Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
File:                     1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft (raw, json)
Hash identifier:          xG4MneLAGtvI+pw2JIH8NV7IHFS1WwE5lJpcXLbkW7Q=
Subject key identifier:   4F:98:7F:77:0A:AC:A4:61:F6:7A:6F:55:3D:C5:E9:8A:7B:12:88:B3
Authority key identifier: D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
Certificate issuer:       /CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Certificate serial:       01962F06A03ADC566A592C7B98FBE8744D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
Manifest number:          122C
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: 1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl (hash: cUwsHq4EfVAdLicemQyLjwxxW3QFrk0zf5LoPWPHyaE=)
                          2: OialHmpN2PfgJDs6a7B2v4zJHRs.roa (hash: Xr6Ys8oUxUhvsBwxBXXCldMQezaqpARcpSeHUjpkSck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a0:3a:dc:56:6a:59:2c:7b:98:fb:e8:74:4d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=4f987f770aaca461f67a6f553dc5e98a7b1288b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:48:d5:bb:7d:78:da:df:7a:1d:77:ee:72:1d:
                    fd:ae:21:3d:7f:44:3b:ce:b6:e6:07:ad:0b:41:ca:
                    2a:cc:c8:fe:4c:bb:af:79:bd:5f:80:72:e8:0c:44:
                    8e:c8:00:52:14:0e:f7:a0:56:83:ef:93:53:a7:68:
                    51:06:01:b3:30:26:76:c1:3d:a4:32:cf:25:c9:6e:
                    7a:85:16:00:1b:56:1a:71:6a:fe:e3:0c:fa:40:2b:
                    5b:a5:45:04:9d:3d:d6:ed:eb:41:92:43:64:60:f7:
                    4c:3f:98:a0:89:cd:a2:99:6b:fd:50:39:49:27:d0:
                    32:7a:55:b6:f4:44:d8:36:ce:f4:a0:07:89:08:3a:
                    f9:e2:ec:ea:b4:28:ee:6c:28:2b:7b:99:2c:90:62:
                    82:3c:b5:07:a5:ef:7a:e6:cd:34:95:6f:e4:fc:30:
                    f5:17:c5:71:c0:6f:7d:73:41:fd:30:53:f3:78:e8:
                    f2:45:b9:33:10:77:85:cf:89:dc:95:6e:24:d7:64:
                    e4:66:60:c9:a6:90:22:84:c1:7b:ce:eb:b9:2e:88:
                    54:21:fb:18:bf:65:ca:87:a0:5c:7f:d7:b5:f0:bd:
                    ed:c5:64:72:41:b5:f1:57:0c:4f:e2:b3:4d:4d:d5:
                    e2:90:fa:a3:e0:31:fd:40:16:88:94:d5:3d:41:20:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:98:7F:77:0A:AC:A4:61:F6:7A:6F:55:3D:C5:E9:8A:7B:12:88:B3
            X509v3 Authority Key Identifier:
                keyid:D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d8:72:70:be:34:ba:55:46:11:c9:97:15:57:d6:dd:c0:62:
         be:53:aa:ed:e2:57:47:01:42:da:a4:7a:08:d5:04:2c:02:e3:
         d9:85:d5:1b:29:21:e4:7b:a9:70:fb:f0:a7:fd:67:e8:06:94:
         21:56:a1:08:49:d3:e7:c9:fe:98:bc:67:8c:a5:a0:87:fd:f0:
         cc:0b:ee:91:47:f8:10:a3:f8:af:db:d2:0d:d2:69:5b:c3:21:
         6a:3e:b9:f4:bb:ed:4f:d5:aa:be:c2:51:7a:ba:93:8b:a6:ea:
         02:33:35:a8:5e:e2:7b:3c:04:c8:6d:0c:8b:40:ef:7f:05:3c:
         8c:2c:3c:e8:f4:1e:d4:de:a6:a6:c6:ab:b5:17:e1:52:af:6b:
         8c:37:01:07:79:a1:bc:11:7b:bb:b5:f4:b8:50:f1:5b:a4:5d:
         e8:ba:9b:bb:7a:5f:7a:96:a8:d5:ad:50:04:86:44:88:19:7c:
         c0:03:11:e2:41:ed:7e:f2:1e:90:90:10:d3:76:9e:b7:26:86:
         fc:96:16:91:58:02:f1:04:63:be:0e:6a:7e:5f:bc:81:d9:08:
         c1:6f:a6:29:c3:13:6a:1a:2b:0c:52:ed:46:2d:0b:72:3e:73:
         64:6e:e7:68:18:b0:0e:05:e5:62:85:ef:b1:18:a0:46:28:df:
         a5:64:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----