Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
File:                     30gYvQqzvf87E_-goLSWmf4NZdg.mft (raw, json)
Hash identifier:          ui/KML0E+fFgolxCYZUgaCwdS3cZf1A5q6OzLMUDVkU=
Subject key identifier:   5B:FC:93:3D:28:B0:AE:76:05:C0:11:98:A5:5A:10:45:B0:C5:C5:C3
Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
Certificate issuer:       /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Certificate serial:       01962DF43D930002828F32EAA24DF70A2567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
Manifest number:          117D
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: 30gYvQqzvf87E_-goLSWmf4NZdg.crl (hash: iOu/nXdX/AM5Fi1fRctg8f0R1zD0IMhRH9sHdjX7KDQ=)
                          2: sWuySCoAeegdfWnkMuqNoxyi1Bw.roa (hash: 0K3bxqojGl6MNEviSU5eh2+DL5CKnr6TGRVYgLgGugg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3d:93:00:02:82:8f:32:ea:a2:4d:f7:0a:25:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=5bfc933d28b0ae7605c01198a55a1045b0c5c5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:93:cc:c7:98:04:85:fa:9f:eb:04:0c:b6:
                    da:e1:72:f9:f2:63:a5:97:b8:26:8e:be:fb:bd:9f:
                    4d:ed:af:c8:bc:12:08:ce:1d:f3:37:f4:8a:09:76:
                    c6:6e:08:b2:6a:25:5b:1c:f0:7e:1f:35:62:29:47:
                    38:23:30:50:49:1f:f2:fd:49:df:b9:6c:e2:68:78:
                    59:6e:5a:56:44:08:ce:fa:39:03:f6:7d:ce:8a:1a:
                    38:f2:69:fb:05:b5:9f:78:7e:a7:5e:ed:6b:1c:46:
                    3e:b4:e4:71:78:81:e1:2e:34:6d:8d:54:07:af:6b:
                    ba:b3:34:e8:b9:f9:b6:03:1b:83:62:71:fe:cf:16:
                    2c:8e:0b:d2:8a:b9:fd:c4:fb:e3:8e:2c:de:5e:65:
                    38:9e:6f:ee:c5:fb:c8:11:3b:5d:c3:9d:80:43:ff:
                    5e:93:0c:c9:4c:13:b8:e6:60:69:7d:81:13:17:d4:
                    4f:eb:9b:13:0b:71:a0:2a:b1:9a:eb:f1:c1:85:90:
                    e0:2d:d7:07:ca:cd:7d:88:63:dc:a6:72:d4:f8:78:
                    dc:7f:be:5c:7d:8c:32:be:aa:7f:12:34:8e:7b:e5:
                    87:eb:78:1d:40:bd:85:d4:fb:09:8a:c1:6c:4d:39:
                    3d:a3:29:46:2f:16:30:0f:97:c3:c2:26:aa:70:a1:
                    3c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FC:93:3D:28:B0:AE:76:05:C0:11:98:A5:5A:10:45:B0:C5:C5:C3
            X509v3 Authority Key Identifier:
                keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ab:7f:c5:5d:95:20:a9:e4:2c:74:8a:a9:ae:cb:9d:f0:da:
         23:e1:e0:89:5f:e7:29:9a:57:0a:1c:f9:4e:84:58:71:56:1b:
         a4:83:89:f3:af:6e:8d:29:07:9b:cc:e7:51:61:ad:e0:bc:cb:
         11:af:56:c7:56:ce:02:00:0c:07:07:e4:df:61:2e:15:03:d0:
         cf:b8:b2:f3:23:88:d7:0c:64:94:b5:d7:71:47:49:6e:46:46:
         69:7c:e5:12:93:72:6e:1b:6a:83:c2:fd:c4:2c:05:58:43:64:
         5c:21:1e:54:a4:2e:90:9a:ba:7a:8b:ed:91:ac:ca:84:52:7d:
         b3:f4:9f:be:9c:90:8e:ef:72:8d:ff:3c:e7:e2:ec:4b:72:52:
         be:a5:28:d8:1d:3b:29:c5:b4:fa:c2:8e:42:d9:cb:c7:d8:37:
         3e:b8:02:6d:fa:b9:a5:77:d1:d6:f2:1b:33:53:a8:c4:fc:3e:
         f4:05:53:46:cf:0c:44:69:23:ae:a4:14:b7:b0:a5:81:19:17:
         52:6f:61:cc:d4:62:4d:7f:d3:cd:e5:17:ec:81:a7:f3:dc:68:
         2b:24:68:9b:1e:2e:30:2d:b6:e7:f6:ec:8a:1c:f2:fa:11:b8:
         da:d9:63:e1:29:2f:d3:8d:e1:ce:fd:6c:d9:33:eb:8b:c5:2b:
         4f:f1:40:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----