Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
File:                     g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json)
Hash identifier:          LdLfQYCkVt3AuKZJUJeySzRtu2akupk5d2EAta+sQ2g=
Subject key identifier:   F5:B6:B1:4B:57:B1:E3:CA:8F:DA:20:56:D6:7E:EF:8A:31:CC:D7:AF
Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
Certificate issuer:       /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Certificate serial:       01962E61C7332FFDCB23C72423B2D532F370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
Manifest number:          1002
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: W3rPvUkflCFuxF0ug4dEXW6S2Kc.roa (hash: 3G2s7uZotQeaUTGQLu0pJAmRVfSsV9ARqhmMaAPkMDY=)
                          2: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: ueSnJJPALyu2FWDLJiHj2aspMm/YqrMuLj+UlwRKxWM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c7:33:2f:fd:cb:23:c7:24:23:b2:d5:32:f3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=f5b6b14b57b1e3ca8fda2056d67eef8a31ccd7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:dd:20:fc:b5:24:3c:7e:16:17:35:57:07:29:
                    6a:79:8c:fe:17:9b:36:75:50:85:53:b1:80:72:f9:
                    b5:a2:d8:f9:9c:cf:31:01:3a:ba:4d:ee:f8:a0:79:
                    6b:d2:db:ed:9a:43:75:f6:10:20:56:79:5e:80:78:
                    e1:ea:96:95:e2:e2:00:9a:57:41:68:1b:7f:da:2d:
                    17:ee:bf:3c:67:5e:0b:05:f9:cd:5d:19:d5:30:71:
                    d6:34:84:4f:84:e5:d4:73:3a:48:b0:62:8c:76:b5:
                    58:d0:60:d3:21:d2:76:01:34:26:5f:03:c3:91:e0:
                    ca:18:7d:61:f7:31:c0:8e:36:4c:3b:0f:38:9d:30:
                    fa:5e:98:ec:bc:6f:60:a4:68:1c:10:7d:2a:01:be:
                    ec:d7:1e:50:b6:4c:00:aa:ea:ec:8b:a9:82:b5:60:
                    a0:f8:2e:30:58:ca:8c:8d:36:b4:27:d6:6f:15:f6:
                    b7:b1:9d:3a:c2:d8:6d:17:0a:71:b2:ea:56:4d:b8:
                    a5:8e:d0:3f:d9:8d:c1:15:d5:03:bd:ca:3f:b1:3c:
                    dc:35:d5:de:07:aa:12:f9:1e:51:ca:bd:46:fa:d8:
                    9c:d5:c6:a6:13:b7:a6:5c:5c:02:c7:cb:78:c7:58:
                    6a:1e:bb:96:63:0c:7b:0a:f1:88:13:06:84:a3:8d:
                    f1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B6:B1:4B:57:B1:E3:CA:8F:DA:20:56:D6:7E:EF:8A:31:CC:D7:AF
            X509v3 Authority Key Identifier:
                keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6d:ac:0b:96:94:bc:6c:e8:03:ea:ab:85:13:d3:45:d5:e9:
         3a:29:ec:85:bb:e2:61:49:9e:44:bf:f1:e1:74:35:43:15:c5:
         ea:7a:dc:4c:c9:ba:48:08:b7:a7:72:23:b6:21:d9:74:ff:a0:
         de:e9:1c:18:d5:f9:ab:2a:f0:d6:40:2a:cb:f0:bc:de:93:30:
         48:26:28:d2:11:56:24:65:21:2c:6c:ad:84:bd:26:b8:75:45:
         78:ef:90:28:5a:6a:b2:6a:af:9a:e9:54:69:04:92:1d:ee:8e:
         68:15:ca:40:ec:1d:3c:bd:b0:38:6d:b6:7d:2c:36:f6:5d:4d:
         12:69:6c:e3:8b:d8:61:f0:a3:2a:d0:fa:b3:41:61:0d:c1:e3:
         20:a9:b1:75:ee:b0:9c:56:55:da:60:9e:30:87:af:1f:7d:8c:
         c8:93:92:7e:6f:39:97:41:0d:ec:c9:21:f1:3b:b7:15:ef:63:
         d4:49:f1:01:e5:66:9b:b8:81:e6:16:a3:27:2b:84:7b:01:56:
         53:74:95:43:ba:4d:2f:f3:5d:b6:41:22:eb:8a:74:3b:81:32:
         15:d7:d5:7e:16:00:65:b3:8c:1f:19:4b:d2:6d:ce:e7:31:85:
         05:ee:8e:09:79:e2:59:64:4c:56:59:3a:6a:55:cf:1b:33:23:
         17:c0:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----