Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File:                     pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier:          khQ4Cvp/0+CwAoLGe9ahnl3tPu7HmRQUMe2u7OgyRUI=
Subject key identifier:   81:EF:DC:6B:8B:B1:98:F1:94:ED:0F:74:5F:69:EC:EC:70:03:C3:2F
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer:       /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial:       01962F744CCD15D8305EC04CD6E46FB61E4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: n9dwnfECzB0z5vxTabmRciXN14zDMT0kMDDsCCkyOBg=)
                          2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4c:cd:15:d8:30:5e:c0:4c:d6:e4:6f:b6:1e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=81efdc6b8bb198f194ed0f745f69ecec7003c32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d9:1d:67:bb:dd:e4:18:33:a8:63:54:b6:c2:
                    b2:52:26:fd:4a:54:3c:46:74:41:72:75:03:52:c1:
                    b0:18:fe:67:3a:39:bf:cf:79:14:97:5e:c2:4c:d3:
                    be:5e:81:9e:ac:4e:e2:74:ae:70:c3:4e:bd:aa:75:
                    f2:bd:0b:e2:15:85:47:f6:0f:e1:a5:1e:1f:d9:06:
                    e4:41:27:6d:8b:a0:6e:93:24:ae:0f:d5:99:92:5d:
                    5b:d6:b7:54:24:da:c4:bd:4d:63:63:ce:65:e6:94:
                    41:ad:23:51:d3:c0:83:13:98:84:32:43:3e:e9:b0:
                    82:03:eb:60:fc:09:29:7f:90:45:4f:70:c5:1c:0b:
                    db:be:53:c2:c0:f9:f2:97:65:b2:e9:38:3c:dc:bf:
                    ed:b0:cf:e2:1e:75:28:ac:71:55:37:b2:25:3c:7c:
                    3c:12:3c:74:87:9b:17:e0:fa:31:cb:fe:27:b3:83:
                    c1:4e:77:b8:c6:53:20:a5:36:71:62:c8:1b:1e:1d:
                    d7:a5:6c:3e:05:4f:29:a8:df:2a:38:55:18:7d:bf:
                    1a:f6:b5:e4:b9:1d:16:e1:2f:f3:93:05:34:33:0e:
                    48:a8:99:60:c9:b6:4b:90:a6:84:90:5c:63:5f:28:
                    21:99:5e:51:4e:79:2c:75:d3:61:a8:23:9c:74:f6:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EF:DC:6B:8B:B1:98:F1:94:ED:0F:74:5F:69:EC:EC:70:03:C3:2F
            X509v3 Authority Key Identifier:
                keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:40:07:01:68:fd:58:0c:b7:5e:06:bd:70:6f:cc:48:4f:8e:
         f7:f4:35:60:58:d7:bc:9d:4b:cc:70:96:5a:5f:03:8d:84:f4:
         c3:94:45:ce:0f:52:36:e3:fe:72:b5:8b:67:e4:a2:ca:e1:47:
         5f:90:b7:4a:60:86:70:1f:fe:8f:a1:7b:f3:f3:67:04:85:94:
         e4:fa:28:08:75:f1:37:57:6b:14:fb:83:7a:ce:34:b4:8a:13:
         f6:7b:43:1f:4f:ba:25:d5:57:b8:50:0c:d6:2e:db:46:b0:d7:
         53:fa:07:11:a7:3e:4d:3d:58:d4:bb:47:f2:6d:07:e9:e4:ff:
         5d:b9:96:75:97:e5:20:36:8b:bd:cc:ae:4d:39:cc:79:39:36:
         e4:6d:29:f6:b4:e6:9e:08:71:6e:d8:7e:36:98:5a:a3:fd:02:
         5e:ea:3a:86:47:3a:47:e1:7e:ba:81:cc:c6:7b:25:cd:a4:11:
         20:5d:69:e3:6f:8e:98:43:6e:e6:61:9e:cc:e8:f1:53:71:ae:
         7c:09:15:6b:63:45:94:86:bf:9b:76:b0:3e:c5:4c:b6:9b:e1:
         56:87:6f:1d:3f:97:8e:66:9e:1f:7f:fa:6f:60:f0:b3:03:f0:
         40:54:90:2a:db:f4:eb:2e:53:9d:79:7e:bf:cd:e4:15:fb:b3:
         7d:a3:8f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----