Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
File:                     cG_6qbf85AgnGBpaoKzumaRmkVY.mft (raw, json)
Hash identifier:          qQwv6m1SEcZzr5vNyQzBC1bkwNNJf6YCGh394vJrLUE=
Subject key identifier:   53:CB:42:D7:B1:FD:A2:46:20:49:6F:FF:EE:F0:AB:7D:52:2E:A8:4F
Authority key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Certificate issuer:       /CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Certificate serial:       01962F067FD75794BF857B19AA284FB930AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
Manifest number:          0A2E
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: cG_6qbf85AgnGBpaoKzumaRmkVY.crl (hash: fsoLoeIUGcYzKRl3iFzHMCdJ98s8nSNC5l0FUdXTsk0=)
                          2: wHLema0UGStCVJFXioCOp9yM9Yk.roa (hash: 9o2chTlhKcvV8PSsEOhRoW59X68c/vtOe1+mp0bUcck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7f:d7:57:94:bf:85:7b:19:aa:28:4f:b9:30:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=53cb42d7b1fda24620496fffeef0ab7d522ea84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:eb:d3:4b:1d:9c:31:49:fd:1a:90:68:8c:
                    94:2c:8e:23:fb:22:85:c3:54:46:1a:d1:3c:50:98:
                    f0:bb:6f:1a:76:59:7e:54:63:28:f9:f5:b4:d0:fa:
                    88:08:c3:e5:05:02:8a:22:47:6f:95:90:89:1c:70:
                    76:13:d6:b6:e2:87:8c:5b:94:91:6e:83:c8:04:21:
                    5f:77:07:fa:23:22:18:f8:a9:d5:15:78:76:27:1e:
                    75:1e:c8:10:da:78:39:1d:db:ab:f6:f6:14:4a:73:
                    0e:e3:ce:5e:0f:54:60:d2:d5:5b:2c:27:a6:70:fa:
                    8d:c6:b2:71:d6:ca:cc:9a:97:78:2d:05:df:cc:6d:
                    99:b2:23:be:36:4a:b0:06:87:f9:7c:21:8b:f2:3b:
                    a5:70:22:9a:66:a5:97:14:4d:f4:c1:20:21:ff:c3:
                    64:9b:7f:5b:71:eb:fc:ba:c7:37:ab:a3:f9:de:7d:
                    00:d2:7e:14:1f:e3:87:52:0f:16:82:40:d1:59:a6:
                    ab:12:69:ce:29:6d:6f:fa:8c:49:ac:f1:db:d7:d2:
                    e0:22:7e:5e:90:64:7a:9a:b0:86:49:ab:97:d2:f3:
                    3a:72:7b:df:60:b7:3c:cf:ea:ca:0d:af:37:3e:23:
                    c4:33:9a:f0:e3:b8:dc:db:47:43:71:fa:8a:22:7f:
                    e2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CB:42:D7:B1:FD:A2:46:20:49:6F:FF:EE:F0:AB:7D:52:2E:A8:4F
            X509v3 Authority Key Identifier:
                keyid:70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:12:c4:f7:18:20:6c:05:73:c9:ed:da:dd:35:eb:5a:27:91:
         02:01:62:b4:42:03:21:20:f1:f4:89:7d:4c:d0:71:79:44:b2:
         a1:04:8f:5b:e9:bb:1a:a9:55:73:53:15:9c:5d:d6:5a:41:24:
         9a:96:d9:93:f0:2d:8b:e7:90:67:fe:f5:cf:a6:0e:4d:b6:4d:
         5c:c9:3a:59:51:00:8e:f1:58:85:25:48:8e:2b:7b:eb:ac:42:
         5d:e0:fa:c5:14:ee:ce:99:de:e9:b4:e1:56:55:1e:1d:39:2f:
         bb:0e:41:64:e3:dc:2f:30:81:cd:c4:80:7c:e5:e4:97:46:a7:
         d9:6c:b8:79:f0:e6:da:aa:50:7f:c7:b8:07:e7:c0:4a:1a:6d:
         22:08:c6:b8:c5:52:f9:47:0d:37:3c:93:bd:59:cf:df:9a:01:
         82:f5:e8:4f:46:d7:00:5d:ab:66:7b:12:7f:00:ac:19:23:d7:
         b4:5e:78:52:e2:30:da:27:60:ec:08:fd:c5:2b:65:7f:b8:e7:
         f9:46:e9:aa:74:df:a4:b1:a7:bd:5c:cb:b4:ee:e4:fa:9d:ac:
         55:65:c2:d8:54:1d:49:2f:78:28:e6:17:eb:df:55:96:98:5c:
         57:c3:42:c1:a1:21:44:c3:7b:7d:37:d1:30:4a:4d:39:ee:17:
         ca:42:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----