Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File:                     1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier:          3MxpxHId3sQRiwLTq8ki1Qxfs0YgjCN0Gw0YsA6xfmw=
Subject key identifier:   A2:A5:7A:B0:6D:08:05:CE:43:1A:20:64:AE:F5:8A:39:ED:DB:15:04
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer:       /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial:       01962F3D94EDC30AA147CF1752E5E5342F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number:          04A8
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: MOsqk42kPwEjdw1c1v1G00WwB/be1hhk2ixTXQJ71Ps=)
                          2: D6pvp9exGoAv4Fjni5vR2Sb2Jhg.roa (hash: 7ummeZWhXvxjEX54lXU+dJ5Fl+ldbxWm0dddjLg/WHA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:94:ed:c3:0a:a1:47:cf:17:52:e5:e5:34:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=a2a57ab06d0805ce431a2064aef58a39eddb1504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b0:c0:ac:96:50:03:df:b4:9b:59:46:eb:f3:
                    47:8a:0e:9c:07:f5:ed:1e:f9:7d:5c:f9:d6:be:2b:
                    c1:3e:cc:66:93:f2:38:9c:d9:03:42:f3:0a:fa:8d:
                    25:16:0b:1c:a3:6b:82:38:ce:8f:dc:b0:c7:9f:2a:
                    70:5b:a8:c6:7a:48:f9:a4:c5:9c:08:b4:fe:f3:87:
                    7e:97:1d:86:04:00:92:ca:c3:9b:a0:e4:7b:9d:76:
                    fe:8d:0c:de:d0:c3:9e:3f:98:05:c2:bb:9d:e8:79:
                    2f:39:82:2e:86:59:e3:96:3e:0f:53:a9:91:44:83:
                    77:f2:70:9d:b3:6a:b5:04:64:9c:f8:31:c4:f7:b0:
                    f4:04:3b:e4:a9:51:b9:fa:22:25:73:01:df:fb:9e:
                    8a:a2:48:55:e4:5c:f9:14:e9:85:44:47:c6:83:65:
                    d7:de:4f:11:f0:29:a3:32:58:1c:d9:6c:64:83:37:
                    03:76:01:6d:c8:40:ea:ca:32:86:00:ac:ee:64:a6:
                    e8:9d:3f:59:89:c6:c2:e7:2d:52:30:22:b3:0d:a9:
                    74:30:d2:a7:72:7d:f0:84:b0:2b:d4:75:5b:4e:b6:
                    ec:90:b6:48:02:26:99:84:65:97:3e:fb:ba:88:96:
                    ea:a2:60:61:20:2b:44:44:0a:c2:8d:9f:cc:83:8f:
                    0c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A5:7A:B0:6D:08:05:CE:43:1A:20:64:AE:F5:8A:39:ED:DB:15:04
            X509v3 Authority Key Identifier:
                keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:7f:d0:76:88:7f:02:cc:07:77:3f:fa:a4:80:ab:33:e3:c7:
         54:74:79:0f:42:df:27:39:01:97:4c:d6:f9:b8:06:37:5d:3a:
         5e:b7:c1:44:dc:e9:38:72:8e:21:3e:68:e8:0c:c9:4f:83:1b:
         e4:36:68:d6:a5:5a:b6:e6:ce:2e:81:3d:51:4d:7d:48:bf:56:
         1f:67:c3:5f:4f:b8:49:14:9e:52:3d:1f:18:aa:75:5e:d5:24:
         c3:c4:03:f6:d9:77:26:42:c5:f7:1f:1b:1a:17:78:64:48:89:
         e1:d6:3b:84:05:95:d5:3b:77:5d:58:04:98:72:19:b0:b0:74:
         d2:0c:d7:1b:3b:f2:f5:3a:c3:f5:b0:6e:cb:7c:09:66:bf:2b:
         76:68:6d:39:2b:7a:60:04:d2:7d:98:4f:2d:f0:17:97:71:07:
         8a:3b:04:56:f1:a4:9d:c4:f9:ca:2f:6a:18:00:0f:ba:ee:32:
         42:39:3f:eb:5a:ab:04:e7:d0:c4:16:50:76:33:15:70:55:e2:
         6a:54:c6:dc:3e:8b:72:dd:71:e0:b0:f6:e1:e6:a8:61:ad:36:
         ad:0e:69:30:3d:83:76:38:c5:29:c6:24:94:2f:de:7f:96:b4:
         9d:9a:10:02:24:92:6d:7f:e7:84:ed:9e:c4:87:31:fc:9a:33:
         88:f9:2f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----