Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
File:                     MW9DO7TO3XLYbETthZmQNSK15PE.mft (raw, json)
Hash identifier:          YEPLE2hPkktfIELIEwhouqD1lmxlCIQrJwWjWfR6JDI=
Subject key identifier:   16:02:05:C0:A5:3D:78:6A:A9:AF:43:F7:25:E8:ED:E1:C5:44:44:B2
Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
Certificate issuer:       /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Certificate serial:       01962F3DA449AE10185152D48C619455F9EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
Manifest number:          0FCA
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: MW9DO7TO3XLYbETthZmQNSK15PE.crl (hash: AcM2MglcVMALRUBapCyGdB9VMvb6yGZvQumTJqLxfEk=)
                          2: ueb8jWjZsgheztsTNqHl1-Lrnro.roa (hash: bi/jdKM4OGa/0sgftxqgBQAErRWTNtYfIJIP4pXeceo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a4:49:ae:10:18:51:52:d4:8c:61:94:55:f9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=160205c0a53d786aa9af43f725e8ede1c54444b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:07:b4:b8:e6:88:88:ed:48:cb:ed:3e:4b:
                    79:f4:eb:86:bf:b0:39:31:5c:3a:d0:8f:fa:4f:2b:
                    dc:66:4f:4b:b9:13:70:cf:de:05:9e:4d:db:f1:3e:
                    10:1a:a0:2e:e9:4f:2c:94:a9:30:1d:3e:b9:c7:57:
                    78:a8:dd:95:5a:11:8e:e5:99:0b:00:97:5d:70:c6:
                    be:70:f6:db:eb:ae:a9:a1:b7:8a:a6:60:59:3b:52:
                    b9:b1:cf:f5:95:7f:e8:28:88:f7:10:7a:b4:86:ee:
                    5e:9c:91:de:d5:42:86:1f:a4:07:b7:fa:17:a2:32:
                    a4:66:a2:d1:10:48:0a:76:14:6a:33:52:f5:ab:c6:
                    3e:4e:25:d6:9e:aa:91:a7:16:ea:d9:cf:31:c9:9e:
                    e4:7e:4f:3f:ae:75:be:ca:76:fa:94:f0:f7:73:b1:
                    17:35:b1:12:45:4f:e6:07:59:88:b3:ed:80:8f:4d:
                    f8:7d:a6:04:42:d5:ef:e3:ec:5c:d4:3f:e3:26:a1:
                    c8:aa:69:3e:dc:27:f0:9e:bc:83:29:5a:81:dd:e9:
                    bb:83:4b:34:85:65:d9:97:8e:ba:06:3c:10:92:4b:
                    69:c4:76:1c:5f:4c:c9:5d:1c:02:60:b1:91:ed:c8:
                    5d:dd:48:9a:01:fe:f4:28:34:70:f0:ac:dd:d7:b8:
                    7f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:02:05:C0:A5:3D:78:6A:A9:AF:43:F7:25:E8:ED:E1:C5:44:44:B2
            X509v3 Authority Key Identifier:
                keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:22:34:09:a9:a5:5a:ee:df:2a:74:db:fd:e7:79:4c:b7:75:
         e7:8f:0b:a9:eb:8a:ae:c4:19:e0:bd:e6:68:89:2f:5b:99:d3:
         cd:1f:0a:e2:b7:69:66:a9:9a:c4:99:51:8b:5c:42:d6:d1:da:
         0d:9e:92:8f:27:97:2b:74:5a:6e:9c:43:39:f6:09:e3:b4:44:
         7f:4d:65:dd:14:4c:03:24:0c:b7:32:d9:44:19:36:43:eb:b0:
         43:5a:41:15:5d:0f:1e:a7:56:80:aa:9f:1c:92:6c:eb:15:f1:
         ea:00:22:f5:ea:c6:23:79:3a:af:7e:8f:c5:2d:51:a1:49:64:
         d5:70:ed:00:58:0f:15:c6:f7:55:08:bd:dc:b3:da:96:07:f3:
         a3:0a:88:ab:76:c6:43:cb:a5:1d:29:d3:2c:3d:8a:d1:4f:01:
         29:c1:6d:ae:bb:28:79:c7:f2:1e:83:6f:1e:39:d7:37:70:13:
         e4:2e:95:80:f0:30:1e:a7:bb:4c:b7:75:fd:aa:65:40:a0:6f:
         9c:49:fb:73:92:41:58:71:9f:f2:06:5b:03:c7:e8:80:67:b9:
         14:6f:4d:6e:08:9f:be:6c:f1:e2:19:b4:5b:18:4c:87:44:dd:
         15:29:19:2a:0f:28:80:62:31:3e:ee:d7:60:d7:27:9d:a1:b7:
         db:92:17:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----