Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
File:                     o4SlYxesgXmFG1cPDjp6oEToCKY.mft (raw, json)
Hash identifier:          O+bAxjcNfnBsH7Yf3eupAKI8QnshTJyz5PalOxtkH0c=
Subject key identifier:   8F:6C:A5:33:EC:33:0B:D9:59:91:41:E6:AC:8F:E6:C9:EE:B1:87:09
Authority key identifier: A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
Certificate issuer:       /CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Certificate serial:       01962ECFD47C327729DFA6B073B319B0A922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
Manifest number:          030B
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: K7qTK9pIyiEZfe3oYQ_ZP0X2yEA.roa (hash: aRm9dSDweAWyai2Lyi7lBDWMUI5ncN0CehfI1VhjASU=)
                          2: o4SlYxesgXmFG1cPDjp6oEToCKY.crl (hash: wCCdB8JEiPQprgdHxqzX0s+13KTJC3Ef1+FyeyOZVhc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d4:7c:32:77:29:df:a6:b0:73:b3:19:b0:a9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a384a56317ac8179851b570f0e3a7aa044e808a6
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=8f6ca533ec330bd9599141e6ac8fe6c9eeb18709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:53:6d:34:ff:82:23:bb:41:ac:56:5c:f1:
                    ba:45:4f:36:6b:75:67:51:eb:13:e0:7e:68:70:85:
                    4d:90:96:a7:33:73:78:92:c2:78:20:07:bf:eb:be:
                    54:9a:ff:07:cb:38:73:84:51:d1:22:c1:8c:30:ab:
                    23:f7:49:9e:ee:cd:52:3d:0b:e4:b1:47:98:d5:9c:
                    61:ff:79:80:6f:54:c9:7f:c5:2b:14:69:33:97:10:
                    98:32:d6:ef:45:5a:91:0e:26:2a:ea:b7:69:d7:8f:
                    05:1e:8b:76:d5:48:bd:a3:b5:78:8d:fe:a7:ad:9f:
                    ac:41:e0:8f:1a:25:12:97:f3:06:eb:36:ee:76:f5:
                    04:28:38:e5:92:37:e4:85:f9:94:2d:47:6e:26:c4:
                    f3:21:7b:4a:89:26:cc:c9:10:86:0b:f5:b3:c0:75:
                    3e:df:a2:2d:01:b2:3c:91:06:f7:cd:a7:c8:22:6b:
                    29:5b:f4:cf:d2:f1:60:3a:c5:04:1a:1e:ca:09:b4:
                    a1:26:b1:19:d4:76:78:9b:36:13:27:2a:61:e5:6f:
                    51:c4:66:5c:2d:ca:9a:bb:2e:a8:4e:64:87:54:bc:
                    e6:3c:f6:9d:10:14:68:27:a8:55:02:51:3a:b2:66:
                    8e:d9:a3:9a:b0:8a:99:e0:75:39:7d:a7:0a:29:ca:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6C:A5:33:EC:33:0B:D9:59:91:41:E6:AC:8F:E6:C9:EE:B1:87:09
            X509v3 Authority Key Identifier:
                keyid:A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:44:91:93:98:0c:24:3e:a8:1f:cd:8d:4a:d0:b8:3e:d0:55:
         3c:91:d7:68:d6:fb:fb:38:6f:58:19:6c:f2:cb:00:00:d5:f2:
         60:b2:30:61:98:cc:48:6e:4c:b1:ec:08:eb:11:f3:ad:21:05:
         8d:0e:f9:79:76:86:4b:a6:ca:22:6f:2b:d0:8e:1d:69:4b:c4:
         a6:0c:c3:52:a5:c5:cc:a6:18:9c:c1:cd:91:c3:46:30:58:a1:
         37:2c:fd:8f:b0:2d:bb:b8:af:7a:33:0b:b1:70:79:06:13:19:
         6e:f6:90:36:14:20:44:20:b1:08:1e:8c:cf:b9:06:33:59:7f:
         62:fe:0c:17:67:95:b1:63:75:b2:63:04:c2:65:c1:d0:c1:24:
         03:c5:7c:5f:23:84:5d:b3:70:6a:1b:32:de:d6:ca:4f:e4:d7:
         2b:5e:27:f0:68:93:9b:65:fd:31:17:a0:3f:fb:f7:1d:62:32:
         3e:53:f1:a5:d0:7c:ca:19:ad:88:7e:6f:00:a3:ed:0d:56:ee:
         9f:14:e2:d2:34:07:61:04:14:8e:dc:b6:e6:f6:02:6a:df:13:
         fa:f2:3c:e9:12:5f:9e:36:41:79:62:ce:2f:5c:e4:8f:17:f6:
         f6:14:1f:86:af:78:48:af:59:97:29:49:64:0b:5d:70:a6:a5:
         78:74:e0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----