Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File:                     gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier:          FOq9FnlRLWm8qxJ05bTGrf/ybI8EBu8gMRfOyb2yJBs=
Subject key identifier:   33:4C:59:4E:36:88:FC:09:1A:74:C5:4F:16:5A:75:5A:40:75:8A:2E
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer:       /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial:       01962DF3D9EE6D2AD37754ADDA17D4AF5FAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number:          0B40
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: _f2qtSqsuNVRAf2aMYbbvbg8ymw.roa (hash: 4sGopdLUwHqj2GkqogChdlm5xcViRd2S6Xz6oo4SiLA=)
                          2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: HocWgrSzoc7kcsK+efsZVZchOAxbmNwAyw098uytWxc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d9:ee:6d:2a:d3:77:54:ad:da:17:d4:af:5f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=334c594e3688fc091a74c54f165a755a40758a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:49:21:37:61:a5:d2:84:76:af:4d:b8:df:
                    a4:49:f1:17:4d:d2:58:8c:80:cb:f2:eb:ce:73:b1:
                    e8:ce:d3:6a:5a:ee:95:77:a0:6f:0c:9f:dd:6c:c0:
                    76:59:f7:d0:18:12:f4:0e:66:8a:0f:15:2b:3a:cc:
                    27:98:94:2f:52:68:ad:be:9b:6f:dc:b7:d6:92:e1:
                    6d:58:4b:72:dd:dd:6e:55:58:4b:be:13:99:6b:56:
                    dc:38:8a:e9:69:ac:10:6f:7c:fe:c6:36:9b:44:d8:
                    57:af:63:3c:07:4a:a8:c4:e7:c6:67:11:30:c3:61:
                    97:b7:3d:00:6f:8f:4b:23:c0:1b:1e:0a:fe:ec:f5:
                    0f:23:8b:08:2d:33:28:6e:31:8e:2e:f6:aa:11:58:
                    f7:26:35:4a:63:18:7b:18:24:03:5b:87:02:b5:54:
                    4c:fd:4d:f8:bc:5b:b9:7b:d5:e8:d2:3c:51:03:3b:
                    8d:33:9f:37:4d:0b:83:1c:ea:82:95:75:cb:1f:ff:
                    84:24:66:6e:03:59:39:a2:e1:9a:f6:b3:3b:e0:65:
                    f4:4a:c8:d9:de:cf:a9:4c:3b:8c:37:6e:ba:c6:d5:
                    9f:b3:c9:b7:63:a0:28:08:7f:1b:0d:72:4a:c9:2d:
                    d4:7b:d5:6b:2e:bd:c5:ac:24:80:68:7b:f2:df:24:
                    0c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4C:59:4E:36:88:FC:09:1A:74:C5:4F:16:5A:75:5A:40:75:8A:2E
            X509v3 Authority Key Identifier:
                keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d0:83:ef:54:d5:75:8e:15:5e:c9:57:27:65:dd:ff:94:fc:
         dc:e9:c1:b6:2d:d6:57:2d:f6:47:7e:df:4a:05:8d:df:40:f8:
         27:8c:1f:20:91:ef:fb:5b:c5:35:d4:7e:f8:94:71:e5:43:c6:
         2a:fe:65:68:98:a7:9a:df:26:09:c6:04:b3:82:45:82:60:8c:
         ff:29:6b:ef:96:93:78:e0:18:3d:46:25:08:c4:87:31:99:56:
         b0:e4:b6:1d:58:31:2f:5e:46:36:23:41:c7:9c:4c:06:50:f2:
         d0:2f:a5:d3:33:08:7c:69:e5:70:2b:e3:07:7d:10:00:5d:5f:
         fd:f1:f3:f9:c0:8f:52:02:f9:04:17:87:3d:66:52:e7:59:e7:
         82:37:26:a6:60:83:80:90:95:98:52:a4:19:ed:c1:20:34:89:
         5c:b0:f8:9e:76:b9:dd:43:9c:3f:48:d7:ba:93:c2:9f:51:81:
         a4:a6:32:21:6e:d5:cb:f4:9c:d4:a8:17:f6:b4:0d:e4:05:27:
         cd:70:70:5a:7d:ed:11:04:e8:a4:92:35:d5:47:29:a3:54:90:
         a7:89:d5:d3:49:3d:02:9b:07:07:bf:fc:c7:f8:32:72:d3:f3:
         be:f8:53:d2:39:77:42:3e:e9:86:e6:3d:64:e0:4d:a6:a9:ec:
         ee:46:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----