:bb:5d:f9:7d:b8:67:
                    fa:ca:9c:2e:d5:16:b4:52:13:92:2c:16:4e:16:6e:
                    12:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AA:74:79:6F:8B:53:F0:55:D6:C2:4F:E7:3D:16:3F:DE:70:7F:7F
            X509v3 Authority Key Identifier:
                keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b4:82:e2:2e:03:e2:ce:6a:d2:0c:01:af:3c:73:54:65:0f:
         4f:67:29:8a:72:b3:cd:21:9b:9b:95:74:08:6d:05:ac:14:b1:
         81:74:a6:c6:4e:0f:ba:8a:4e:4d:2a:95:38:f3:18:74:40:ee:
         fb:0a:93:b9:26:49:cd:88:13:7e:de:17:84:f1:d0:a1:03:ec:
         d7:c6:cb:ec:93:a6:ca:f8:1e:9a:28:02:b7:18:e5:29:a9:d1:
         ca:1f:e4:52:fd:47:94:2b:02:8c:7d:1d:27:7c:f1:ef:4a:a8:
         ef:81:ad:6f:ef:4f:f1:3a:27:f3:0a:0e:64:e9:a0:30:c4:6a:
         9e:8f:d5:31:91:52:28:02:74:d9:3b:97:81:eb:07:5a:17:69:
         79:d8:b9:6c:c6:76:53:ed:10:57:86:9e:34:0e:3d:fb:b8:82:
         31:00:b8:7b:0e:44:5e:e6:da:34:6a:ec:98:ab:4a:19:13:66:
         bd:7a:35:3f:9c:59:56:d2:6b:06:c7:a7:a8:87:60:01:4e:8c:
         77:23:c1:b3:20:bd:20:91:65:8c:67:97:9a:e7:6d:3a:8d:eb:
         5e:be:3d:76:1e:c5:00:50:f5:0f:60:b4:03:6e:5b:fd:d2:ea:
         8d:1b:11:51:d2:b1:12:10:d7:10:75:f7:9b:1e:7a:36:36:7b:
         7b:a7:57:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----