Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
File:                     xJqjIm6vrB530j6PzvGJADhAA8c.mft (raw, json)
Hash identifier:          db9BkBKTZrf0Y5qqiMBL61YqhlKy3597WzfebZ0UmtE=
Subject key identifier:   FF:5F:EF:F8:D9:AF:E0:21:F3:35:18:E9:E6:9D:DE:89:7C:5A:2E:3D
Authority key identifier: C4:9A:A3:22:6E:AF:AC:1E:77:D2:3E:8F:CE:F1:89:00:38:40:03:C7
Certificate issuer:       /CN=c49aa3226eafac1e77d23e8fcef18900384003c7
Certificate serial:       01962ECF82B3795241D7FBC5669673060E04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
Manifest number:          1102
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: PRgXoAwZkCkiYJg9TctLDNDPN1c.roa (hash: PJQ6eErOeYZwguFeHefcnTCZY+UDhTIu8HobmUpRc20=)
                          2: xJqjIm6vrB530j6PzvGJADhAA8c.crl (hash: tCxHrFpLzeT4AZpjKD57tmJkHUDWQFUZYbCoQ3ltSMo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:82:b3:79:52:41:d7:fb:c5:66:96:73:06:0e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49aa3226eafac1e77d23e8fcef18900384003c7
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=ff5feff8d9afe021f33518e9e69dde897c5a2e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:b1:74:7f:ea:36:c3:cb:10:97:34:e5:fe:
                    aa:b7:ef:9c:92:78:68:3f:80:d1:46:e1:0b:a8:95:
                    8c:c5:b7:3d:43:0c:bb:4e:00:e2:8e:22:9d:80:62:
                    1e:65:c9:9e:fa:ec:e1:54:17:63:13:0c:21:71:c1:
                    32:ee:74:d2:85:5a:e2:8e:e1:3c:0d:f5:ec:72:41:
                    a3:19:25:41:e4:e0:df:09:18:32:5a:ae:aa:17:a3:
                    5d:d9:bf:2d:8c:d4:6d:34:1f:cc:90:b0:97:64:2c:
                    4e:97:bc:56:64:85:03:71:1c:7b:68:ba:54:20:be:
                    4b:b5:64:fc:e4:a9:d2:87:0c:a6:76:2d:34:1b:ff:
                    45:c7:08:35:07:f8:8d:8e:34:4b:46:84:6d:f7:f0:
                    d5:a4:3b:6d:83:6b:86:ec:9f:d8:9d:0c:66:61:9b:
                    bd:29:9d:d8:ee:31:b9:ff:f7:28:b5:46:dd:3e:ba:
                    a9:24:53:9b:f8:a2:9a:46:b9:df:7e:8f:c9:2a:70:
                    0a:34:57:09:b6:29:ca:78:8d:d0:f8:10:02:57:8d:
                    2c:9a:7f:66:b5:0c:c2:2b:d4:ba:a9:ea:61:0e:9d:
                    55:f3:64:f1:3c:88:ff:2e:dc:25:da:65:76:5f:10:
                    17:9e:14:c5:31:06:a1:6d:bb:7d:4b:7c:03:12:7e:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5F:EF:F8:D9:AF:E0:21:F3:35:18:E9:E6:9D:DE:89:7C:5A:2E:3D
            X509v3 Authority Key Identifier:
                keyid:C4:9A:A3:22:6E:AF:AC:1E:77:D2:3E:8F:CE:F1:89:00:38:40:03:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:fa:e6:77:9e:f8:34:33:ea:44:8a:02:09:ca:52:6b:0f:49:
         db:33:cf:d6:47:2f:4b:af:71:e7:16:62:a5:7a:70:7c:8e:62:
         11:84:a4:94:73:ec:10:d4:ff:28:83:d2:b1:49:d6:38:ff:0d:
         64:51:6e:c5:39:44:9f:50:35:58:88:85:29:9e:1a:36:94:d8:
         39:48:08:26:03:47:d3:cc:21:7e:86:5e:2d:c2:20:dc:13:29:
         76:7d:c9:14:ff:96:6a:26:35:0b:57:0d:c9:fe:4a:ba:cd:e1:
         9a:85:17:46:01:03:32:c7:12:3c:3b:4c:4a:dc:7d:2f:69:4f:
         cc:bb:f2:54:d9:93:97:a9:59:78:b0:cc:66:4a:52:ba:a4:8e:
         4d:3a:f4:8f:89:bc:66:ac:c2:7e:ab:ee:cc:58:a4:64:d7:75:
         4a:08:db:98:78:57:30:e7:ab:b4:a0:b3:36:85:87:44:ab:d4:
         ba:b0:cc:3d:08:8a:e3:53:20:dd:e0:6a:a1:cc:71:6c:94:0a:
         48:29:59:ee:03:69:80:d4:d5:68:85:aa:da:e5:41:27:11:5c:
         71:ac:39:93:43:90:21:24:e3:4b:bc:f3:34:f3:20:ce:17:6f:
         8c:7b:b2:0e:cb:1a:a6:c7:aa:16:18:46:e3:8d:99:e8:c9:43:
         9d:85:ab:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----