Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
File:                     sda67LY65G_uowyrhiHUbFn3KAg.mft (raw, json)
Hash identifier:          1NXRra4rBS1eGevS2m/U0V1Yn/HzId3OzoTuModaWxY=
Subject key identifier:   D7:D9:DB:47:37:77:CE:70:31:87:E2:ED:DF:BE:AF:D8:BB:F9:3F:AA
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Certificate issuer:       /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial:       01962E2AC2A541C683247D443279B387D657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
Manifest number:          123B
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: LM0g69HtGp_batQfV5x1NEUMmOk.roa (hash: 7VtBpd+wuDX24L0fq4Y7fsMl9oygXrzXXYzNLlqhtLg=)
                          2: sda67LY65G_uowyrhiHUbFn3KAg.crl (hash: Jb7ozArDCKQ3p+IZx8zRy/IzG2bv90wDHw51zkYeOws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c2:a5:41:c6:83:24:7d:44:32:79:b3:87:d6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=d7d9db473777ce703187e2eddfbeafd8bbf93faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:b7:cd:ff:03:bd:b3:2a:62:5b:49:55:c4:
                    87:61:c1:0c:e4:e9:7f:b4:a6:b0:d5:57:ec:2c:e6:
                    0b:c3:3f:65:b5:a0:56:4c:52:8c:0f:fa:63:f3:49:
                    0d:cf:3c:57:5d:f4:9b:15:f6:e1:15:1a:3c:4f:f8:
                    e1:72:dc:ab:e0:e9:5a:4b:c1:6f:7b:95:23:c5:cd:
                    5a:41:97:fe:e1:fd:68:4b:e2:02:01:ef:bf:3e:04:
                    cc:70:48:15:81:b6:47:fa:0e:cb:5e:e0:55:cb:5d:
                    e2:1f:7f:dc:01:df:20:fa:7e:2f:4e:64:5e:28:48:
                    4e:bb:9e:40:38:31:da:84:fd:1d:a5:e8:30:f3:fb:
                    06:40:e6:82:5f:29:ee:c3:06:5f:c7:12:5c:1a:80:
                    4c:d2:50:88:a8:48:c1:00:df:3e:db:55:62:c3:3d:
                    70:9b:99:33:f3:81:32:4f:36:62:31:5f:23:7c:b1:
                    8b:3b:e4:e6:c4:5f:b6:11:48:a9:b4:2b:60:dd:2f:
                    a4:32:5e:4d:74:71:d0:3c:9a:2b:cd:86:0f:f7:ff:
                    9e:5c:96:01:cd:9f:3d:4e:aa:d8:45:03:f9:68:63:
                    9d:8a:3a:9d:85:5f:19:72:c5:2f:36:22:75:12:4e:
                    27:69:44:ed:e8:f6:93:14:8c:e8:7f:43:42:34:48:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D9:DB:47:37:77:CE:70:31:87:E2:ED:DF:BE:AF:D8:BB:F9:3F:AA
            X509v3 Authority Key Identifier:
                keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:48:d9:e1:9b:ce:9e:e5:a0:8b:c6:14:45:3c:a9:cb:96:1e:
         22:71:11:d1:84:a1:7b:34:09:cd:9f:2a:89:60:c1:e3:13:7d:
         88:f6:2e:bd:ff:e0:89:f2:aa:69:82:45:23:a8:64:3a:ff:b3:
         27:1b:35:b0:7b:0f:15:b3:be:39:de:8a:ae:d5:f8:aa:c7:c2:
         1f:60:76:82:e2:50:d3:df:46:1e:3b:b2:ef:33:a4:88:33:df:
         66:8a:96:bc:44:96:7d:a1:90:6a:08:97:d2:81:23:d8:7f:dc:
         88:da:54:ab:20:41:7b:80:5e:7e:3e:3b:bb:5f:6a:38:3f:4f:
         08:5f:2c:56:43:55:a9:ab:c7:b4:f4:36:85:22:f9:48:bf:1d:
         86:66:3f:6f:07:4f:5c:09:2d:30:ae:17:3a:5b:3a:ac:5f:0b:
         7e:df:aa:09:0b:67:8a:e1:dd:04:d5:fd:bf:3e:8d:a7:69:f9:
         c5:34:ef:53:90:74:04:40:0e:b9:2b:61:dd:85:e3:7e:4d:55:
         27:87:05:1e:ac:09:75:07:ca:8b:fe:b6:0c:d0:28:6c:f5:47:
         9c:51:68:8c:79:a9:ef:8e:72:d5:6a:bf:a1:f8:20:19:66:7b:
         6c:84:70:f2:ff:b4:d6:fd:8b:45:25:06:e3:71:bd:c1:df:c7:
         a3:2d:69:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----