Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
File:                     T2F9awPi_l-JEcvrX64tyjvWZ38.mft (raw, json)
Hash identifier:          OLHpNSfhURWk6pq1V63TjJ4XQHxAgd7q419rSkvouRw=
Subject key identifier:   7D:C8:0C:78:F9:54:6B:18:F4:CD:48:29:31:10:A4:B1:9A:01:AD:AD
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Certificate issuer:       /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial:       01962F3D4660D5C0B7F52713EB789D995931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
Manifest number:          11CB
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: NwaNp5L0RusVDFFM4pIExblfTEU.roa (hash: B2/PCGdwG+WPaQH+f8v2+xUGdjLlo6CPicFBvC+Ii04=)
                          2: T2F9awPi_l-JEcvrX64tyjvWZ38.crl (hash: GbGuhS3ilV/RCsCn0EBXD2Xa+VKFge8LnOquNEo7r4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:46:60:d5:c0:b7:f5:27:13:eb:78:9d:99:59:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=7dc80c78f9546b18f4cd48293110a4b19a01adad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:fd:9b:17:05:b2:6b:98:27:17:1f:e7:5d:
                    6f:da:8f:bd:d3:d2:ce:b5:a3:2a:ed:ac:df:44:28:
                    4b:47:91:10:2b:cb:3b:c9:33:b9:cf:0b:2d:58:39:
                    77:84:60:7d:d2:08:22:97:6a:d4:28:8a:0d:01:28:
                    95:44:ee:86:80:13:bd:9a:22:55:99:07:88:4e:dc:
                    2f:a5:fc:b7:bb:6a:0d:a5:90:40:12:96:c2:d7:77:
                    41:37:90:33:29:39:49:28:64:13:4b:8f:0d:a9:c5:
                    e1:9a:4f:7b:3d:04:9f:7f:cc:4b:d4:3c:3c:c0:ac:
                    e7:0a:df:f0:46:a4:2b:35:a7:5b:86:62:f9:1a:ea:
                    44:69:86:88:ac:e8:58:bb:08:3a:48:22:89:bb:7d:
                    94:43:38:92:59:4d:75:ef:03:82:ab:98:96:35:66:
                    1a:26:73:08:45:c7:9d:c5:ff:2f:e0:29:60:98:b1:
                    61:37:e3:44:3a:24:7d:2c:20:7f:5e:83:99:89:5a:
                    ad:1c:60:1e:99:54:c0:6c:4d:f5:43:52:4c:bc:7f:
                    e0:bb:e4:26:f6:0d:54:65:a3:4b:bf:aa:54:8e:a1:
                    96:6d:07:0e:aa:34:dd:66:dc:90:b4:da:ff:01:21:
                    2b:a2:f4:18:36:61:26:1c:8e:85:71:c2:7a:d4:00:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C8:0C:78:F9:54:6B:18:F4:CD:48:29:31:10:A4:B1:9A:01:AD:AD
            X509v3 Authority Key Identifier:
                keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:80:26:00:e0:b9:9a:80:7b:04:3d:bb:d9:40:db:70:dc:ef:
         40:d6:8c:f7:bd:ac:23:c7:eb:42:a6:a4:86:ad:07:09:33:fa:
         d4:61:7e:41:55:ba:92:21:53:cf:7b:d7:c9:45:a8:83:07:c2:
         63:02:ac:eb:99:24:5a:09:6a:e4:1f:41:92:fd:47:a8:29:f5:
         10:6e:99:b9:98:c1:c5:67:26:93:b5:9b:68:5f:02:c2:1c:0e:
         9d:0d:f5:e5:3b:b0:4b:7c:42:1f:b3:a7:e1:23:60:e6:22:71:
         97:2f:32:ce:a5:b9:67:44:be:4f:4a:14:39:d7:b6:9d:9d:1b:
         68:0e:c5:fb:0b:a8:0e:bd:16:5b:ee:b3:b3:ff:a7:bb:b1:08:
         95:b7:e7:b7:87:c1:85:62:c6:e1:4f:be:b9:14:a2:53:96:7b:
         b1:06:27:02:85:cf:8a:37:24:c5:e9:9a:dc:c4:ab:44:ee:34:
         bf:15:ba:15:e2:76:02:ea:07:96:17:81:c4:67:da:ad:11:c4:
         e5:99:88:6a:13:bc:bb:cc:10:0d:8e:01:6a:b9:6f:6c:ca:75:
         b7:bb:35:74:f7:6e:71:50:82:34:d2:ba:17:f1:1a:16:4a:d0:
         e2:50:f6:b3:63:a3:36:f3:04:00:0d:d2:4e:95:74:ad:f3:f5:
         fd:84:a8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----