Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
File:                     79rqxvigN0g5cw_IVnlXCeGO2RY.mft (raw, json)
Hash identifier:          5VG+OjZXEmG4mMgi2mVtJyyXCm81lJywr0g2cagV0zU=
Subject key identifier:   1B:34:F9:A1:49:72:86:4A:B9:39:E4:28:4A:23:D8:C3:7D:41:7E:8B
Authority key identifier: EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
Certificate issuer:       /CN=efdaeac6f8a0374839730fc856795709e18ed916
Certificate serial:       01962E98A1FABCE5038D78D2542C7CD7D6F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: 79rqxvigN0g5cw_IVnlXCeGO2RY.crl (hash: UpBwu3cbDEkiGBD6LXxmBwblcjLaTvR7OWSoUe2ZNxs=)
                          2: jBd9B-QxZd6kSJHakHtwWCRpb8g.roa (hash: D/BN6zrh/Ppu12+wqVsmd0mbM1Dy48uvpuG5EGpyN0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a1:fa:bc:e5:03:8d:78:d2:54:2c:7c:d7:d6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdaeac6f8a0374839730fc856795709e18ed916
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=1b34f9a14972864ab939e4284a23d8c37d417e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:0a:02:74:9a:80:19:70:69:5a:1b:1c:7f:
                    af:22:a9:52:68:6b:3a:af:ed:8a:47:d1:18:cc:b2:
                    75:44:60:a2:3d:30:16:75:2c:f1:52:cf:b1:54:c0:
                    75:e8:96:92:a0:8e:94:2a:da:f9:f0:45:ba:84:ae:
                    bb:b1:43:db:29:f8:ed:34:a6:19:1f:de:62:13:23:
                    62:a6:26:42:d7:9c:16:81:58:7a:ae:f0:07:18:fe:
                    65:ca:27:7f:92:d8:e4:1a:99:cc:c4:07:60:87:58:
                    47:97:78:c9:7e:4c:3e:e4:bc:0b:75:43:12:eb:26:
                    d5:89:23:30:20:d4:29:15:f9:19:1e:0b:8f:ca:17:
                    f8:f0:a8:c4:59:84:29:df:65:14:78:5b:bb:0d:b6:
                    ed:fe:7c:3e:2a:ba:81:3d:09:8f:f0:08:f3:ca:8b:
                    39:7e:e5:9e:41:2d:9f:0d:ff:b7:68:5f:ee:fd:c0:
                    45:7b:d2:f2:8e:5f:77:13:43:5a:65:40:57:25:e0:
                    a9:74:a7:57:89:14:20:4e:b7:02:bd:91:d9:16:49:
                    ea:f4:9b:8a:f5:e8:d6:9b:da:a7:48:1e:da:6f:0c:
                    3f:1b:68:78:bd:16:fe:6b:fb:91:ab:8e:a7:b8:86:
                    df:35:2a:a4:88:b6:2c:69:8d:9e:8b:ae:66:e2:16:
                    24:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:34:F9:A1:49:72:86:4A:B9:39:E4:28:4A:23:D8:C3:7D:41:7E:8B
            X509v3 Authority Key Identifier:
                keyid:EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5f:3c:12:5a:0f:35:ff:32:9d:d8:c9:35:c1:5e:95:47:2e:
         78:41:f8:b4:8f:3e:66:fb:b2:85:a3:ee:bf:3b:b8:b7:44:17:
         12:28:da:8e:1e:03:27:4e:d3:70:6f:7b:0e:be:ac:d5:9f:08:
         ab:dd:83:f7:1b:d0:8f:0c:bb:9c:df:0e:a8:ca:37:34:dd:be:
         58:10:57:79:c6:b9:7a:84:a6:3a:fd:b2:7c:63:6a:50:23:76:
         f4:2b:e3:04:c4:6e:61:9b:ad:58:c7:6e:16:6f:11:14:32:98:
         54:af:f3:3c:84:26:3e:f7:ba:0e:b2:07:33:bf:7a:f2:12:a7:
         5d:54:9c:d1:aa:d1:35:69:9c:86:bc:6c:59:04:d7:3e:d3:3a:
         d1:12:e8:10:2c:b2:a0:76:10:c0:d8:19:dd:7a:8b:27:bd:5d:
         82:6f:8d:5c:b0:ac:d6:da:6d:5b:09:96:e3:55:cd:f6:92:69:
         d2:b0:4d:41:41:1b:ab:d3:6a:35:76:2a:f5:9a:9a:c8:41:0b:
         d8:5e:8d:8f:ea:b9:dd:e4:cd:ac:a5:65:96:ab:03:87:76:9d:
         da:ff:19:11:8a:82:a9:a0:fb:82:68:25:1d:0c:72:47:38:06:
         ca:ed:13:3c:4a:54:4f:a5:40:c3:a5:18:0b:00:30:f1:51:de:
         db:ce:3f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----