Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File:                     p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier:          nFvnRFMhXnfw8OZkAxfcVmdIfJLFTL4SSYlmfQG0YCM=
Subject key identifier:   84:01:BD:63:70:B6:2D:F1:09:EB:47:D4:92:9A:35:28:C1:43:BC:99
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer:       /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial:       01962E61B42D0B18E92B24250B4900A1B3FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number:          062C
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: 4sQh2r6FMJFhzKVbA+Px+7KSzwGvnvRSLwhxD62mqYQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b4:2d:0b:18:e9:2b:24:25:0b:49:00:a1:b3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=8401bd6370b62df109eb47d4929a3528c143bc99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:8f:4e:6b:e0:2e:ea:b3:96:04:42:b6:5e:
                    2c:64:b3:6c:e0:f1:fd:e4:22:63:23:15:da:11:3d:
                    ad:58:b7:e2:72:fd:58:dc:a6:f1:36:70:4f:48:77:
                    cf:49:e3:5a:43:d8:fd:57:a7:93:2d:c7:b1:d4:c8:
                    be:81:47:bb:50:af:cb:f4:7e:0e:b6:12:58:0a:5c:
                    47:87:3e:b7:78:09:44:30:cb:3b:b8:52:d9:d3:b7:
                    05:64:27:55:33:e1:3a:c8:9f:c6:88:26:d3:13:4d:
                    79:b7:28:ea:92:fb:d5:8f:32:5c:6b:38:b3:91:b9:
                    ad:1b:59:21:cb:82:b0:58:ec:da:bf:ae:63:87:52:
                    a3:64:55:68:f2:03:44:b7:c6:f6:55:54:35:e5:23:
                    b1:29:e1:81:9f:95:70:98:a2:58:81:a8:5e:48:a1:
                    26:5a:54:62:c6:f7:08:fb:3d:f1:c1:87:3b:d7:95:
                    46:eb:67:0c:9c:aa:d9:ab:91:71:04:5d:82:3e:c4:
                    d6:fd:30:be:12:89:00:8f:4c:7e:d1:73:bc:f5:83:
                    a0:3e:49:93:0f:72:41:52:6d:ea:10:95:0a:ab:19:
                    58:34:65:07:3d:ee:ac:87:a3:c7:f9:51:80:67:9f:
                    13:69:24:15:ab:c4:a1:c2:5f:ca:76:ed:b1:7a:03:
                    e1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:01:BD:63:70:B6:2D:F1:09:EB:47:D4:92:9A:35:28:C1:43:BC:99
            X509v3 Authority Key Identifier:
                keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:80:5a:eb:77:04:b7:88:27:1a:8e:bb:ee:98:32:bf:39:f3:
         d9:c1:d4:9c:91:e0:ea:f6:f4:b7:45:98:92:0d:4c:1a:61:67:
         ef:0b:68:ea:ff:6a:b0:ca:cb:38:e6:6b:77:62:19:ef:e4:60:
         0d:44:7b:2f:8b:92:0a:e1:cb:52:71:9f:68:c9:23:14:4c:0f:
         b4:aa:b4:e8:a4:ce:a7:d1:21:c1:3e:08:08:dd:30:67:4f:7f:
         cc:5a:11:c4:a0:bd:df:d5:a8:fd:3d:65:ce:d3:b2:d5:0a:b2:
         ce:7e:bd:21:12:0e:2d:c5:64:ec:90:4d:65:a6:2b:b2:1d:63:
         e3:c5:58:eb:0e:e9:8b:42:e3:3a:7e:56:ec:41:20:2f:70:53:
         7e:f7:33:aa:f6:f8:ff:d5:48:4a:ac:19:cf:ef:0a:fa:b0:20:
         37:31:ed:c8:58:ca:ca:aa:a1:ac:80:fb:50:20:72:54:ed:b1:
         b4:f5:2a:1b:d6:d0:4f:e3:20:09:90:75:f8:c1:ce:ee:02:96:
         f5:e0:2b:a5:d1:4a:bf:f5:24:94:97:17:48:72:6e:dd:c7:ce:
         ef:44:90:87:49:d5:f1:7f:7e:cf:4b:0b:aa:19:9c:30:21:aa:
         20:8d:c6:db:f8:cb:c8:8c:de:ba:49:83:1d:b0:0e:d2:c6:69:
         34:cd:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----