Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File:                     STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier:          XUktVpnWQ9CU4ScKtyXmozxeSXdwQMhiaqZ+rU4/kK8=
Subject key identifier:   DF:3B:8D:76:E8:11:78:68:55:AC:F6:46:A1:70:43:47:48:46:10:D4
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer:       /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial:       01962FAB8CEFA09A1702EA7F606F0BC69F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number:          13DA
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: CVR05OPNdQELJa7vlyk9NT2HsdNWrfN6pa7p6tc8rwU=)
                          2: j2dUbB-NK5CfnidiqDMKydgI8YE.roa (hash: ZUxAxryB168omhb8dlNaslAttNVaqi4+cbp8ns+rOL0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8c:ef:a0:9a:17:02:ea:7f:60:6f:0b:c6:9f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=df3b8d76e811786855acf646a1704347484610d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:cd:0c:af:f2:09:eb:89:c5:2d:ad:f9:67:
                    70:1d:f9:6a:81:ad:4a:c8:cd:e4:d1:df:83:9c:99:
                    26:9c:57:4c:25:7f:89:57:5f:84:e1:b3:38:56:94:
                    c9:2d:b3:a9:9c:76:65:07:18:33:c3:df:b9:f5:cf:
                    67:cf:d0:e6:e6:fc:0f:7d:16:9d:2f:1b:62:67:55:
                    65:92:76:22:6b:b8:9d:5e:31:03:cf:51:89:73:92:
                    d4:ff:5d:db:54:6c:f8:69:f9:34:b5:b0:62:48:7e:
                    38:eb:be:71:30:02:a7:36:e5:06:88:08:50:af:2b:
                    91:27:c3:11:ce:fa:70:8e:0f:f7:25:20:cc:e2:9c:
                    a9:5f:19:da:05:32:fb:a4:6d:26:0f:e8:73:2a:e9:
                    97:41:c6:dc:8c:ee:df:31:df:76:82:95:dd:b8:94:
                    25:b2:d1:01:fa:25:3d:0b:3b:e8:3a:44:f1:3d:a6:
                    56:c3:80:05:b3:44:bf:4d:f5:9f:70:1a:b2:a2:36:
                    5d:e2:14:2d:d3:5c:a3:a6:a4:cf:34:d9:26:a4:a1:
                    74:55:43:d9:f3:bb:66:5f:d8:a3:a9:ee:88:e3:a2:
                    e4:b6:00:2c:b7:9a:67:71:13:7f:63:55:98:92:c2:
                    4d:1a:3f:c5:70:c2:7c:43:d4:ab:72:76:01:22:c6:
                    ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3B:8D:76:E8:11:78:68:55:AC:F6:46:A1:70:43:47:48:46:10:D4
            X509v3 Authority Key Identifier:
                keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:dd:d6:3a:57:97:39:ae:5a:07:2f:34:06:fd:ca:f9:37:64:
         91:28:70:3f:bf:61:32:d7:70:36:d0:07:dc:67:e9:87:f7:aa:
         20:bd:14:68:6f:d0:ba:89:3f:9d:a7:3b:50:16:88:67:21:17:
         0d:89:88:e4:18:39:96:49:33:22:38:6e:33:01:3a:65:5c:ca:
         1b:42:6d:56:90:00:d0:c0:7f:5e:72:07:86:47:c4:2e:24:36:
         40:4b:85:34:b6:6f:39:ad:47:3e:e6:dc:7f:17:57:f4:e1:01:
         a9:b9:de:0b:eb:32:5f:8c:2e:8c:01:fd:1b:b3:c5:ec:19:14:
         54:8f:21:e2:13:30:45:16:0e:34:99:76:12:7e:b9:9b:96:90:
         29:9b:4e:ee:f3:0a:e2:de:76:8d:cc:6e:c0:ed:7b:1d:14:6f:
         41:be:7b:fb:19:65:0a:af:fa:12:56:65:5e:d8:a1:3d:f8:ae:
         76:ce:87:d1:a4:bc:89:aa:9d:29:32:4d:8b:95:bf:e5:6b:ca:
         5f:3e:5e:22:28:61:1a:3e:59:e9:d8:aa:36:a1:45:8b:ef:7a:
         f8:bd:45:82:ae:06:ca:b2:09:b6:c5:7a:2e:66:66:8e:ea:78:
         e3:04:3b:dc:ce:c3:30:53:05:eb:fc:63:8e:ca:f4:bb:fa:3b:
         04:70:39:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----