Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
File:                     adcx-k3SksDAUy7qaWfOwHkHRao.mft (raw, json)
Hash identifier:          FbmBrD8ND7HSHXxh1ZPSlY/Jw7w+QOyynKtxL21b2r8=
Subject key identifier:   5E:24:3D:DF:93:28:32:4D:9F:D5:FA:C9:16:FA:CE:27:FE:E8:65:FA
Authority key identifier: 69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
Certificate issuer:       /CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Certificate serial:       01962E61AFCC6D36AC11237805B4E5961755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
Manifest number:          04EC
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: SWEdM65l-EYRwVqCTPoCOjy6GaM.roa (hash: Tv3EVv3dATD+Wzt7v7ZrOSKmfA3WJr20DMhoDuNr2kk=)
                          2: ZOAIGzltyHMXQU6ltllGlFexC3s.roa (hash: qgz3cg0yrRtsx1xhQCihERkPJV1q3/wNQ4j8DRBe274=)
                          3: adcx-k3SksDAUy7qaWfOwHkHRao.crl (hash: nRUih9nOZ2fxHTqPYwD331rAoFQuruT3lrKEocgkn4U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:af:cc:6d:36:ac:11:23:78:05:b4:e5:96:17:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d731fa4dd292c0c0532eea6967cec0790745aa
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=5e243ddf9328324d9fd5fac916face27fee865fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:15:b8:10:f9:90:a1:ca:df:40:0c:ec:6f:
                    ea:84:8d:cd:65:15:a4:f6:33:aa:3c:09:76:57:c2:
                    09:1e:df:22:65:3e:07:88:d9:84:e9:cd:56:86:cf:
                    ff:e0:a1:de:28:4a:45:b6:42:99:93:ac:a6:e5:96:
                    07:ce:a6:16:3b:e8:b3:43:ed:ed:0d:f5:8c:41:4e:
                    9c:a7:1c:2e:54:2a:f4:c7:35:78:dd:c6:c5:3b:75:
                    ea:27:0a:60:0f:1e:8d:bc:fe:35:88:ff:f1:57:69:
                    1f:22:9c:41:7d:44:12:2f:24:4e:e8:10:55:d8:2f:
                    ee:35:85:3e:22:a0:c0:11:50:ae:8c:fc:19:b8:c7:
                    a8:e0:1a:92:58:bc:3d:65:13:af:12:d5:4b:ee:aa:
                    c8:97:c7:b1:d8:db:1d:bc:46:ef:82:80:90:9a:a0:
                    e4:4a:ce:23:af:db:f0:9e:99:70:6c:25:62:d6:0d:
                    d5:20:d7:15:62:bf:fd:83:8a:97:94:f1:a3:fc:9c:
                    16:ac:38:89:e9:30:a7:72:66:84:1c:62:e0:66:f7:
                    9d:5f:2e:73:3f:44:ab:36:fb:e3:fd:f8:08:5f:69:
                    45:f3:f4:f4:b3:51:b8:e8:1c:92:b8:fa:3e:8a:26:
                    65:7b:2a:30:30:8b:08:d9:e7:b5:1b:fd:30:f1:f7:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:24:3D:DF:93:28:32:4D:9F:D5:FA:C9:16:FA:CE:27:FE:E8:65:FA
            X509v3 Authority Key Identifier:
                keyid:69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:57:79:1d:dc:38:f4:fe:be:d2:51:dc:b6:df:f3:8a:98:cf:
         6c:4f:3a:1b:95:a3:5d:03:fb:6f:7f:f9:ec:4f:a7:e1:91:3e:
         df:77:2a:6b:ff:65:5c:6a:a3:7a:f8:64:5f:2b:04:35:be:90:
         9f:32:9e:0b:8f:91:8d:e3:c5:cb:d0:ed:29:38:45:bb:41:cc:
         b2:2e:c8:29:a4:1b:a6:14:90:62:19:66:4a:d7:96:12:cd:b7:
         04:bb:21:d0:04:9d:3e:48:53:a3:91:1e:9f:d5:f3:76:0e:b2:
         ce:c7:69:74:7a:99:07:a4:29:ff:dc:e7:ac:2b:eb:18:59:cb:
         95:1d:2a:ca:b1:aa:a7:74:59:5b:08:fb:12:96:85:8d:8c:3d:
         a1:40:0c:e5:86:8e:99:d9:c8:1b:8c:56:a2:91:7c:c8:e0:e2:
         ff:f5:58:38:14:70:ce:52:6d:4e:45:90:41:5f:f6:6b:60:94:
         95:13:63:8b:88:b1:ca:75:42:eb:6f:9c:be:5a:ec:7b:c5:c1:
         61:41:96:ac:e4:23:7f:1f:58:d2:3d:9a:6c:be:c1:2e:45:6c:
         23:e8:ee:36:ec:27:c6:2c:c0:2d:e1:76:c9:da:63:9d:a6:6c:
         41:70:f3:33:b6:79:1e:9b:15:5e:c3:69:e0:f4:63:d0:9c:39:
         1e:15:3a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----