Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File:                     0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier:          DQMe7HLg41PiGQI+C8Gr9uHE/pMnsYv+aCkZADPZFDs=
Subject key identifier:   38:CA:06:FF:DB:65:FA:80:C4:68:A6:FC:99:79:1E:D2:44:D9:47:46
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer:       /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial:       01962F06F73378EB094109043A153354C18A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: 5gSM8tTPEuau8L0y3NTVVr55/56JvnkAULkV/AntgDA=)
                          2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
                          3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
                          4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
                          5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
                          6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
                          7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
                          8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f7:33:78:eb:09:41:09:04:3a:15:33:54:c1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=38ca06ffdb65fa80c468a6fc99791ed244d94746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:91:36:28:d3:85:ee:9c:ac:6f:7d:0d:70:76:
                    ec:9c:9e:b6:25:c4:a7:2c:53:1b:ec:1b:cf:7b:66:
                    38:9b:95:cf:dc:69:eb:b2:a2:c0:16:2e:06:6d:e6:
                    1b:45:f1:ba:ec:74:94:b1:c3:41:df:bf:a9:7c:e2:
                    fb:99:15:5d:40:4a:94:0e:e2:60:08:e5:9b:5a:16:
                    93:36:95:26:90:ab:f5:5f:f6:8b:cc:60:ba:79:2d:
                    9c:34:80:ce:bb:2f:44:fd:ae:8e:a1:7f:85:33:92:
                    81:a1:d3:ab:6f:20:0a:b1:99:8f:2c:d5:73:b4:3e:
                    b7:1a:b0:98:4d:cd:dc:c4:52:58:a6:fc:ee:07:5c:
                    0a:52:08:3e:b6:d2:a6:16:f1:c3:52:4e:ce:3b:b4:
                    fd:78:d3:ae:45:49:2c:e7:a6:88:63:ec:b9:99:1d:
                    cb:dc:d9:f9:3e:7f:98:4a:ef:80:92:42:e9:c7:e8:
                    19:f2:e1:3a:04:84:73:38:9b:e9:10:23:3e:53:a7:
                    cc:ff:30:06:95:b5:dc:66:89:2f:2b:4d:5c:ba:96:
                    c2:d4:83:4f:c2:10:d5:f3:f9:33:05:e2:35:7f:8a:
                    2d:88:4a:7a:30:c8:e7:e0:be:e2:70:2a:6d:35:e3:
                    5c:b6:4d:41:46:2b:75:8c:3e:50:39:a4:29:bd:16:
                    0d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CA:06:FF:DB:65:FA:80:C4:68:A6:FC:99:79:1E:D2:44:D9:47:46
            X509v3 Authority Key Identifier:
                keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f0:7f:b3:8e:9b:c7:15:c2:57:9a:9d:76:2e:6b:70:aa:3a:
         a4:d0:70:e3:b5:5f:2b:71:39:28:c6:d9:58:70:f8:c0:7a:03:
         90:15:b9:31:56:cf:76:2c:3f:bb:de:56:c6:a2:77:b9:6f:70:
         76:0c:e6:3a:e5:a2:bc:d1:82:72:7f:e1:71:4c:03:01:df:4f:
         82:46:2e:71:24:2a:05:19:78:ea:a7:8f:23:47:99:90:15:f4:
         ab:e9:b9:ff:fb:88:61:98:e9:23:0f:33:fa:15:25:f4:a6:c3:
         f1:15:e6:c9:c7:47:90:20:06:77:4b:67:14:f6:0c:51:33:d9:
         70:84:2d:76:eb:6e:02:95:33:c1:bd:3a:d2:ad:56:c1:b1:5b:
         e7:89:f0:ba:7d:ee:6c:0f:5c:78:4d:d8:71:d2:79:92:85:8a:
         b3:93:89:13:f1:2e:49:2b:3d:5d:1b:f9:f8:10:86:9e:4e:2a:
         83:dd:b7:ae:30:fb:ad:d8:6f:84:83:2a:c3:4c:7c:24:41:51:
         2a:3a:85:8b:5f:05:a9:9d:78:c3:ea:01:72:bc:41:a1:da:79:
         81:8f:96:92:22:74:5a:02:ea:ac:97:a9:8a:fa:45:49:e5:69:
         23:e8:bd:8b:bd:da:28:35:ed:1d:36:df:e7:52:aa:20:14:0e:
         57:2c:99:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----