Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
File:                     Rmv4di_kLwoT2n0hypbEMBUA68w.mft (raw, json)
Hash identifier:          5+vCi/uOkFIjKxPo1R+Ansg7wOZB6B0PzHsDc3Vmlp4=
Subject key identifier:   4D:FC:2F:FA:BA:E0:DE:16:A6:C0:AB:F1:11:0C:F6:59:08:66:BB:4E
Authority key identifier: 46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC
Certificate issuer:       /CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
Certificate serial:       01962ECF6EF3B4087791027BEAF0ECCBF092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
Manifest number:          0565
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: Rmv4di_kLwoT2n0hypbEMBUA68w.crl (hash: sBE1HGOCeFZC3bFhKZt/7TlK7HEHb3+EWZvrw/Y5DE0=)
                          2: ys86q5jXiENW-WW7AK-nkVinoug.roa (hash: PK1sfbQN38TktvS2UC6cxV1eHaxPEymB6l0sa2UeYfk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6e:f3:b4:08:77:91:02:7b:ea:f0:ec:cb:f0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=4dfc2ffabae0de16a6c0abf1110cf6590866bb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:90:1e:6e:d5:d9:6e:d4:4f:66:fd:c0:8e:
                    6a:77:0e:27:c6:ff:79:60:b6:24:7a:ee:be:67:43:
                    c9:4b:18:5f:68:4d:f8:c9:10:55:2b:a3:00:68:a9:
                    94:e5:36:36:92:5d:0c:c1:eb:0c:ec:f0:46:73:e3:
                    a8:0e:16:21:64:46:8a:f6:17:ab:74:5d:9b:fd:41:
                    23:f9:a8:ec:ba:17:1c:23:60:94:46:6b:74:23:f2:
                    ca:50:cc:36:1f:fc:d9:8e:b7:01:5b:f6:f1:c6:d0:
                    2c:cc:d2:4b:7f:5b:d3:41:e3:b2:d0:99:3f:67:17:
                    ec:b0:b2:6b:6d:a0:ec:08:88:2c:8a:7b:23:ab:71:
                    ac:32:64:7f:bb:9a:04:19:77:f1:24:e2:c6:f4:46:
                    a5:dc:88:8d:9b:b0:a7:46:28:38:8e:a5:1c:7e:a3:
                    59:8e:8b:9a:71:fe:d7:75:48:08:af:23:cd:fe:8b:
                    59:01:55:81:2e:31:82:41:5f:c5:7d:ef:e0:d6:9c:
                    3f:f9:fb:24:87:df:c3:49:d0:16:0a:ea:6a:94:b8:
                    67:b6:e0:b4:ae:69:0f:a8:b9:92:b8:6f:41:4b:59:
                    a6:ac:70:26:e5:62:4f:cf:fe:c8:be:a3:1e:21:0e:
                    fa:a3:e4:10:3c:ba:c5:a6:20:a0:54:42:fb:0b:c2:
                    d3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FC:2F:FA:BA:E0:DE:16:A6:C0:AB:F1:11:0C:F6:59:08:66:BB:4E
            X509v3 Authority Key Identifier:
                keyid:46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e7:c9:b6:6a:bc:d3:53:45:d1:a6:61:6b:3a:62:80:78:33:
         21:3f:d3:6f:b4:23:f9:a0:26:6e:26:1a:65:4d:82:84:38:6e:
         67:50:5c:1c:e5:8f:62:bc:b8:c5:d4:17:ca:95:46:1a:44:46:
         b1:b5:b0:43:70:ec:45:f9:13:a0:d8:3c:d2:e9:d5:f6:ad:1a:
         76:09:a3:0f:b1:58:df:ad:a1:a3:b5:8f:29:ad:cf:aa:0e:ba:
         b3:03:9c:99:f8:73:c3:ab:a8:ca:ef:67:75:f8:83:5b:23:53:
         8c:ef:3b:b3:fc:97:8d:c3:a1:b1:f5:66:5d:0a:38:a9:38:33:
         ed:12:6a:06:60:a9:fc:c5:9a:69:91:8b:61:36:b0:65:c7:ed:
         f5:d2:2a:af:51:fc:88:5a:f7:a2:9f:f0:af:00:21:1f:c1:8f:
         0d:e8:29:d2:5a:89:48:ee:12:fd:3a:70:d8:23:99:44:60:10:
         b5:7d:a7:19:d3:be:ea:6e:be:3d:0b:0a:3f:6b:15:7e:72:6a:
         f7:9d:17:e3:6b:1a:af:e3:b9:c6:d3:a2:91:80:7d:c4:cd:01:
         00:19:15:53:77:77:ee:54:65:e0:9a:3d:cf:ce:6e:10:76:5b:
         ec:76:31:28:22:1a:29:30:db:60:48:63:df:84:b7:88:3a:0a:
         2b:1f:69:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----