Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
File:                     rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json)
Hash identifier:          jIBXFPmetVUEg+xK6OAFy1G3i31fRZavfiRQh0YCGSI=
Subject key identifier:   6C:80:47:4C:4D:C2:19:FC:78:26:96:5B:4B:0A:4D:7B:18:E7:0B:3F
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Certificate issuer:       /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial:       01962F741D03BAF0A308E75A589E4E6F19B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
Manifest number:          047E
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: R4XHwh-uR65EL_DdpXZF6OARJ4Q.roa (hash: iFcX7qqj7I+Qr0pVVXkrPFoUP0jPJo5pY3SNhZeIPSE=)
                          2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: coEMi2jKp42JicY6S0gGXUrtayoKws7JvMFZgrH58dQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1d:03:ba:f0:a3:08:e7:5a:58:9e:4e:6f:19:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=6c80474c4dc219fc7826965b4b0a4d7b18e70b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:52:e4:a5:6a:ab:6a:7f:d9:15:e5:85:d5:35:
                    97:31:e0:9c:46:02:07:c7:28:7b:f1:8f:56:0a:bd:
                    93:72:c3:4e:09:e0:7d:33:7e:ca:33:59:58:25:30:
                    0b:a6:0e:09:d1:8a:28:48:43:ca:a2:89:5f:30:52:
                    5a:69:44:41:87:38:91:fc:f7:1a:83:d8:a2:89:b5:
                    9b:2d:1e:00:ac:38:c1:3f:77:8d:1d:8c:d4:a1:be:
                    b7:72:09:63:4f:d2:84:8d:32:00:9c:d9:05:27:b2:
                    ce:82:4d:14:73:f6:40:57:20:66:c8:da:8e:09:5a:
                    27:59:b6:f6:f7:8f:70:d5:09:f8:00:d9:4f:3a:bd:
                    a0:68:8b:99:ca:cc:3b:c7:e5:b2:f2:dd:33:a0:4e:
                    78:8f:4d:9d:19:f6:20:73:88:53:45:60:c4:74:7b:
                    76:53:05:22:b0:83:32:16:77:82:48:b3:92:ca:7a:
                    df:43:34:96:3f:35:ed:d0:79:f5:48:22:44:c7:78:
                    78:af:cb:13:72:c5:a4:b0:b5:eb:75:9c:e6:a2:31:
                    18:56:3f:d9:9f:43:e9:19:4f:1a:ba:2c:ed:93:c1:
                    d6:58:58:6e:7d:5f:eb:c7:e7:86:37:c4:a6:e6:07:
                    5b:fa:41:eb:d1:2c:38:5a:11:8d:ae:40:ee:bf:d3:
                    f7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:80:47:4C:4D:C2:19:FC:78:26:96:5B:4B:0A:4D:7B:18:E7:0B:3F
            X509v3 Authority Key Identifier:
                keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:4d:0e:65:d0:ab:c3:26:2b:22:49:00:6b:2f:c4:10:b6:af:
         ce:f4:a7:99:a4:0f:44:6d:c4:a8:30:09:c5:9a:11:17:4c:1c:
         b1:2e:ab:bf:b6:64:d9:53:14:0e:cb:c0:ca:5a:b5:b4:e6:93:
         83:6f:1b:da:54:d5:59:f1:11:4e:8c:cc:19:a0:4b:01:fd:23:
         8c:f6:a3:86:8b:77:85:86:d1:58:2f:99:a8:d3:90:74:e0:5a:
         b5:c4:02:c3:4e:49:c1:ce:ac:37:c9:c4:56:28:26:57:32:56:
         6c:06:ea:69:06:6a:54:be:e4:29:b6:a3:89:f7:72:f3:a4:14:
         1d:aa:c4:7f:49:ee:a4:a4:5f:15:b1:38:3f:1d:c3:b0:4c:45:
         3b:57:8f:90:66:67:cd:af:bf:64:62:d4:07:12:cb:f3:fc:b0:
         8c:45:aa:39:76:bc:44:0e:a3:98:0a:e1:8b:cf:62:68:ba:59:
         bf:49:52:4d:7b:04:fc:f0:5d:dd:a6:b8:15:ae:07:1d:66:ba:
         e0:e8:7a:36:88:a7:6b:ad:a3:c0:58:79:ec:f7:26:65:a2:d1:
         0c:10:a9:7f:2a:e2:20:1f:f9:2a:89:1a:2f:a2:88:6e:bf:5b:
         1a:e8:06:9c:9a:00:4c:5f:52:57:5b:f5:71:38:21:0d:28:b1:
         59:5c:a4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----