Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
File:                     o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft (raw, json)
Hash identifier:          8vrl8v6efuRQIcucd1VRfGwKyXVt3tHUhwcE6QtPxLc=
Subject key identifier:   DE:1E:F5:B7:07:E1:77:6E:5F:89:25:CF:A7:D2:A7:88:1A:D2:9E:26
Authority key identifier: A3:D3:1F:17:99:BF:55:88:FF:A9:88:E4:92:86:BF:C7:0A:4B:34:BE
Certificate issuer:       /CN=a3d31f1799bf5588ffa988e49286bfc70a4b34be
Certificate serial:       01962F7444890B41FBC696E2DBCAC7FCDC99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
Manifest number:          0AC7
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: 1-JVHfdgfgX9obL5uDihzl6u5be0.roa (hash: 5fhgSJOuf6zlLlFO7nClbQrHjOcLY4QSzZjarquKLMI=)
                          2: o9MfF5m_VYj_qYjkkoa_xwpLNL4.crl (hash: cBK0KXhuGG1EiHhpmQAPGlQcDXh/POboC1d2vfOjUVE=)
                          3: r3cWbqyb9HgoTXK9cVNeKGx5WVc.roa (hash: yyB4q0s1+lO0MUxRgNhJm9ecE94W+tKbHHcE3lo6URY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:44:89:0b:41:fb:c6:96:e2:db:ca:c7:fc:dc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d31f1799bf5588ffa988e49286bfc70a4b34be
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=de1ef5b707e1776e5f8925cfa7d2a7881ad29e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:43:62:43:c5:1d:9b:38:a2:2e:8e:00:24:
                    d2:a3:b9:6c:a2:43:cc:4d:1c:96:e7:64:84:63:a5:
                    41:6e:b8:0d:67:5d:11:b3:14:5a:59:bc:5d:6f:e3:
                    ad:a6:57:32:eb:89:ae:4f:f9:09:8a:e4:73:b1:c2:
                    d9:b8:8a:61:81:e5:24:78:8f:96:38:d5:f4:a1:11:
                    6d:c8:0b:54:9e:eb:93:51:69:5f:09:fd:60:84:59:
                    29:ed:02:01:db:32:f1:aa:25:43:e6:bf:fc:b5:e6:
                    a4:05:7c:3a:51:45:c4:04:10:03:e7:93:37:42:3f:
                    57:69:dc:c0:94:a2:96:2b:eb:f8:06:fe:2b:0b:02:
                    10:74:60:dc:42:80:7f:7f:70:5d:ca:2e:64:b5:82:
                    54:a2:0a:93:13:ae:21:09:4e:3e:1b:80:5e:9d:5d:
                    06:c9:72:93:42:22:8f:7c:1a:88:32:e5:4a:e6:7e:
                    5c:31:9c:24:08:df:15:85:e3:e3:87:a0:ea:f4:35:
                    73:4c:64:c8:33:9b:73:77:7f:40:52:82:13:5e:e9:
                    80:7c:c8:64:58:a7:3b:57:f5:18:f7:d4:84:fc:6e:
                    56:cd:5d:27:6c:d7:98:ad:00:da:c5:df:c1:84:22:
                    28:6b:75:aa:15:67:0b:bf:6b:f0:61:a7:a5:9b:19:
                    97:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1E:F5:B7:07:E1:77:6E:5F:89:25:CF:A7:D2:A7:88:1A:D2:9E:26
            X509v3 Authority Key Identifier:
                keyid:A3:D3:1F:17:99:BF:55:88:FF:A9:88:E4:92:86:BF:C7:0A:4B:34:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2c:d5:9a:76:44:ab:be:08:f4:cd:20:f2:79:82:ed:ce:6e:
         d5:a4:fb:a1:96:3e:10:b2:fc:09:47:b1:72:6f:0c:2e:f8:0b:
         40:c0:14:19:40:0c:81:d3:e0:8c:44:f3:6b:3e:40:ea:d5:9e:
         45:23:80:8c:67:01:f3:21:3d:59:91:93:1e:c0:48:62:15:a9:
         4e:2c:d0:20:aa:5b:93:5d:77:7d:2e:ba:2c:8d:2d:17:0b:79:
         6a:7d:61:14:0f:61:b5:2b:e7:9e:a8:4a:e7:3c:b8:6d:10:27:
         f8:1e:86:ec:44:0b:dc:3a:9c:fb:3a:9c:b6:20:22:5b:67:f9:
         6c:db:b8:6e:89:95:dd:bc:37:3e:65:4b:26:9a:a1:56:58:85:
         65:fd:de:b9:9e:cf:95:f7:eb:dd:ee:eb:5f:a6:7d:43:9d:e8:
         aa:11:f9:cf:0e:94:74:6e:5d:de:ae:92:ad:3e:4d:90:4e:27:
         60:c8:35:f0:c2:b0:9c:4e:58:8f:82:b4:4a:69:b6:67:b8:f9:
         dc:66:7d:06:b4:79:ba:5c:f6:bf:8e:12:95:89:bc:df:b2:b1:
         ba:79:01:cd:32:63:9e:ab:4a:a6:0f:69:e3:b1:8f:d8:7d:2f:
         61:5a:f6:20:c9:e8:cd:1f:b7:3a:b9:72:86:4e:e5:9d:9e:50:
         f9:51:65:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----