Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
File:                     RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json)
Hash identifier:          xFKxW/4cbREnXh4dEuwllVjZ8l+bFdZ/no/LlTy2EuU=
Subject key identifier:   83:74:95:B1:1D:86:23:82:85:23:FC:DE:64:4A:73:8F:3F:29:D9:7D
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Certificate issuer:       /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial:       01962F3D8A5E2623623CE40E5C6E8202F53B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
Manifest number:          07B9
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: IoWApYhOxVomHgy4Fx2-jrx61Zo.roa (hash: 2uCskjnfoZqh1VsnqhjGmG830eQNnYhl1PL8LlzJ7CQ=)
                          2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: A0O5rMthNb4icX1gZzvTsRVH+hCd8tYCmgnCRKbOwYQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8a:5e:26:23:62:3c:e4:0e:5c:6e:82:02:f5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=837495b11d8623828523fcde644a738f3f29d97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:8d:bf:a6:e8:ed:5f:b2:4c:55:dd:e5:08:
                    a3:fd:de:1a:15:af:ad:6e:d6:80:4b:c3:97:4e:e8:
                    52:3f:c4:68:b8:f0:1b:db:8c:ba:d1:24:2d:ed:e6:
                    91:a6:c8:d1:92:59:1f:70:18:c9:60:7c:cd:f6:20:
                    25:04:00:67:77:cd:39:80:03:d7:e2:83:bd:7f:07:
                    57:30:78:96:b1:66:59:d7:cc:53:82:1d:61:f0:b7:
                    0b:72:75:96:59:9c:79:a9:09:eb:9c:15:d6:6b:72:
                    af:47:4a:80:be:1c:6a:d6:f2:4e:32:fe:e2:53:4d:
                    4d:37:a3:ef:21:d6:ad:2c:e4:0b:a5:02:72:be:d1:
                    e3:2d:cc:77:16:95:8c:1d:f0:c4:6f:c9:39:9c:5a:
                    d2:02:32:fd:50:d6:e8:fa:fe:f1:eb:8f:ac:e6:b8:
                    86:e6:9c:0f:76:06:b0:42:44:fb:ff:e0:ba:8b:52:
                    9a:09:5a:62:0a:71:d2:b3:aa:69:b6:25:3b:37:d9:
                    47:57:a3:12:9e:3c:ad:0d:fe:1f:34:6e:f7:dc:c1:
                    61:90:5c:54:15:87:34:98:ab:19:a0:86:d2:70:fb:
                    f2:6f:97:56:42:18:5c:64:fc:ec:a2:9c:1c:93:aa:
                    41:91:21:70:3a:9b:5a:12:3d:9b:c4:92:2f:7a:d1:
                    53:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:74:95:B1:1D:86:23:82:85:23:FC:DE:64:4A:73:8F:3F:29:D9:7D
            X509v3 Authority Key Identifier:
                keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:9a:a2:4e:a1:a3:5c:00:2a:93:30:d4:2e:35:24:46:b6:1d:
         19:ed:b4:2e:3c:af:77:53:4c:be:39:54:25:ad:74:11:c2:cd:
         5e:b8:e0:18:66:e4:05:8b:5e:c6:e9:25:35:c2:62:ea:c3:0e:
         d1:69:c5:53:68:15:f2:ad:41:c2:ef:62:cc:20:bc:89:e9:ae:
         9b:02:4c:b0:40:50:2f:3b:00:6e:d1:a4:65:c9:22:55:0f:2d:
         12:48:31:01:fb:24:9d:81:56:3d:15:ab:c0:93:c1:a4:03:ed:
         59:af:4c:04:46:5c:32:a1:51:5c:a7:43:86:ae:da:ef:75:af:
         f7:03:9e:04:a2:c0:2c:ce:3b:85:b8:6e:fb:55:37:84:37:15:
         0b:6f:c8:84:78:fa:c3:da:b3:1a:a0:65:2e:fa:8b:8c:12:91:
         65:cb:a3:17:90:e4:80:e2:3a:da:ef:1e:21:fd:37:b6:ee:62:
         01:9c:55:8a:e0:a0:51:4b:53:41:cf:c2:11:fe:57:a6:a4:44:
         88:f5:69:8f:fe:82:65:9e:66:73:28:da:1c:a0:8b:91:bc:f8:
         00:05:d9:df:23:b6:d6:9a:72:15:9f:95:3a:36:ed:b6:eb:59:
         31:89:71:a8:e1:3c:b8:cd:7b:d7:8c:52:9e:ab:c8:b9:69:de:
         f6:71:5a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----