Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
File:                     S81y1ss4Wjozxsj-VFnGhqaElQk.mft (raw, json)
Hash identifier:          gkg827/znskjvtp1uFolRAefqiTe8tZLDNt2q/gKhKg=
Subject key identifier:   C8:F0:AA:75:2F:1A:EA:50:58:7B:FD:F5:07:01:63:72:15:BD:92:52
Authority key identifier: 4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
Certificate issuer:       /CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Certificate serial:       01962F071AB2243C1849919A6641E1A585D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
Manifest number:          0FC4
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: S81y1ss4Wjozxsj-VFnGhqaElQk.crl (hash: RSPme9wCsufc9nK3HpeGl0ds7tOX+k7iX0tNpQpdNss=)
                          2: wEf4V0fjRLwMdiaytYSjwCEyTHU.roa (hash: lUa2DLkPGwF47ayLCrKzv9wyplQdvB6BMfu9nJfZZtA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1a:b2:24:3c:18:49:91:9a:66:41:e1:a5:85:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=c8f0aa752f1aea50587bfdf50701637215bd9252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:a5:c2:98:7c:2f:f7:9c:50:d0:48:4c:a0:
                    09:43:a0:7b:0b:1e:25:1e:f0:d8:46:43:39:1c:59:
                    9a:f4:13:42:14:75:3b:bd:69:00:a9:88:a6:62:c0:
                    1b:69:d2:5d:8c:4f:b8:68:72:3a:ea:3e:66:56:ef:
                    98:b1:b8:c8:c4:c8:34:fe:a2:8f:9e:1b:74:22:46:
                    ed:ca:aa:89:b2:a4:17:90:0e:ec:4c:3c:52:93:65:
                    6a:40:de:cd:8f:dd:5c:50:62:e9:ae:95:99:d0:ee:
                    d0:9b:11:3b:d6:56:d7:9a:95:ed:73:ab:f7:a6:81:
                    62:83:0f:0f:eb:35:d3:92:8c:35:17:28:c6:d4:88:
                    e1:b7:f7:09:0e:4e:53:fc:52:a3:5d:0f:f0:b9:96:
                    3b:74:ca:ee:70:36:fb:01:2d:ca:21:2a:c0:97:db:
                    91:49:36:f0:41:8b:ef:f2:e1:45:9e:fd:6e:2d:be:
                    5c:bb:6f:15:34:74:8b:1f:11:14:af:84:89:4c:c7:
                    27:34:52:6f:b5:37:c4:4e:51:84:9a:41:83:02:fc:
                    4f:19:f6:75:93:88:dd:c6:56:72:da:64:c3:de:39:
                    a7:0f:cd:d5:05:4a:e4:32:b3:42:41:0c:3d:3a:26:
                    8f:3d:a9:40:15:ff:f9:50:0d:fe:79:51:75:63:75:
                    6c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F0:AA:75:2F:1A:EA:50:58:7B:FD:F5:07:01:63:72:15:BD:92:52
            X509v3 Authority Key Identifier:
                keyid:4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:76:07:3d:ca:b6:b8:61:7f:78:04:d3:8d:e0:2f:c7:74:a1:
         89:4c:8f:69:66:e2:d8:8a:1e:44:18:93:66:e2:c3:64:91:f5:
         00:d9:4b:0b:bf:75:fd:7d:88:9a:55:23:f3:7d:3e:08:72:93:
         b1:37:69:22:77:88:92:fe:0b:f5:6f:71:e6:7e:ec:d5:3d:dd:
         2b:9b:6b:44:5f:bd:8a:df:54:54:64:c3:fc:50:0f:6d:c0:96:
         9d:f7:6b:a2:83:90:49:3f:00:6d:11:06:ea:8b:bd:80:97:ec:
         16:7c:c1:20:cb:d2:2a:3d:4a:35:f3:57:f5:b5:94:eb:e5:09:
         db:ac:db:48:60:91:53:2f:bc:1d:d9:1c:53:6a:b4:18:b3:90:
         01:f5:68:7e:a5:bc:47:97:3c:d8:14:33:f9:b0:3b:cc:08:5b:
         d6:78:aa:0f:0a:a3:2f:40:70:ab:f2:0e:18:6e:0d:59:79:f9:
         3a:60:be:6f:68:17:17:34:36:80:3b:d0:dc:ff:ae:3f:05:16:
         b8:77:29:ee:23:2b:c4:a8:47:c7:22:23:ab:62:3d:5d:ba:e7:
         28:ef:08:17:b8:31:2a:2c:c1:ad:f5:e2:9f:f5:1f:32:b9:10:
         83:e1:ce:90:df:a9:68:9a:50:51:46:1a:88:38:5d:33:a1:fc:
         f4:74:12:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----