Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File:                     rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier:          cJTOZnPO9tk0E3XA0q8WcpRiBxwnx8vjJ/bzxRVKLag=
Subject key identifier:   75:2F:6C:51:CE:98:2F:5F:65:30:A5:D5:DA:42:B2:21:6A:F4:C7:5B
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer:       /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial:       01962FABB2C510CD40BAB590488B5E06D7F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:43 +0000
Files and hashes:         1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=)
                          2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: QlugGcRfptof8sGS3YuO/SnCpKjS+D/ifIz9I77CGGE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:b2:c5:10:cd:40:ba:b5:90:48:8b:5e:06:d7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
        Validity
            Not Before: Apr 13 15:01:43 2025 GMT
            Not After : Apr 14 15:01:43 2025 GMT
        Subject: CN=752f6c51ce982f5f6530a5d5da42b2216af4c75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:7a:c9:06:5b:a9:d2:7b:54:0a:45:10:16:
                    23:fd:0c:c8:b9:b0:49:9d:b2:7d:53:a9:32:ad:37:
                    62:7e:9c:17:c5:a4:01:7d:7a:2c:82:bc:da:5e:19:
                    e8:97:1b:7b:b1:06:cd:99:e2:77:0d:c1:c4:5c:e8:
                    ff:ef:06:d9:46:8b:7f:6e:a4:f9:01:06:ca:2c:1a:
                    3b:59:ee:13:88:ab:7c:fa:4d:83:1e:f5:0b:f4:f9:
                    f9:2e:04:47:6e:e5:b7:6c:b5:a1:0b:c9:91:0c:56:
                    18:62:f4:47:80:01:4b:9a:fc:3e:b5:92:1a:53:67:
                    35:74:ef:4f:6d:8e:e1:ac:61:e4:70:4f:28:b0:74:
                    75:e2:97:03:4a:13:0d:f1:b2:27:ca:ed:8d:ff:69:
                    8f:dd:d9:03:64:01:0f:d0:b7:7b:f6:cb:c8:fe:ae:
                    6d:ca:7c:11:77:8a:4f:36:ae:44:3b:1e:cf:ca:f5:
                    ca:b6:ab:6a:d8:96:9d:a3:ee:d9:8c:e6:fc:14:15:
                    36:83:bb:1e:90:44:53:71:4d:b8:6f:9f:34:df:22:
                    1d:80:5d:ed:ff:36:90:1e:2f:31:c0:e0:f0:83:a6:
                    9a:bf:83:b1:c9:4d:da:bf:00:89:87:f2:82:a4:af:
                    47:7d:8d:01:06:dd:be:2f:51:a8:d3:4e:75:91:7e:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2F:6C:51:CE:98:2F:5F:65:30:A5:D5:DA:42:B2:21:6A:F4:C7:5B
            X509v3 Authority Key Identifier:
                keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:af:29:6f:15:ed:a8:14:3d:a9:64:1d:d0:3a:ab:b7:b1:
         79:66:00:8d:cb:e9:95:84:49:f1:c6:51:37:d2:3e:e7:fb:74:
         2f:71:6d:91:07:b5:97:f8:c6:79:b3:24:33:62:7e:67:a1:a7:
         b2:a4:77:6a:4f:b6:98:71:28:2c:dd:7c:28:9b:d2:a2:5a:88:
         fd:d1:24:ca:19:63:f4:c6:a5:5e:54:4a:77:21:92:df:cf:92:
         f3:f0:94:36:99:2a:eb:84:02:bf:49:e8:d3:fe:22:82:a0:a3:
         b6:8f:40:11:4f:15:f4:9d:0b:91:6f:3e:a8:76:08:67:f1:56:
         bc:52:00:36:cb:d6:1d:c2:77:5d:cd:32:37:90:70:cb:90:79:
         ea:50:35:e2:19:66:5f:b9:2a:6d:7a:5e:dd:f9:b9:eb:0c:96:
         22:37:24:84:c6:68:c8:0d:fb:e2:e7:b2:77:ae:33:e2:e5:00:
         dc:6c:c4:17:07:68:4b:f6:ee:42:f1:37:56:3c:a0:d6:87:70:
         9b:aa:a2:6c:cc:e5:70:7d:ac:b1:21:f0:33:3a:98:9a:a2:d6:
         ae:a8:40:a9:51:72:d3:2f:98:37:f7:3a:eb:63:ba:39:53:ec:
         45:f7:ef:d0:55:11:42:f2:40:b3:41:68:45:cc:87:41:a5:8c:
         71:94:46:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----