Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft
File:                     re6JwT1t5zqJRAS_fq-e5eQN6jM.mft (raw, json)
Hash identifier:          /sUdiR80sPwzyjhB3NP9ZlbnoJgQgzgSBJpmgd1LcIw=
Subject key identifier:   43:37:28:56:1F:9A:43:F3:1F:74:44:24:85:0D:8B:5F:15:3E:69:D5
Authority key identifier: AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33
Certificate issuer:       /CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33
Certificate serial:       01962F3D6B849A95EDC08735B21B858C3C46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft
Manifest number:          0558
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: GGsR3CTZp_ySYvfRDUPF91N6wRs.roa (hash: +hbDhYAqa8s6kUaFV+M346NJRpWW83Nz49mGZoVut4k=)
                          2: re6JwT1t5zqJRAS_fq-e5eQN6jM.crl (hash: FexXROP7i8EU6G1GpQsZ+odBe7aDG7DB+ereJYUf0IA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6b:84:9a:95:ed:c0:87:35:b2:1b:85:8c:3c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=433728561f9a43f31f744424850d8b5f153e69d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:88:a8:1d:a7:df:7c:8a:84:65:35:01:f1:
                    43:51:4c:b2:3e:cd:b5:e1:54:a2:f3:8e:0f:94:d5:
                    36:7e:e2:c6:ba:b7:09:3d:b3:df:1d:83:91:f2:49:
                    40:33:f5:ea:9d:ef:f9:7a:1a:6e:70:73:9b:86:11:
                    a3:ad:94:29:a1:80:f4:72:f8:a3:ed:30:e0:d8:66:
                    29:9b:02:4d:53:61:34:24:e6:b7:56:da:e9:e4:9c:
                    3a:25:46:4f:aa:6a:e0:cc:e9:b2:29:e3:b6:f5:d4:
                    18:7b:21:9d:2c:c7:f9:38:d5:e0:d8:9c:d0:2f:ea:
                    d1:ea:69:8b:6d:2d:27:ee:0f:c7:94:59:16:95:ef:
                    b5:c4:b2:96:3b:61:f7:90:21:9e:23:91:d5:5f:ce:
                    77:89:1f:0c:9c:62:88:f5:c3:4f:58:b3:f5:cc:84:
                    e1:7c:d6:01:93:25:df:91:d7:a6:b0:52:44:22:43:
                    fd:41:00:fb:c8:61:b0:69:69:12:4b:2b:46:5d:15:
                    ed:f8:48:20:a5:36:4c:11:75:2e:d0:c5:e8:ed:55:
                    8b:3c:74:d2:0d:83:e7:01:87:f3:16:fb:19:25:a4:
                    c4:41:a5:6c:12:4d:41:7f:86:31:eb:8e:79:4c:71:
                    2c:d6:bc:5a:da:bc:fa:04:e7:9b:40:c6:9e:bc:a0:
                    7d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:37:28:56:1F:9A:43:F3:1F:74:44:24:85:0D:8B:5F:15:3E:69:D5
            X509v3 Authority Key Identifier:
                keyid:AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:de:7c:6f:17:01:8b:4a:19:f6:cf:15:87:63:52:79:58:f3:
         b6:02:26:39:ae:e7:84:16:dd:c5:06:19:ac:60:e5:14:93:ec:
         4d:cb:2c:73:75:09:16:4a:a1:78:20:2d:cb:91:4a:08:b4:96:
         fc:3e:06:99:cd:70:13:cd:e8:8f:4d:13:fc:d3:af:1d:5f:ab:
         ee:d3:ab:70:74:d0:01:da:b1:5a:f1:6c:75:8c:17:5f:5b:72:
         6f:1e:ad:ed:6c:71:6b:a7:b1:84:1f:da:dd:7b:76:e8:f3:6a:
         88:65:d0:3a:0d:63:63:48:bb:14:af:15:7d:4a:ca:e6:d3:54:
         29:09:27:3a:fd:ae:8e:56:89:32:68:eb:06:8f:83:cb:51:1d:
         07:84:36:83:af:c0:0f:80:b1:c2:6d:4b:de:f2:17:34:f8:89:
         3e:86:f5:56:a8:46:1d:e4:cf:8d:b8:f3:b9:e8:56:29:86:87:
         25:fe:30:85:8f:6d:e4:f4:f3:20:4d:44:94:fb:33:79:ca:5c:
         20:ca:3b:ed:b7:f0:fd:e8:be:04:8c:53:3c:7a:dd:12:c7:8d:
         89:09:25:b3:0c:0f:a2:fa:d5:88:71:68:9b:98:64:ca:86:0c:
         cf:b2:0b:99:ea:af:a1:81:5d:c6:cd:11:f0:7e:4d:58:51:23:
         77:5f:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----