Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File:                     PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier:          RTR1IZtKIM0QEUNe4NbdJwL+VHHDbZT9B2wkyJc+YL8=
Subject key identifier:   44:93:7C:CE:AC:3F:C9:D7:E1:04:37:38:2B:97:DA:41:49:31:A8:B6
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer:       /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial:       01962F74564008ADED7211E9BABD47968BDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number:          01BD
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: ucly9NfiJkepdOjt5TmPMAlZtU5oviz9MZQXrWD++l4=)
                          2: iTxg6a45pQs6yguLKNzKJpXtu1I.roa (hash: IbbuNrBXDC3r/NQaAU8s873gXp019KR8EegJpijUcwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:56:40:08:ad:ed:72:11:e9:ba:bd:47:96:8b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=44937cceac3fc9d7e10437382b97da414931a8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:24:4f:ef:1e:33:53:a0:8e:52:0c:a0:17:
                    e5:09:81:07:36:f5:9e:c3:3f:ed:1a:2b:16:d2:33:
                    03:ea:03:a9:fe:c9:e1:5c:39:d5:83:bb:fc:6e:2f:
                    56:e3:35:1d:54:3c:80:0b:5f:db:4a:72:66:48:89:
                    89:47:40:ea:f8:fc:08:d5:26:73:64:f2:0a:48:af:
                    e6:16:4e:54:64:40:2c:12:4c:1c:a6:09:e7:fc:e8:
                    46:08:0d:87:50:38:42:b7:93:76:8c:cd:f3:6e:64:
                    46:67:58:ef:7e:36:d9:41:02:cb:ae:af:36:84:27:
                    70:c6:06:97:d3:c3:ba:0f:c0:eb:e4:01:88:a9:e3:
                    88:57:d7:71:77:39:c3:1d:9e:0f:54:4e:89:38:77:
                    ea:af:2f:a8:e4:36:0d:69:a5:fc:18:f9:72:fd:65:
                    ff:1b:32:b9:09:75:c3:b1:bd:2a:91:89:57:da:c9:
                    c7:eb:13:9c:91:b2:4d:66:2e:48:3c:57:b4:84:ba:
                    1c:46:ec:dc:61:8a:31:16:c0:5f:b9:43:2f:d4:32:
                    ed:d5:f9:f9:48:94:96:79:f9:ff:3d:1a:14:ea:b9:
                    c0:06:29:c6:d7:0f:42:b2:ed:13:7f:48:66:f9:3c:
                    d8:ab:08:92:70:33:0d:c8:d4:50:62:b1:99:bb:3f:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:93:7C:CE:AC:3F:C9:D7:E1:04:37:38:2B:97:DA:41:49:31:A8:B6
            X509v3 Authority Key Identifier:
                keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:8a:44:62:35:1b:5d:d9:24:1d:69:2c:ef:33:3e:a2:9f:cf:
         12:77:f4:94:57:dd:4f:74:cd:8d:c5:66:1f:0a:ba:5b:ec:c1:
         08:91:f7:9c:07:25:6f:24:ea:f3:80:1b:d3:9c:9e:71:f1:af:
         41:d9:02:9d:00:59:b0:72:5b:22:a2:7a:bd:55:e9:88:85:a8:
         8b:14:f9:8c:d7:b0:81:37:64:d1:68:d8:04:29:db:75:77:15:
         eb:56:bf:48:23:8a:64:e2:b0:3e:91:6f:73:45:35:70:eb:a6:
         ca:8f:8f:37:9b:3c:e1:06:b9:4c:de:4a:34:65:ba:da:14:e1:
         44:bf:c8:20:3e:c9:d3:24:af:23:41:18:88:36:4d:08:b9:b4:
         4b:99:e3:65:0c:bf:71:62:2e:e9:e4:b0:e3:f1:52:f1:8f:34:
         6b:0c:04:6e:3d:74:7a:fa:d9:e1:cc:fd:07:bd:55:f9:76:70:
         32:1a:0f:7a:6c:4f:ec:29:aa:f4:cb:3a:8a:25:82:d3:91:7d:
         96:51:d0:d5:98:a9:5f:a9:c7:75:85:ff:87:13:bd:f5:0b:fc:
         96:66:98:a7:65:90:15:4f:b0:49:66:f9:d7:37:b8:c3:13:8f:
         6e:a5:17:2a:98:61:6d:17:4e:3e:bd:22:08:fb:01:46:1e:0a:
         04:cf:da:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----