Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
File:                     Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft (raw, json)
Hash identifier:          LgwvruSpSPgYE41oGHfrjfCSnY/upjKZ9bLRskg3CYI=
Subject key identifier:   71:95:F0:FD:62:64:1F:8E:7C:A2:B0:89:CA:D6:42:C2:00:7A:7A:47
Authority key identifier: 45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D
Certificate issuer:       /CN=45be271d6495293347465c69b97d7380e4bbb46d
Certificate serial:       01962FAB091167766E07A0C6ADFF80DBA1C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
Manifest number:          01DD
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl (hash: Xw30KEU6l2zRpqaHrwY4cqGyRCqgiApS5qnoNnXjkYQ=)
                          2: g8O-LxBDxPemkfnWTYdHDXGwokQ.roa (hash: 62+5Rr40UYD7j7xrWfzQh2M5veljI3mG5KafCJqpdBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:09:11:67:76:6e:07:a0:c6:ad:ff:80:db:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45be271d6495293347465c69b97d7380e4bbb46d
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=7195f0fd62641f8e7ca2b089cad642c2007a7a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:b7:e5:a2:a0:3b:93:13:09:99:8e:e2:9c:
                    18:55:10:95:16:5a:f1:65:25:d0:2e:20:00:56:08:
                    5f:cb:51:5d:c4:32:80:b9:87:b7:7d:2a:a0:d7:09:
                    1a:fa:7e:16:ff:67:75:5f:91:cb:fa:df:fc:75:a8:
                    e7:04:c3:3b:d5:30:ec:b3:e0:c2:93:47:33:ae:6c:
                    04:62:a8:30:84:e8:6c:1e:4f:ef:97:20:1e:b9:c5:
                    8e:3e:d5:f8:b8:25:e2:67:53:7d:7e:00:27:52:41:
                    58:a9:6b:04:95:e3:48:93:1a:9c:9b:1e:3d:e4:d7:
                    a8:f3:74:6d:be:68:5d:08:22:2c:58:fc:27:3d:03:
                    f6:56:d4:c8:52:31:91:ee:f3:f4:de:fa:5e:4f:c7:
                    9c:e5:89:25:4e:78:7f:62:ce:51:70:19:4e:3d:07:
                    37:ae:49:53:96:45:b5:be:0d:42:20:19:71:00:2f:
                    e0:13:8a:52:1f:e4:6c:d7:58:f4:e3:f5:60:c6:d6:
                    fa:0a:c8:16:bb:87:f7:95:1b:5a:6a:76:89:a6:c7:
                    41:f0:14:37:95:a2:94:4b:d6:34:2d:3f:07:54:29:
                    3c:c4:f4:c6:ab:50:90:ae:42:c6:d4:6e:a5:18:4f:
                    fb:dc:03:03:80:53:1b:69:72:3c:ab:8e:29:4e:9f:
                    e6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:95:F0:FD:62:64:1F:8E:7C:A2:B0:89:CA:D6:42:C2:00:7A:7A:47
            X509v3 Authority Key Identifier:
                keyid:45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:67:5c:39:23:87:fa:ac:1c:1f:18:22:ef:2c:a5:e7:54:c8:
         62:5b:b4:fe:eb:87:a1:45:cb:3b:20:54:e5:84:5c:05:c6:f5:
         44:df:9e:5d:a0:57:e9:9d:1a:52:bd:2c:51:45:de:f3:f6:6d:
         8f:73:6b:6f:b2:f4:b0:9a:b7:c6:fc:bd:55:e5:cc:b3:cc:52:
         9a:43:af:cb:bc:51:80:5e:4b:bd:d2:eb:32:4a:4f:9d:be:12:
         f5:60:77:58:61:54:7a:5b:12:aa:0c:c9:a1:42:68:f5:0e:27:
         80:3c:b0:89:0e:71:75:ff:b5:1b:d6:c9:73:5e:32:c0:87:41:
         9f:08:c7:f0:af:cb:56:22:91:cc:6a:54:72:c2:40:59:97:75:
         f6:b4:f7:8b:7f:35:13:e6:f6:3e:1a:f4:b2:1f:48:97:71:0f:
         5c:41:2a:45:85:2a:99:23:f9:ad:73:57:21:81:bf:ea:30:c4:
         79:14:c2:c8:ab:f7:ca:47:3d:ef:da:51:ad:ea:32:59:b4:4b:
         ea:7c:2e:12:80:d8:7b:2a:03:db:ee:ab:ba:6e:e7:e3:3b:e8:
         c7:29:54:3e:60:16:43:40:2d:7e:30:35:46:cc:b5:d4:ef:23:
         74:36:67:10:1d:7c:d1:3b:db:a0:79:80:01:72:f5:db:49:22:
         f7:e6:a6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----