Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
File:                     _u3yFAZ0rm_z5GRWDElWq24hre4.mft (raw, json)
Hash identifier:          sD4SW6h89sXJjK6dmT5UVgD7/ditafEnKeIFwK/DmZU=
Subject key identifier:   D7:77:AE:24:02:85:8A:B2:A7:86:CF:14:1F:D4:FC:41:7C:7D:9B:16
Authority key identifier: FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
Certificate issuer:       /CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Certificate serial:       01962FAB19611D76BC03994FD71BDBA85DD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
Manifest number:          0935
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: M58q90VZFeP3jvyPYnq7UDFhR3E.roa (hash: pfDDAToaRStBIBYW01WrjbiSm0zCrXjT/V6YwQttWeY=)
                          2: _u3yFAZ0rm_z5GRWDElWq24hre4.crl (hash: 0VBa/DKHciHmh6sETSIaOumVkmAnFU2H2JrPRRM/qJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:19:61:1d:76:bc:03:99:4f:d7:1b:db:a8:5d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feedf2140674ae6ff3e464560c4956ab6e21adee
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=d777ae2402858ab2a786cf141fd4fc417c7d9b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:61:be:cd:0a:48:f4:50:05:2a:21:b1:12:
                    c1:69:34:02:49:d9:f5:d0:49:f1:fb:64:84:9e:44:
                    99:9f:8c:c0:08:92:0c:48:e9:3d:7d:6e:de:11:a8:
                    7e:7b:b9:89:4e:1c:6e:dc:dd:08:65:19:df:47:19:
                    a8:cc:69:41:9e:9a:5f:c0:27:60:09:3f:eb:cb:07:
                    ec:11:f5:00:2c:ac:d4:59:a5:41:e1:60:90:75:ca:
                    a5:db:79:7f:2e:a9:25:85:2d:b5:d3:01:4e:58:45:
                    29:9c:32:ea:50:bf:5e:f5:11:c9:d8:a2:0b:17:6b:
                    cf:5d:ab:f9:ae:81:51:da:6d:fd:8b:2a:4a:54:78:
                    40:45:a4:16:ef:0a:b8:97:bd:09:62:81:a5:5a:ad:
                    a4:1e:29:62:8f:5e:73:78:13:18:3c:19:5b:23:c5:
                    a2:52:f5:e6:2d:e8:3c:8a:a4:56:af:84:78:7b:d2:
                    11:2b:75:89:65:67:a8:4a:9d:a8:36:07:1f:aa:22:
                    0b:d1:24:5e:28:e4:b3:e9:6f:05:87:51:a3:ad:ca:
                    25:b6:20:1f:f5:05:00:e2:58:97:9c:af:6e:92:e3:
                    f0:e4:b5:b8:9e:48:0a:d7:ed:8f:36:2c:d5:ae:54:
                    d9:89:ad:1b:8a:1d:56:c2:a2:a3:d2:c9:66:b9:df:
                    ef:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:77:AE:24:02:85:8A:B2:A7:86:CF:14:1F:D4:FC:41:7C:7D:9B:16
            X509v3 Authority Key Identifier:
                keyid:FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:d0:03:bc:c6:bd:a1:49:52:1f:8e:ed:00:46:87:c1:dd:
         eb:99:80:8d:d4:d8:3e:ba:fd:ab:92:a2:4b:e1:04:80:29:24:
         6e:08:b7:b7:00:b8:98:19:35:6e:82:de:74:5e:9c:99:04:4f:
         11:78:c9:1d:fe:09:89:f6:f1:ae:5b:79:1c:4d:97:f1:58:4f:
         49:3a:29:2c:4c:78:f3:12:78:b7:17:b3:09:b9:17:e2:e3:5f:
         57:e2:df:be:58:57:97:7b:c2:35:a2:e0:4e:e8:39:c3:68:e7:
         b9:68:15:76:89:bc:0e:be:f5:55:f4:89:34:e0:ce:f3:2b:f4:
         3b:d4:a7:89:88:8c:2a:0c:09:ec:c4:97:c5:3f:80:0e:d5:19:
         9f:ee:d9:e1:c3:ed:71:34:a3:46:64:6a:88:bf:fb:d2:73:a1:
         a7:70:5b:87:78:84:b3:4b:cc:40:45:68:c7:a8:6e:26:51:a1:
         30:57:2f:bd:4a:4c:4f:8d:3f:80:6e:e9:ff:c4:7d:1b:76:a7:
         52:cf:e3:c7:dd:39:d4:db:75:0e:bf:a5:5c:74:1e:7d:99:f4:
         ab:24:24:86:40:b7:63:cb:67:aa:59:13:90:00:09:8b:ee:c6:
         08:f3:e7:bd:14:96:1e:89:a3:10:8b:0d:73:1a:34:ef:15:84:
         f0:d3:cb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----