Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File:                     T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier:          uaNVLesFx4fCbJcl95sZj63A/N94Of3d+xTumrJRml8=
Subject key identifier:   FC:17:62:B7:D2:B1:A2:AE:36:F7:C6:DE:42:E2:05:DF:3B:A9:37:C9
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer:       /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial:       01962E6199E5FFE12EAFC5147A6432EDC09C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number:          0454
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: HpZmD5B1zLmPnY3f6N6Qgd7zmek.roa (hash: m9j0WMeURx0X/gO3nVCQhucXNdsmWk+LDFj4hOxWEBE=)
                          2: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: hzXgrq2yYcrTZkjZ/x7YuZdiHYlSXU/ZpdTOUR+9084=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:99:e5:ff:e1:2e:af:c5:14:7a:64:32:ed:c0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=fc1762b7d2b1a2ae36f7c6de42e205df3ba937c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:a7:ee:1a:9a:a9:1d:6e:e8:59:cf:7f:5b:
                    19:26:e8:55:cc:ad:92:05:d8:22:ce:c7:fa:c1:bf:
                    b8:45:2e:cd:7e:96:b8:91:80:4c:c5:ec:9e:99:93:
                    45:ae:ad:87:c4:a4:69:39:3c:19:0e:c2:be:91:02:
                    47:4d:dd:34:ad:67:d1:f5:b4:3f:7a:da:a8:30:0e:
                    99:76:d1:4b:91:6f:0c:70:55:d0:1e:c5:ad:17:8e:
                    62:d3:13:e0:2c:3d:de:44:67:43:b8:f0:7c:63:83:
                    ac:af:9e:4a:07:21:b8:89:e4:a1:7d:62:ec:aa:10:
                    4c:7e:11:5d:42:77:59:c0:57:51:9f:b4:dd:b1:94:
                    c7:b2:a2:35:69:86:69:28:06:19:86:c9:82:93:8a:
                    a7:f6:b5:d9:94:d1:bd:b7:d0:6f:64:80:54:47:2e:
                    a6:7a:f6:37:9f:0c:25:ce:43:90:38:d5:86:17:4f:
                    ca:b3:13:1a:26:36:b8:13:1b:41:4c:48:e0:d2:25:
                    2a:20:6a:ed:ac:e8:d3:c0:5e:78:19:cc:e7:d2:d5:
                    70:b6:78:79:d7:2a:a0:1d:84:13:ec:49:6a:56:a4:
                    44:2f:67:ac:f2:6e:9d:15:66:98:8b:7a:22:7d:66:
                    36:84:bf:8e:ce:b7:bc:c5:57:93:fd:97:9c:53:21:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:17:62:B7:D2:B1:A2:AE:36:F7:C6:DE:42:E2:05:DF:3B:A9:37:C9
            X509v3 Authority Key Identifier:
                keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:64:4a:79:52:0a:ce:02:b0:bb:24:c4:f0:7a:65:d0:fc:3a:
         c4:9d:0b:ef:bd:12:3f:df:64:34:fb:71:8c:5a:70:6d:8e:ac:
         bb:10:db:b2:f0:ba:1d:5e:fc:bc:3f:26:da:54:ea:fa:32:59:
         1a:ed:30:db:f1:39:32:51:68:05:63:2b:09:81:87:06:0f:4c:
         89:f3:1a:59:89:7c:b2:ca:39:a4:9a:5a:09:bd:f2:32:80:bc:
         2d:47:17:c2:0b:4d:fd:9e:0a:66:89:86:af:17:de:4d:8e:90:
         ed:86:1b:c1:c6:d3:16:cc:51:fa:34:45:08:4b:06:fa:02:8a:
         28:e8:49:79:29:6a:31:9d:ab:b3:fe:78:21:4d:26:ec:80:32:
         ba:f8:53:e3:0e:7f:76:ca:79:e5:ae:ec:2e:c4:d0:67:d7:bd:
         50:6f:9e:90:13:15:c4:35:e9:1d:95:cd:20:91:68:fa:2c:64:
         03:0a:1a:8e:d1:9f:e0:0c:a4:7b:2c:e0:08:b7:e3:c1:ad:c2:
         c8:33:58:83:4f:2a:09:15:f8:aa:f8:88:b1:2b:6b:01:77:3f:
         8c:8e:20:f5:7b:8d:b8:02:b5:80:df:b5:fd:b3:61:14:1d:8d:
         ea:36:bf:03:1c:be:c6:00:0e:30:2c:4c:1f:e6:fe:f4:74:4c:
         15:c5:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----