Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
File:                     RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json)
Hash identifier:          yld2LYzZPJq3ISeWJB2bs+rfdVTTBICu1SYgI0tzWvs=
Subject key identifier:   DF:A7:3F:66:EA:F9:B9:A1:66:96:DF:2A:ED:45:FE:A2:28:FF:F1:AC
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Certificate issuer:       /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial:       01962F071AB2A4487B0B115113B44A227C35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
Manifest number:          13FA
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: APSbaMBNwm8jpFXgUB2QidbsIQC1IdtxHGDeeOtIMtM=)
                          2: xmUpqD4NUMAqisL66k_x6MTYnaQ.roa (hash: dGRcbHkgyhvucFtnmzWvrILS2aHk2c8SQDJ6rOX+JL4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1a:b2:a4:48:7b:0b:11:51:13:b4:4a:22:7c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=dfa73f66eaf9b9a16696df2aed45fea228fff1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:78:e0:59:8e:e0:34:e2:52:a9:4d:d7:f7:ed:
                    c6:6f:e2:87:85:20:7e:57:3d:1f:8f:21:21:d0:55:
                    58:32:02:32:a4:00:55:bf:f1:7f:da:c2:0e:0b:fc:
                    79:90:4c:a9:12:a4:96:7d:32:5a:67:c0:a5:c6:9a:
                    ae:ee:20:2c:d1:55:6d:b8:1c:4e:61:df:df:9e:cc:
                    01:7d:1c:01:d4:ad:6a:c6:d9:0a:13:77:be:f0:17:
                    4c:f0:9d:0d:4b:43:b2:51:53:11:6d:30:be:76:55:
                    72:69:2d:2c:6a:97:bb:0a:89:95:9b:39:16:a3:ea:
                    a1:d9:b1:6f:d7:93:0a:fc:ac:97:46:b2:f8:d0:7d:
                    a9:7c:d5:57:81:0f:1e:e5:71:5e:fa:f0:e6:2e:2a:
                    d2:1c:e9:b8:49:0a:d8:b0:23:a2:f6:cf:06:3e:6b:
                    53:5b:82:25:67:76:02:bd:73:9d:b2:fc:cc:a3:1a:
                    af:88:1a:27:9b:31:13:d3:55:f2:ab:30:81:38:7e:
                    40:71:3c:2c:2c:ea:bd:39:0e:0f:96:27:1d:88:9a:
                    71:13:ed:17:88:6c:38:fc:75:08:15:a5:7b:52:6f:
                    7c:59:c3:f6:ca:80:8b:4c:3d:e4:88:34:71:c5:8b:
                    92:26:31:d9:c8:86:31:c1:6e:2b:d3:43:a6:7e:fd:
                    ab:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A7:3F:66:EA:F9:B9:A1:66:96:DF:2A:ED:45:FE:A2:28:FF:F1:AC
            X509v3 Authority Key Identifier:
                keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c1:8d:8b:9e:91:97:eb:fb:ab:b1:b7:9b:55:40:bf:f0:d1:
         5f:ec:ee:1f:77:3b:b0:bf:6f:00:8e:02:fb:d3:a6:b8:fc:3a:
         54:54:9e:24:5a:30:ed:d1:64:6b:37:cb:db:f5:f1:50:39:3e:
         be:70:9a:a8:8a:1b:bf:b9:d9:88:b6:58:c1:26:8e:6e:ab:69:
         85:42:f5:a3:5e:f3:7c:2c:17:b5:eb:9b:50:f5:95:ad:9e:38:
         47:1c:72:c4:bb:f2:cc:47:d5:38:e5:74:81:fe:3e:49:a5:98:
         f5:b7:b7:4e:09:e8:09:22:8f:d5:cc:3a:bf:94:21:eb:9a:b4:
         ef:2d:d3:b8:30:c7:02:ef:cd:ff:2c:35:a1:fc:f1:75:49:16:
         47:91:ea:e4:de:95:d2:d1:82:f0:67:04:02:d1:3f:0d:e9:e4:
         9b:9c:fd:2d:af:be:5d:fb:b1:65:d1:75:b8:f5:41:d0:15:cb:
         d4:ef:96:be:49:e2:8a:d8:82:5d:0a:73:87:2b:0c:6b:14:6f:
         bc:de:b6:c8:cf:7f:e7:85:11:72:eb:e7:00:ac:d8:cf:f0:95:
         70:1e:cf:34:dd:95:07:f0:b7:a0:d2:9e:24:04:a3:2e:2f:6e:
         28:da:f0:84:2e:f4:7f:1c:1f:56:4c:19:c3:66:7d:9a:df:72:
         5f:3d:c8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----