Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
File:                     R1oGyte9DD25-KOB8euc1sdaqyg.mft (raw, json)
Hash identifier:          ljni5nTGEKOwtY6SGdCw58JIDzQ8LGUZ+BfvHFohde0=
Subject key identifier:   94:29:1B:7D:92:9E:BD:0B:72:20:D9:DD:95:31:41:6F:97:EA:82:43
Authority key identifier: 47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28
Certificate issuer:       /CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28
Certificate serial:       01962E61E5F66682ED879CDC48DF2AFF655E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
Manifest number:          A5
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: P26izWnWykundEbYZ5JEBhpU0uU.roa (hash: cWV+pN/zcAshvYcQxK5v+o4IGsyjFJQg91I3ipirKBI=)
                          2: R1oGyte9DD25-KOB8euc1sdaqyg.crl (hash: BmMX9q84RTI7gNnCuw740G8/yFgWLT00TTXfrisiTk0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e5:f6:66:82:ed:87:9c:dc:48:df:2a:ff:65:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=94291b7d929ebd0b7220d9dd9531416f97ea8243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:2a:a9:81:8e:f4:13:af:e1:32:6b:67:6a:
                    2b:a4:c7:cc:38:12:7e:ee:4b:be:3e:fc:d6:55:7c:
                    92:28:79:9f:9e:c2:ba:66:cd:1f:e7:9c:8f:46:5f:
                    64:4a:27:5c:cf:ef:a9:a7:b1:bb:4e:ab:01:f9:8b:
                    a2:4a:05:d6:d2:3b:bd:fc:a0:56:3f:f9:17:0f:63:
                    35:af:63:9a:19:31:a6:d3:f0:00:f8:ac:dd:f5:cc:
                    02:8e:75:a3:50:b3:5c:68:a4:be:f2:d4:90:75:ec:
                    34:a6:3a:2f:6c:20:56:81:5d:bb:9b:b8:ab:33:a8:
                    1b:c0:c3:30:35:71:f4:87:28:e5:58:99:22:e4:b5:
                    31:19:fd:3f:c5:04:a5:f9:35:54:d1:90:69:63:85:
                    e3:18:de:ec:6f:dd:60:df:cf:52:3c:78:55:7b:98:
                    97:84:39:8f:d9:2a:47:95:0a:cb:1a:e9:6d:c8:9f:
                    de:30:6a:ee:f6:df:cb:8d:79:39:a3:36:a9:c5:d8:
                    fd:4b:7b:c8:61:44:92:b4:4a:35:19:38:93:52:9f:
                    5f:89:06:bf:0a:27:d7:30:cb:21:61:56:dc:44:80:
                    1f:fd:6e:6e:35:d3:43:d9:40:cc:86:45:2c:a2:a0:
                    51:22:68:47:3c:20:dd:0e:3e:e3:18:00:61:9e:f4:
                    4b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:29:1B:7D:92:9E:BD:0B:72:20:D9:DD:95:31:41:6F:97:EA:82:43
            X509v3 Authority Key Identifier:
                keyid:47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:24:ef:fa:9e:59:9b:ce:e9:4a:e5:0e:63:49:95:fd:96:b8:
         bb:f4:30:3f:fb:77:a2:09:0d:ba:d2:c2:42:33:68:dc:55:e7:
         dc:65:2c:78:c2:5a:38:40:4e:7d:82:59:01:32:fe:97:ba:4d:
         db:91:48:a9:92:25:26:c2:5b:11:bf:e8:93:a2:3e:19:68:35:
         51:8f:ef:9b:7c:da:18:10:85:ea:9f:a9:0a:d8:19:83:13:33:
         e3:e6:1d:5b:2c:35:95:13:48:00:07:34:60:63:52:b5:a1:0c:
         40:62:49:a2:e9:22:97:27:05:53:be:40:33:1c:be:da:1d:91:
         30:b6:33:53:9d:3f:0c:08:22:f8:f8:04:a4:f0:9c:c5:f3:b5:
         df:19:52:10:05:5e:71:e0:bf:15:57:12:50:6c:83:df:1b:bb:
         9f:92:ad:a4:48:1a:ee:b2:62:91:4d:ae:fb:95:19:92:ca:99:
         ac:72:eb:0c:b0:45:78:ea:cf:af:30:30:d5:97:d6:6c:82:86:
         a9:11:2e:f9:e9:61:8f:f3:cc:63:e9:29:92:2d:51:78:de:bd:
         bc:2e:9a:c7:43:1b:e0:45:a8:36:2e:c0:d9:9c:79:47:d2:3e:
         f5:2c:01:82:e8:e6:29:19:f5:9f:76:93:6b:33:4b:8d:75:4f:
         76:d8:b8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----