Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File:                     mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier:          6sjqQ3emtdZO+yRkbUoEBzKpdMcYIc79MukCCnjQ3vs=
Subject key identifier:   F4:1D:41:5F:18:16:74:19:FA:F5:A4:2A:FD:7E:0D:1D:EE:2A:0D:EB
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer:       /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial:       01962E61F0219C502D8F5C7BE926183A6011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number:          07EF
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: RSb1+P6r+AF6bNcAX1I5ikVPc135UHDSqzksD8ofpiE=)
                          2: oVf5pbd8qfOWaMtymVg3zBpo1aI.roa (hash: /JkkHPoUwL9WPqaL9lMZRl9hvH2fpXEuWKNlqu6l9cI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f0:21:9c:50:2d:8f:5c:7b:e9:26:18:3a:60:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=f41d415f18167419faf5a42afd7e0d1dee2a0deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:10:9f:e4:62:9d:3d:ae:b1:90:07:4f:5c:
                    c2:be:51:aa:cf:b0:6c:90:03:06:40:f3:ff:0d:1f:
                    7e:bc:c4:57:de:df:83:c4:31:4c:89:05:52:b8:5a:
                    5d:dd:d7:f4:d8:80:27:b4:8c:3b:de:1b:f2:92:d4:
                    42:40:78:6e:cf:49:38:13:a9:95:ac:c9:e3:b9:d1:
                    9c:8a:05:b0:8f:65:52:fa:c9:56:ed:62:32:98:b5:
                    73:4c:a2:22:18:40:d4:7b:f5:5d:e9:7e:65:71:57:
                    9b:c3:1d:22:b2:6e:26:1a:c2:ef:62:0c:39:21:cf:
                    0b:c9:e9:7f:97:9b:da:a1:94:3f:f4:97:c4:df:b3:
                    0c:e6:a2:23:07:5d:c2:82:a5:a8:25:6b:b5:b9:2f:
                    21:5f:e9:c4:27:69:1b:be:bc:99:9e:89:f7:96:ac:
                    cb:7a:76:c1:95:1a:b6:42:f4:f2:85:86:19:28:d4:
                    e3:af:e5:5c:da:9a:30:a1:5f:7e:1b:4f:af:0a:90:
                    07:c9:a3:66:05:14:09:b4:35:e0:ed:7d:c3:f4:65:
                    6b:7e:40:d6:fb:38:9a:26:1e:64:f0:58:62:74:e0:
                    d0:f1:e0:8e:0a:61:29:b7:79:ed:36:52:e0:37:c9:
                    4c:ed:8f:5c:78:f7:71:a8:fe:34:9a:44:d5:2b:c0:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1D:41:5F:18:16:74:19:FA:F5:A4:2A:FD:7E:0D:1D:EE:2A:0D:EB
            X509v3 Authority Key Identifier:
                keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0f:41:d2:77:7f:77:8a:a5:f2:2d:9d:e1:98:f3:fd:05:54:
         ec:61:dd:df:83:35:dd:f1:1e:fa:bd:fd:63:3e:21:ce:75:27:
         ea:fa:93:e8:ef:ad:6c:2a:ac:94:34:67:d3:06:ec:d9:67:04:
         8e:22:1f:05:43:15:64:95:6b:dd:fe:07:1e:67:2a:b6:a9:85:
         b6:f6:11:ee:8e:3d:31:bc:1e:06:b8:7e:fc:37:51:b0:23:4f:
         64:23:81:06:e8:8e:e8:40:4e:0b:51:13:d1:c1:50:4b:f4:65:
         3b:f6:f4:2a:f8:27:ea:68:b0:59:a0:a1:8f:11:bd:b2:64:0e:
         3c:75:95:e9:4b:07:74:86:62:45:68:20:cb:8b:a3:1b:de:ca:
         ee:42:33:64:bd:13:dc:b3:34:95:dc:3c:91:c7:fe:69:95:a0:
         68:01:23:61:93:df:19:7e:41:fe:8c:3d:9f:31:68:86:bb:a6:
         c5:f7:0f:f0:a8:e1:ff:0f:bb:17:af:e7:0e:dc:fa:15:3c:1c:
         09:d6:5e:ad:77:7a:8c:7b:65:f8:e9:26:5d:d7:67:df:0c:2d:
         61:34:34:58:a9:8a:82:70:34:94:33:bb:56:61:3f:1a:87:8f:
         40:3e:25:9c:29:a9:f9:c4:0d:ae:9c:01:11:4c:0f:76:e4:68:
         7e:c2:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----