Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
File:                     i4JDP_6UvzU2_sMnVD05YVggIHI.mft (raw, json)
Hash identifier:          Lu9hIqVyucCy0AExHFVpbWfTg7SQnX+EC7I6AOAOL6Y=
Subject key identifier:   A5:55:76:49:5A:6D:64:D7:6C:E5:D8:35:CF:B9:3C:A3:40:16:CC:DC
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Certificate issuer:       /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial:       01962F064CE0D385D1E17D61947078956990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
Manifest number:          0B00
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: 4fxQzx_8ByWwMKk9dyXM0XEaMys.roa (hash: /pQNDc4tCpOKVTxdQ/1sSXEuYSGaPkaAPaOzkIFfq/U=)
                          2: D0yJcu0JvPJ2IZ6qvrN_68RL81A.roa (hash: NXJKvgJ+KpYYxv4h48ZyQkogSfsaqjnCJ9F84sJ/8IA=)
                          3: fAdRVcLtp1Hdo62qAxJzNRyFLms.roa (hash: /9qm18tTMk3ZVKpb3SBqcWWsV0TFo0WtQqugq7BXDfU=)
                          4: fk9piBmxadoxJuP7Wx4UPTdBTGM.roa (hash: P0efcRRoA7jHUP2kLMx2ZKnIu/J2T6OthYnnV4Yj06A=)
                          5: i4JDP_6UvzU2_sMnVD05YVggIHI.crl (hash: MC6kuYo9eYl2hRER20XEh8uoGdAynvRJsIhClf8DkB8=)
                          6: xNtGHv1YLmz0baQ6fFAsVkQIQLw.roa (hash: glTrDTx+iBPrwn7/BNyzFNiZr9vyz3H84OvS4u/lrN4=)
                          7: yx9i8LZCbjvaDebLsn4vp_1QQsw.roa (hash: koRh5dNP2sZyFodyKIh0Iqwubeq7l02U0bZSoimi8yU=)
                          8: yyP9fmeZAYp1K1vaVu0uJv4Agws.roa (hash: egmTg6Tzum2/xFgjHv1aVGDhof0qC374Rh2lR+uVm0s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4c:e0:d3:85:d1:e1:7d:61:94:70:78:95:69:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=a55576495a6d64d76ce5d835cfb93ca34016ccdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:ea:15:3e:68:a4:41:0c:6a:3b:25:9f:5d:
                    96:3c:0f:ad:6b:04:ba:d6:c5:c4:4a:5c:b4:d3:f4:
                    8b:c2:3a:29:ad:d3:3b:bd:e6:9d:7a:48:e6:7b:64:
                    3b:8d:4c:ca:1d:f5:f2:d5:ba:fd:2f:10:61:cf:3e:
                    54:2a:4f:0d:6d:5a:73:81:75:03:e5:a7:19:8b:82:
                    90:07:63:e9:4d:11:bb:fd:36:d6:5e:ec:73:c9:27:
                    d4:71:84:af:bc:1e:f7:64:c5:67:33:e5:a4:da:da:
                    db:67:98:8f:36:38:44:73:6b:27:77:a6:97:82:75:
                    ff:db:5d:5e:59:ef:b5:d9:ae:a6:5f:df:85:eb:da:
                    8c:0b:d7:b1:bf:8f:34:47:fc:30:0e:59:6b:11:b6:
                    3e:46:a4:60:87:06:32:c4:58:9f:45:87:af:32:4b:
                    14:89:c3:d7:88:63:21:40:eb:c7:a6:eb:c7:94:fb:
                    0f:8d:dc:18:5a:32:00:38:57:b5:d8:db:f3:60:33:
                    2d:ce:56:7e:e0:8b:f3:3b:97:98:80:53:81:08:8c:
                    b3:ae:2b:4b:8f:4f:b0:ec:34:39:d6:d0:d5:13:bd:
                    13:73:95:5d:75:b5:fc:5d:fd:b8:ed:1f:03:2e:e2:
                    e6:32:e2:4c:3e:4a:28:9f:80:af:39:be:40:7d:43:
                    19:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:55:76:49:5A:6D:64:D7:6C:E5:D8:35:CF:B9:3C:A3:40:16:CC:DC
            X509v3 Authority Key Identifier:
                keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:25:4a:79:4f:5b:13:d6:b3:77:5a:87:de:12:24:dc:c2:cb:
         35:49:fb:64:00:d4:18:ff:1c:ba:22:e3:36:8d:f4:b3:b9:df:
         d0:fd:a7:7f:98:1d:2d:ab:98:b1:65:01:64:ae:25:5a:16:4f:
         a8:7b:da:75:6d:af:6f:f1:03:31:59:e2:21:29:22:29:c1:46:
         e9:f3:4b:28:bd:cc:75:9e:2a:b5:80:68:52:f6:21:83:59:f8:
         a8:11:fa:3c:e7:86:1b:a3:9e:e5:7e:5b:af:35:7e:07:d8:5d:
         7b:2d:6c:b6:c1:5e:84:90:a2:29:da:3e:6e:54:7c:66:a3:94:
         9b:6e:eb:46:8e:8e:ef:4e:6c:6f:44:56:bc:58:b4:b0:89:72:
         d7:88:73:e5:5a:f6:bf:6a:6c:bd:6e:ca:8b:c9:48:f1:1f:f0:
         80:cf:3d:c3:b9:8e:ad:c5:eb:17:e7:3f:27:3d:8c:0f:b3:65:
         8e:64:d0:62:58:53:6f:c7:43:0f:64:9d:db:bf:a7:85:fa:4b:
         64:92:a6:b1:ac:a5:91:c2:d6:04:46:21:db:28:c0:e7:cd:60:
         1f:a8:61:d0:94:00:e7:73:40:9a:36:d2:d6:37:f5:3d:7a:d9:
         4d:bc:c3:7c:ea:bd:e8:ce:6a:01:85:90:dc:34:3d:72:8e:f6:
         2c:c1:29:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----