Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
File:                     pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json)
Hash identifier:          RNW72t3s+NDYUGuQ9nP1DWzo1M7Gm8QkbjgpJmsYmXk=
Subject key identifier:   51:3C:8F:ED:B1:54:97:9C:13:38:1A:5E:F9:85:6F:B8:2F:EB:5E:FA
Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
Certificate issuer:       /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Certificate serial:       01962DF4101D320A382566A0D5C8BC834E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
Manifest number:          082B
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: cGGNHHL2taAbcfw5rMUB84kQw_k.roa (hash: J56YjCbrct/bNrc5fidg1pLfrEEsu9MaAGzXOMhbxY8=)
                          2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: RAO6PSiA6umySYog1q2Zrr6+LRYkOKoEXy+qiZnlZj4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:10:1d:32:0a:38:25:66:a0:d5:c8:bc:83:4e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=513c8fedb154979c13381a5ef9856fb82feb5efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:23:47:83:88:0a:da:aa:27:da:28:13:14:5c:
                    d3:71:a5:66:aa:c9:c6:2a:02:c0:c2:70:10:e5:47:
                    ce:aa:03:a8:35:72:b0:92:ef:b6:85:29:f1:2e:e4:
                    e6:b7:84:84:ab:93:61:43:39:1e:e9:09:5f:8a:8c:
                    fd:75:18:3f:b3:ae:42:b8:cb:9f:8e:29:83:2c:de:
                    29:9e:d6:bd:ec:1b:96:97:ff:b1:fb:b3:31:af:f7:
                    41:12:de:40:e2:40:8e:b1:4a:d2:c4:16:20:a6:67:
                    ef:d2:c4:a1:75:4a:f7:80:04:f6:79:99:35:71:24:
                    94:d4:c3:42:f5:35:c8:fc:65:ab:34:be:3a:b6:17:
                    31:bf:ad:50:3c:5f:8e:32:e8:7d:9c:3a:dd:87:c6:
                    b6:e2:a9:8b:a0:ca:fc:0c:f1:22:ab:58:9b:63:a3:
                    61:22:5c:2c:6b:f1:43:c6:6c:be:a6:73:88:35:ce:
                    ec:20:ae:75:fb:fe:aa:e2:ac:0c:47:61:e4:9e:56:
                    e4:64:56:20:f5:50:3e:e4:4f:54:86:eb:ca:05:39:
                    37:9b:9a:76:1a:e5:c9:85:eb:24:f0:41:78:f4:a5:
                    3b:24:70:76:1a:d8:86:2d:b7:70:45:90:ed:d2:00:
                    af:1c:06:4a:e8:da:be:c1:ff:09:8c:3d:8c:74:2c:
                    6b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3C:8F:ED:B1:54:97:9C:13:38:1A:5E:F9:85:6F:B8:2F:EB:5E:FA
            X509v3 Authority Key Identifier:
                keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:da:62:73:3b:23:33:55:88:bf:93:42:38:1e:ab:f7:4d:96:
         9a:9d:11:d4:ce:74:38:98:f9:1d:a2:f5:74:24:25:4e:cf:da:
         ca:48:55:0f:c0:b2:e3:71:5f:36:5d:2c:be:35:2b:bb:29:5c:
         69:7e:c8:fb:15:62:fe:10:34:f4:4c:5e:43:6e:47:e0:79:e4:
         8e:96:7a:2f:29:b4:35:04:05:1e:f2:3d:63:c1:23:8c:b3:d9:
         a8:ac:db:d3:18:12:a6:46:b6:c8:72:aa:62:06:26:42:10:87:
         a3:83:75:76:89:e9:43:91:fe:43:7f:a9:93:eb:1a:c4:e8:a9:
         ab:10:77:0a:26:b5:c9:b6:cc:f6:00:14:6e:ef:35:bc:a9:44:
         e7:14:69:f1:1a:4b:a7:4e:99:63:d2:09:15:6d:fa:64:e0:a6:
         13:36:4b:cb:b6:ff:fd:11:27:82:6a:e0:94:a3:cb:b9:7c:3c:
         7a:8e:07:eb:03:4f:c7:d7:5b:78:45:da:f0:24:a7:8c:f8:63:
         5f:d9:0e:61:a4:ae:6d:9d:84:d2:f2:6e:1c:7f:38:5b:29:9b:
         56:1b:50:56:c1:5f:c6:ac:3a:3c:05:4c:57:8e:53:c1:1c:51:
         25:32:a9:95:50:f1:b3:6f:9d:57:0f:7f:af:9b:8b:e1:cc:aa:
         0c:74:f2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----