Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
File:                     CDMy0vYHhPErstIQrsgKtBu_EVk.mft (raw, json)
Hash identifier:          ZwG/rGTrUu4X5MmlSzH7FCxLlrG000QZRyo4jKOBT5M=
Subject key identifier:   F1:DF:C9:80:4D:9E:99:55:80:DE:8D:85:A8:26:B1:37:48:BB:9F:9C
Authority key identifier: 08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59
Certificate issuer:       /CN=083332d2f60784f12bb2d210aec80ab41bbf1159
Certificate serial:       01962F07022EB4C5EA8B4B619C62FDCBEDA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
Manifest number:          0CDE
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: CDMy0vYHhPErstIQrsgKtBu_EVk.crl (hash: fIioFOtcK06bLOEqFao0ULTlKkIqbihXV82/Ya+RE30=)
                          2: q4mxRw2cAHFj9M7Ih5d-g_-dD-s.roa (hash: 8Y6K+beCDjCkbb41/Xu0GZqKC19CcyaH+HxETt6eMGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:02:2e:b4:c5:ea:8b:4b:61:9c:62:fd:cb:ed:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=083332d2f60784f12bb2d210aec80ab41bbf1159
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=f1dfc9804d9e995580de8d85a826b13748bb9f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b6:c6:d7:f9:e3:f0:1b:b7:19:8d:38:7d:13:
                    ad:55:74:02:71:ea:83:ce:4a:09:8b:6a:cd:a8:41:
                    34:79:e8:4a:94:17:ea:72:20:e2:be:66:e9:c0:81:
                    31:a8:63:d7:87:e9:82:b2:c6:42:dc:ef:bf:62:06:
                    3d:99:1c:7b:4f:bb:5d:7b:6d:54:1f:da:df:09:e1:
                    1c:f4:d6:04:5d:98:e6:20:b3:e1:ec:63:58:70:32:
                    64:e5:95:b2:e7:14:c2:fd:ac:ea:b1:5e:c2:0c:b1:
                    31:fd:ae:41:97:2b:91:50:98:d3:f0:fd:87:e5:1c:
                    97:17:5f:ef:d6:d6:34:ff:c7:e3:6d:c1:7c:1d:ca:
                    2e:f6:ba:99:6c:07:7d:2a:6f:9c:f4:e7:2d:bb:c6:
                    3e:27:3c:f3:6a:80:63:0b:68:65:3f:9e:e2:d9:41:
                    aa:c9:45:83:a0:ae:c9:08:b6:4f:e5:51:dd:c1:03:
                    76:5d:0c:ec:41:63:f6:db:0a:3b:a6:05:32:7d:91:
                    a3:bc:37:f3:46:b2:52:b5:95:85:89:78:6f:90:52:
                    95:43:f2:99:96:f5:1d:05:a1:39:23:36:2d:83:ba:
                    43:4a:4d:0e:7e:f2:dc:5c:93:5f:14:b2:75:95:d5:
                    f1:21:62:c0:5f:37:ee:9b:ec:3d:0f:40:ea:79:ac:
                    04:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DF:C9:80:4D:9E:99:55:80:DE:8D:85:A8:26:B1:37:48:BB:9F:9C
            X509v3 Authority Key Identifier:
                keyid:08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:21:15:df:22:19:a8:8a:b8:9a:18:71:1d:17:0a:88:5d:37:
         26:cb:83:af:57:f3:0d:95:9f:18:cb:04:2d:41:57:7d:09:ea:
         3d:dc:d8:52:8d:33:58:e6:fe:0e:94:a7:9d:cb:8e:61:f1:dc:
         cb:60:c4:60:cb:07:e7:20:ad:32:38:43:81:9e:bb:35:5d:3d:
         10:00:ac:90:16:25:7d:5e:b3:d4:f0:49:19:52:40:f0:53:f0:
         a5:6f:36:36:56:4c:c0:ce:00:66:03:5e:03:e3:5f:f0:86:1a:
         fb:ce:6b:e4:4b:4c:97:3c:84:d7:29:98:30:4c:3a:2c:34:38:
         2c:80:f6:bc:6c:b1:9c:07:f8:9a:44:68:da:98:eb:1f:cb:cf:
         96:8a:64:d2:82:b1:1c:f4:58:5e:27:b9:d8:f0:31:bc:6e:3b:
         32:1f:c1:e1:9d:f7:ac:6d:0a:b8:83:30:0e:1d:2e:d1:a0:ea:
         7a:f6:3f:c7:9a:b2:93:2c:3d:9a:17:8a:be:17:3b:12:4e:c2:
         b1:d3:d2:0c:b5:bf:ce:0b:eb:61:7c:99:d3:89:84:c1:ae:0d:
         c5:00:5b:69:ae:a6:86:bf:e3:ad:eb:d9:3b:24:88:57:05:87:
         da:a4:f9:7b:5e:2b:a0:b2:ba:96:6e:5e:ea:55:60:26:f4:e4:
         e3:1f:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----