Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
File:                     B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json)
Hash identifier:          Us90dcFDq5mp9YEFyyytTQdc6uJcaNA8eYW7NG4NAYI=
Subject key identifier:   68:31:0D:4E:85:16:10:91:A2:70:D2:89:0F:7E:7D:FF:67:19:B9:4A
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Certificate issuer:       /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial:       01962F0738A17232EF8D64D4BA8B743723BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
Manifest number:          05C1
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: CjC6eI+DOtb6P7ljP4rVlk8bAresCJyN26uyfc2wxmY=)
                          2: c3kj5e0FQs-aGeI_pqvpG_P5-CI.roa (hash: L6r7oVdYR79NuIrRw2uuwM285lWZ3pFFGBMiBbZqMWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:38:a1:72:32:ef:8d:64:d4:ba:8b:74:37:23:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=68310d4e85161091a270d2890f7e7dff6719b94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f7:ea:f5:50:02:cb:09:bc:8c:0f:f0:76:a2:
                    76:15:b6:ae:3f:51:a6:50:c6:5f:58:c9:70:9c:68:
                    2e:48:12:01:29:b2:78:c6:77:22:c2:6d:20:17:31:
                    8a:93:6b:58:38:bf:5a:2e:a6:0d:5f:68:d9:1b:7d:
                    1f:41:de:c4:40:94:ef:2d:65:a4:7c:6f:0b:42:63:
                    0d:40:f4:83:e6:5c:3f:a6:d5:03:f0:7b:80:a0:03:
                    49:0b:ef:f5:84:d2:61:f0:6c:5d:64:4c:8d:06:60:
                    09:63:f9:02:b5:55:9b:30:0b:81:6a:39:64:b9:bb:
                    0e:5a:37:fc:86:99:23:e5:25:58:ba:54:da:46:8d:
                    ff:fb:31:fe:75:00:e1:28:5a:01:df:cf:dd:b2:f8:
                    ef:02:6a:f2:51:79:7b:b9:87:ab:29:a1:1c:7c:7e:
                    5f:9b:b2:38:34:c9:3e:79:ef:d3:a9:0e:4a:90:cc:
                    47:e8:77:e7:bc:60:1a:cc:98:73:cd:6f:00:c4:ab:
                    4d:68:35:11:8e:7f:5c:7b:1a:fb:62:09:54:d9:36:
                    37:6b:9b:d6:81:99:3a:ed:1a:63:dd:79:32:ec:c4:
                    94:08:7d:24:4e:5e:d2:d3:99:44:8d:01:4b:8b:23:
                    a5:b6:35:51:50:2f:f4:f7:bb:f9:e1:9d:28:45:32:
                    da:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:31:0D:4E:85:16:10:91:A2:70:D2:89:0F:7E:7D:FF:67:19:B9:4A
            X509v3 Authority Key Identifier:
                keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e1:92:4a:2b:71:8f:3a:1d:b1:5a:b4:4e:0f:43:17:ad:2a:
         0e:5b:ee:ab:d1:23:05:43:7c:4b:f6:4b:38:bf:0d:ce:b3:1a:
         db:34:8b:a5:0d:f3:17:a9:92:5b:82:69:ae:aa:7f:7a:af:ec:
         a1:2f:27:66:c7:6a:c4:e2:2e:b9:d9:ef:3e:da:1b:1d:14:46:
         2b:ad:9f:f6:f8:34:5a:13:b8:9c:a3:c4:0d:80:50:6c:0c:4d:
         42:3d:c0:6e:d6:d5:ed:95:5b:d3:00:e2:d5:e6:64:3b:8c:6c:
         df:c5:6f:17:db:f0:db:3a:ee:84:9f:37:3d:45:ce:d7:1a:20:
         38:72:ab:1a:7f:fa:83:ce:7f:11:df:e2:f2:eb:94:ec:fb:26:
         a1:50:76:4e:9e:77:7f:ea:54:78:13:22:f7:cd:47:4e:32:3c:
         68:e8:fd:5c:4f:10:ef:f9:85:a6:b2:c5:c4:68:da:2e:b8:2e:
         ae:aa:1c:12:1f:db:2e:cd:e3:3e:09:05:ed:51:ed:50:15:c9:
         69:7f:18:ce:15:cf:b7:31:9b:99:a7:7d:d7:58:73:71:39:bb:
         40:b0:5f:89:5d:10:13:f7:58:e8:2c:e9:3b:21:17:54:f8:e3:
         a0:db:12:53:63:f7:f3:ce:5c:38:ec:0c:0c:62:28:a1:64:4f:
         b9:9a:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----