Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
File:                     V7ifXMeCGeoSc_n1PFueM7xdvrU.mft (raw, json)
Hash identifier:          KHp+30/pNQ0+hH02Yl4BYKFpNjH7N79uUCbKLIk7tcM=
Subject key identifier:   5D:F3:E9:22:B5:5F:3A:4A:12:43:AD:50:12:92:73:39:0E:95:9C:7C
Authority key identifier: 57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
Certificate issuer:       /CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Certificate serial:       01962E9987921013E6C7B3E129CD88AB7AA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
Manifest number:          04B2
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: 2XZNJdR9Iep0Ywseo8-8iJMB8Tg.roa (hash: 7pIfh2Q654qMx1AmZFUCn+BOOHgc4UU06A+k+bghDdg=)
                          2: RRZa9Q054kEMSroT3AuPzC585XQ.roa (hash: 7iVMMtB+9zg3QA2J8+DzasUBkyEpZ63pEDBVLFDl2DE=)
                          3: V7ifXMeCGeoSc_n1PFueM7xdvrU.crl (hash: vpKKEXVftBjwPt/uECglNeJCNmlJFkcHh16DfnndeFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:87:92:10:13:e6:c7:b3:e1:29:cd:88:ab:7a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=5df3e922b55f3a4a1243ad50129273390e959c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:34:5b:a9:10:72:ce:75:2b:2c:dc:9a:f9:
                    e0:8a:2a:68:79:12:b3:53:c2:98:8f:be:1e:7a:43:
                    f6:96:e5:0f:c9:0d:ee:30:b3:16:2e:67:f0:2b:94:
                    94:59:9a:1a:94:34:ae:61:81:53:73:c7:10:36:7e:
                    57:ea:a9:b2:ac:c1:fd:01:2a:96:df:f4:5f:7c:37:
                    17:28:28:ee:42:c4:0c:49:04:f1:4d:d0:d0:de:6f:
                    8f:8e:a5:4a:e4:9c:c0:bd:ee:e4:da:95:38:06:4b:
                    cd:7a:a8:6a:86:cd:a0:fe:65:30:57:10:9e:1f:83:
                    cd:df:01:0e:d0:f0:c2:86:19:63:9b:e1:71:3a:6a:
                    58:1a:6c:12:fb:64:4d:b9:12:c3:18:d9:a5:37:23:
                    31:75:c4:50:16:11:d8:fb:ee:2c:7d:d5:49:bb:94:
                    36:cb:91:15:53:67:a3:38:34:39:04:3f:df:2d:df:
                    2b:a5:41:21:1b:aa:13:e2:2c:5a:5e:f9:02:fd:12:
                    64:b7:85:de:92:a5:46:38:29:fc:21:b9:7a:f3:32:
                    64:e5:e9:b0:ad:62:32:25:b2:56:1d:b3:da:c3:e0:
                    b8:09:f3:2a:a2:c3:13:72:73:6d:d4:b9:3b:79:62:
                    b1:bd:44:55:99:a2:82:b4:9a:5f:3f:8e:d3:40:35:
                    2f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F3:E9:22:B5:5F:3A:4A:12:43:AD:50:12:92:73:39:0E:95:9C:7C
            X509v3 Authority Key Identifier:
                keyid:57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6a:c4:03:87:ba:06:58:e4:66:9c:cf:9b:9d:e9:25:9a:f6:
         a2:19:70:34:02:70:4e:84:c7:01:d5:a0:32:e9:cc:44:99:b6:
         61:fd:03:c6:14:08:82:6e:fe:a0:52:18:fa:f8:fe:72:1b:5c:
         94:0e:44:b3:12:61:29:d6:0a:61:fe:b3:ef:0d:24:ec:86:1f:
         ae:e3:0d:5e:0e:7d:e4:1e:9c:92:ae:ba:41:e5:5d:da:3c:41:
         07:af:55:07:7e:7e:c6:b0:72:69:8e:95:6c:c7:6a:20:53:c5:
         36:e2:48:2a:80:8a:b3:4d:39:f7:b7:13:12:77:c5:91:28:9a:
         db:b3:2d:c2:bc:df:e2:c3:3a:4d:6d:70:d1:3a:e0:71:b3:a6:
         cb:8b:c5:b9:7e:87:0f:10:59:3a:02:b5:40:a5:30:c7:e1:d8:
         f2:a3:5f:0a:37:77:3d:81:bf:e6:db:15:00:e2:45:25:2c:90:
         00:1e:77:3d:56:ee:7c:5e:8b:6e:7c:c4:b3:88:de:46:f2:09:
         04:32:dc:73:39:28:68:ec:8e:7b:27:4a:e0:5d:3e:9e:0d:d3:
         81:77:26:97:4b:38:91:f2:88:17:6c:43:db:79:71:8d:aa:ef:
         1e:f4:54:eb:13:67:e8:de:f8:96:6a:90:59:05:84:d7:20:af:
         c9:ef:3b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----