Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
File:                     04V55MfaAd8EZRhiNumvJ-tzEu0.mft (raw, json)
Hash identifier:          8HbzlqhUCp+fJGMQDjnKw3IvyASVvKZt80z8LyLZWnQ=
Subject key identifier:   59:44:87:5A:DB:6C:EB:AD:40:4F:B7:19:11:6D:D1:F1:FE:0F:3A:A5
Authority key identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
Certificate issuer:       /CN=d38579e4c7da01df0465186236e9af27eb7312ed
Certificate serial:       01962F3D954FBA775108BC0B59271DD23030
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
Manifest number:          022E
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: 04V55MfaAd8EZRhiNumvJ-tzEu0.crl (hash: +zuFYbABk6qngUv4uSMDWBUc8Cpj0WoQMdBvYRRaSFY=)
                          2: 4WjbSjU6xiUtGmjrdhcmgTrCWEs.roa (hash: Op1Cd9ecUNfem1iITIQLJWs7rUVbhCcVd6VepaT6kFU=)
                          3: Uxu1JjHkshCCeiHLHxVp_E0lRZs.roa (hash: YvTnmumvwq+sxP66uResD/jRGFZs7Uiz5KOMG1wGYVo=)
                          4: otPEIjukLSXBX1LNzA0kpJ-Qcfs.roa (hash: s8s/CT+3vYo5BDl9VfuNpa4iWRnSeVvGtwmOw+eay5E=)
                          5: ye7c9m6rG8EHvz3fSqWQC8eRnw8.roa (hash: OFM1TpyE+vNA8yY6b7k5rCn5DIDXAB7vZilkBN1528I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:95:4f:ba:77:51:08:bc:0b:59:27:1d:d2:30:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d38579e4c7da01df0465186236e9af27eb7312ed
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=5944875adb6cebad404fb719116dd1f1fe0f3aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:cb:c9:e0:16:bf:ab:24:7f:88:ae:0b:d6:
                    ae:8d:de:0e:ab:25:cd:cc:44:0d:ba:eb:78:a8:38:
                    a4:a3:f6:6d:4b:48:23:11:60:f2:77:98:f6:54:26:
                    11:97:cc:42:dc:9b:3c:84:56:57:0c:31:a4:fc:90:
                    e0:6c:47:d2:d7:d4:ec:87:ff:b5:08:3c:01:5f:d8:
                    af:cb:82:91:ea:46:5c:33:6e:d7:ef:12:93:88:1a:
                    48:85:54:aa:e1:5a:9d:10:c7:dc:a4:c1:ac:07:a9:
                    82:a2:46:50:31:f5:db:82:4e:50:a9:49:f6:dd:9a:
                    b2:9a:31:2b:cf:f5:13:93:c9:58:02:71:09:92:53:
                    fd:5b:c9:e6:16:a2:6d:34:80:bc:ae:3f:6c:93:63:
                    c4:fe:ed:56:ac:0f:97:74:11:55:5b:98:4b:ea:c6:
                    80:a1:5f:13:0b:f4:37:e3:61:ba:79:1d:9a:40:1b:
                    fb:70:51:56:7c:4d:ae:cc:70:48:29:24:c9:37:84:
                    f3:7c:e6:79:20:ff:5b:e8:12:56:28:43:be:a4:52:
                    78:ec:98:ee:76:7a:54:6b:36:c2:85:40:2e:57:12:
                    74:54:e7:52:dc:7f:e8:e5:79:71:d3:26:f4:95:5d:
                    b2:4b:1b:71:5b:aa:3c:43:74:60:6b:b7:3a:bd:15:
                    a8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:44:87:5A:DB:6C:EB:AD:40:4F:B7:19:11:6D:D1:F1:FE:0F:3A:A5
            X509v3 Authority Key Identifier:
                keyid:D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:40:95:10:12:8a:b5:18:94:df:d8:49:62:03:fe:7a:1a:3b:
         f1:71:f6:4d:ab:a0:1f:e8:01:43:3c:a5:38:88:0e:57:16:f7:
         74:c5:83:95:12:b6:c6:11:e9:33:ee:fb:0d:92:13:90:47:33:
         f2:db:d1:39:19:84:3f:2e:d1:dd:0e:83:88:52:bf:83:17:a6:
         07:59:1e:24:4c:3f:b5:4d:50:5b:e5:52:f7:34:84:ab:13:88:
         f8:a4:fd:c7:a5:35:e2:4f:33:69:8b:c0:e3:ac:20:90:19:ee:
         60:6d:ad:d1:bb:46:bf:21:26:77:32:c4:a7:74:d8:6b:2f:64:
         63:c0:0c:7c:ba:9e:35:4a:fa:cd:0d:bf:4b:d2:0a:26:6e:22:
         83:3f:44:89:0f:06:e0:2d:68:c0:f1:37:74:55:00:d4:f0:82:
         f0:af:35:3b:44:b2:20:13:9a:d1:53:3d:bf:ab:eb:5a:62:22:
         fa:67:53:64:d7:87:0b:2d:2f:9e:a1:29:63:1e:7e:a9:a0:bb:
         cf:4a:15:88:42:ec:54:ac:79:7d:d2:91:ce:1e:ea:80:57:00:
         df:88:04:62:15:5f:e1:1e:ed:24:01:43:89:7f:d0:fb:4f:92:
         02:44:44:a9:b2:57:17:95:26:c3:55:5e:ad:d3:f8:7f:16:d9:
         a2:23:75:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----