Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
File:                     dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft (raw, json)
Hash identifier:          D2tWPuVoDF6u2gg+batUhXA8xSBr+FJ762pU9S8i6jM=
Subject key identifier:   24:98:A9:FA:1C:8D:6D:80:90:DE:6D:B1:77:EB:F6:5B:C4:DD:93:8D
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Certificate issuer:       /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial:       01962F3D2C0023D00D00DDF6A06A923EFE21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
Manifest number:          1505
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: 71ShF1BCLjj0zaSeXk0AMT8blX8.roa (hash: e2hez6w1xM1fmLGyeGjPMPTWmBAzD8pwvbWMd9Ngygs=)
                          2: OP-qluzkX5DpP--tqOyTqe3xHcQ.roa (hash: jbnp8pZaghnbGo5f+Z7LlRrvT6qH4dxP9RPLOACmte4=)
                          3: dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl (hash: YcOM3xknZb+t29OQgOu4qwu2Q2Ve6F1PXD/80YYAfmw=)
                          4: kPZEIQD00f54ZqT4l8jT3U6aQnM.roa (hash: +0mivRqNtYBY/xMUeXXOLBAXk2BX+gr2q/xuFmdEA2w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2c:00:23:d0:0d:00:dd:f6:a0:6a:92:3e:fe:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=2498a9fa1c8d6d8090de6db177ebf65bc4dd938d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:ad:6e:7b:e0:3b:96:cb:05:28:2b:99:6c:
                    dc:30:d7:00:8b:af:3b:66:4a:9a:e6:18:60:30:39:
                    27:75:14:09:04:54:93:b3:41:5b:1b:15:16:be:5d:
                    00:53:ed:ce:79:5b:b6:94:56:ed:20:53:8a:18:7e:
                    72:6e:7f:25:05:96:0f:26:e2:dc:a9:8a:b6:24:99:
                    13:f8:12:e8:8f:7c:09:d0:e5:61:89:c5:f9:f6:c3:
                    42:4a:f0:c6:4f:4c:a5:57:57:25:e5:fe:6b:3d:b8:
                    27:ab:34:60:eb:7c:92:92:a6:31:96:77:29:41:39:
                    07:0f:2e:30:a8:07:89:31:9c:17:17:8c:49:4e:63:
                    00:3b:07:c1:fa:fe:b4:08:0e:c7:f8:a7:8d:a0:fd:
                    d9:84:94:11:9d:89:64:54:af:1b:d0:ca:a2:71:dc:
                    ac:22:f9:00:88:a3:8f:83:bc:49:f5:74:d8:3d:7f:
                    98:cf:84:c2:c7:eb:dd:d9:4c:27:29:32:d1:ce:28:
                    f8:5c:39:10:d3:bc:c5:c5:5a:bc:5f:7a:98:a8:49:
                    36:50:b9:87:56:f3:9c:78:7a:e3:96:d5:d3:90:2e:
                    b2:73:e5:e2:41:81:a7:9f:1b:de:1f:35:aa:47:06:
                    6b:55:85:c3:13:2a:80:ca:a5:ec:93:ce:73:aa:65:
                    6c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:98:A9:FA:1C:8D:6D:80:90:DE:6D:B1:77:EB:F6:5B:C4:DD:93:8D
            X509v3 Authority Key Identifier:
                keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0b:14:a6:b5:26:a8:97:d9:ad:4b:05:4d:23:50:ce:29:a9:
         c6:95:7a:5f:0e:16:1c:6d:97:5a:bc:eb:7d:d9:64:37:4f:41:
         72:0f:3f:b8:d5:46:4c:00:ca:05:1e:a1:45:8b:45:97:c4:29:
         79:a6:e4:81:4d:1f:c4:be:e7:2c:ba:f9:cf:7c:e1:11:92:a2:
         67:ea:88:c7:2f:ba:95:35:a9:6f:d5:30:3e:d5:e0:ed:d0:ac:
         49:c3:3e:d1:f2:bc:c4:b6:89:99:e2:a0:98:07:e0:7a:a8:59:
         c9:d5:ef:4c:44:e3:4a:76:02:34:9b:f1:3e:a4:f8:ec:85:b5:
         69:c9:c1:90:d4:ec:98:d7:3f:83:0a:bb:25:79:b8:bb:fa:1e:
         55:67:24:2a:c4:f7:b2:c7:47:72:15:f2:bd:1b:61:6d:8b:92:
         8f:d3:cf:0a:a7:72:90:31:f8:b6:fd:d4:a5:44:05:6c:c7:d8:
         88:f1:01:16:54:6d:32:3a:1a:97:28:f1:22:6f:19:a4:02:65:
         31:a3:2e:b3:be:bc:36:f2:b3:16:64:36:bb:79:07:81:59:f4:
         43:16:b9:0f:fe:cf:5b:24:5e:1b:24:41:eb:3c:45:24:d2:5b:
         52:82:10:c2:70:59:f0:dd:9d:a5:4a:ba:31:a6:c7:39:21:04:
         79:f0:f7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----