Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File:                     ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier:          vMi8a/SfpnnHcg89jsx6G7mRvWVUHJaX091hnLwZB7I=
Subject key identifier:   47:EB:EA:76:1F:A8:46:C9:57:9A:45:70:5C:40:2C:37:52:91:04:3C
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer:       /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial:       01962F74BE47DFD0F5BDEF3EB201F05E6257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=)
                          2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: udcVkZM9EAkQ+X40dTsWsIhOcP/qDvWZUz2DfkSAw9c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:be:47:df:d0:f5:bd:ef:3e:b2:01:f0:5e:62:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=47ebea761fa846c9579a45705c402c375291043c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:73:73:a3:ec:80:36:b2:e2:f9:ed:fb:4f:37:
                    6f:d1:fa:4c:47:b9:d1:54:f9:d8:b2:9c:2b:1c:76:
                    e7:53:f4:0e:16:40:e6:b8:55:af:4a:d3:86:d3:cb:
                    3a:f2:35:06:cb:a3:92:e3:e7:8a:9b:e0:99:af:3c:
                    2e:bc:cd:70:60:18:e9:e3:8b:8e:46:18:3a:8f:11:
                    c7:2b:66:29:d8:14:09:68:4a:92:85:fa:ec:ff:cd:
                    20:57:e2:35:28:7e:2c:fd:8c:76:1c:2f:41:8e:31:
                    f1:5d:b7:b6:cb:f3:f2:40:c9:2e:11:e5:99:71:22:
                    7f:11:f4:bd:1e:da:1f:cb:09:dd:4a:93:87:d3:25:
                    e7:4a:f2:8c:98:64:b2:8f:d5:bd:49:94:d0:85:72:
                    0d:50:b3:4e:7a:65:71:95:63:51:90:f7:e9:f6:57:
                    0a:b9:9b:e3:3e:ae:f8:19:29:80:39:24:8e:37:3c:
                    ab:65:d6:37:76:65:1b:38:0e:8b:09:53:18:a6:4d:
                    20:bb:4b:f1:e4:c4:92:4b:b6:5d:cc:f2:35:86:d2:
                    dd:b4:3e:05:5b:99:9a:1f:64:88:73:8b:ad:1a:8a:
                    b6:34:c6:89:c2:36:b3:26:89:cd:93:c1:9e:c7:db:
                    c0:44:dc:f0:e5:10:66:89:ae:ce:4d:2c:16:68:91:
                    8d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EB:EA:76:1F:A8:46:C9:57:9A:45:70:5C:40:2C:37:52:91:04:3C
            X509v3 Authority Key Identifier:
                keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:37:b6:5b:f1:ad:e0:d6:82:3e:56:c1:b1:f5:dc:3b:b3:a3:
         9e:b9:fb:94:84:39:f3:e5:aa:e6:79:d5:67:73:69:b5:7b:29:
         17:e3:86:e6:66:cb:73:db:9a:79:a9:04:fd:c6:cc:da:c6:e8:
         5f:33:a7:6a:07:47:19:bc:45:ef:76:f0:5a:3c:a7:ae:0b:22:
         18:aa:10:9b:a7:99:ee:83:21:cf:dd:fd:ca:81:e6:c6:91:1c:
         33:0f:f1:43:e3:0a:95:55:c5:a1:a5:cd:2b:3c:45:86:01:95:
         da:23:3b:fb:69:a6:32:60:6d:e2:0f:a2:98:bf:0d:d6:65:cf:
         8f:31:d6:a4:76:57:df:8c:0a:5d:86:dc:7b:c4:af:1c:0f:ad:
         32:e6:81:47:fb:f1:0c:f5:62:48:83:4c:d1:a7:08:a0:29:40:
         39:d2:9f:49:01:94:31:01:b8:3c:88:d5:26:69:1b:5e:f4:ef:
         01:f0:0b:61:94:d3:9e:33:cf:8c:42:d7:fe:6a:c4:dd:55:93:
         0e:b7:a5:64:e0:1e:08:46:1f:f7:89:41:13:8b:01:53:b8:61:
         04:b6:97:4e:2c:d3:e0:c9:14:b9:a4:a0:e3:08:3b:cd:15:bd:
         b8:a8:56:c3:65:cc:9f:3a:d1:e0:a1:79:03:0b:85:2d:3e:36:
         f1:86:4e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----