Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
File:                     _XF_OrY5RaG-c5wrOiWJvqVd224.mft (raw, json)
Hash identifier:          rMSpZ3E6OiylrFKbAr2ZlSuYZGb/ku0HYtpVqikjK+8=
Subject key identifier:   8F:51:DB:06:95:D0:80:0C:D9:3A:BE:FE:84:A0:0F:54:28:53:E3:72
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Certificate issuer:       /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial:       01962FAB575235F09057B86679434FF437B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
Manifest number:          0A9C
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: _XF_OrY5RaG-c5wrOiWJvqVd224.crl (hash: 5/Jr3P7v4JXQdF/qEO6xpx83kg11e1Al0aD781ivTMs=)
                          2: gzdyy5qInnSa0M6b956pVUzgC-k.roa (hash: 2Ow3V4pucXvBImXLn02gpmIFTSdf3VU+/V7SnyCKOjI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:57:52:35:f0:90:57:b8:66:79:43:4f:f4:37:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=8f51db0695d0800cd93abefe84a00f542853e372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cd:b9:1d:9d:30:1c:19:77:3b:f8:39:bf:78:
                    24:43:9d:27:c4:f3:69:51:5f:12:fd:07:81:3d:e9:
                    00:ca:82:86:5e:1e:8a:3d:fd:a5:18:c8:6a:06:07:
                    ab:a9:75:08:f5:80:5e:92:bc:aa:89:45:ad:91:5d:
                    b0:2f:20:8d:aa:2b:03:be:fc:3a:47:02:87:9a:cb:
                    1e:6a:5f:05:65:4b:4f:49:82:6b:73:62:72:17:ad:
                    24:21:c2:7b:af:c9:55:80:db:0c:fb:f3:13:a7:c9:
                    d9:0a:0c:cd:d5:f0:ce:d4:37:98:f9:4c:38:3c:6c:
                    77:45:1f:27:74:ff:b2:31:31:e3:4d:ad:5e:a1:06:
                    2a:e6:76:7e:7b:0d:97:da:91:e9:5f:e6:6a:63:0b:
                    f8:2f:2a:e9:69:fd:1f:0d:18:a5:45:3d:4c:47:0c:
                    4c:82:13:0c:06:7e:34:01:d4:f3:28:43:b3:14:5d:
                    49:9d:c1:c9:ae:47:1e:03:92:84:b1:41:30:f4:65:
                    ec:ee:24:f6:04:f4:03:8e:ff:0a:0f:06:8f:aa:ae:
                    83:4a:ec:f7:5b:50:18:e0:55:cf:f6:ba:e7:ac:7d:
                    3c:34:13:53:df:a1:f2:2c:ae:68:f9:ea:10:8a:1f:
                    ce:1e:52:6c:0c:91:69:f2:b3:78:4e:16:7a:0a:42:
                    c2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:51:DB:06:95:D0:80:0C:D9:3A:BE:FE:84:A0:0F:54:28:53:E3:72
            X509v3 Authority Key Identifier:
                keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e3:20:17:c0:80:8a:df:28:d1:a0:f8:d5:90:55:1c:75:52:
         12:bd:01:c3:f2:a0:6d:d8:0f:85:52:40:87:94:90:2e:15:15:
         c2:e4:7a:2b:48:0b:3d:06:f4:a1:81:31:34:33:09:26:97:f4:
         45:d7:d2:be:94:09:de:8a:e7:b6:6d:56:b2:bd:9c:56:78:2f:
         ef:5e:e7:c4:d7:f1:ba:a7:e3:33:e9:83:5a:e3:22:d2:36:58:
         bc:dc:50:5a:fc:3b:8a:3f:1d:af:c9:15:c6:2a:53:ce:36:b5:
         f1:bd:03:e8:35:96:c4:93:f4:05:9e:5d:6a:a0:af:a9:46:6a:
         87:85:de:02:29:33:c4:ed:12:50:86:c1:05:af:25:f5:bd:47:
         20:3f:06:e1:e9:94:6b:45:dc:3f:24:e4:1e:f0:de:38:30:3f:
         b5:86:88:b8:eb:a0:67:68:65:9a:d9:cc:c6:40:61:5a:41:91:
         f1:b6:04:c6:cf:10:7c:f5:26:32:04:87:23:17:35:d7:85:ea:
         98:eb:7d:93:10:fa:7c:8d:7b:37:40:98:c3:3d:a7:d6:88:38:
         1b:77:7b:72:c1:44:74:4a:6c:03:c4:e6:41:98:5d:78:76:02:
         b8:ec:6c:89:8c:49:52:33:78:81:74:bf:59:27:17:89:80:cd:
         68:9f:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----