Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File:                     704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier:          dvhS49eqU3sxWiEmLYJIt2AsQt5s8HFdQd6IAa/4M6U=
Subject key identifier:   54:7D:0D:CA:BF:C5:72:6E:83:B0:D4:5B:1F:56:1D:53:9E:95:3F:90
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer:       /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial:       01962F3D9D335B58278AFE15E2EFE249C669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number:          0400
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (hash: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=)
                          2: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: qeFs+ukcREgIdNHLiSGL4NQV41LwL96z3jXwubyiWKA=)
                          3: J5QgCxKNKik7O15LPyeeQADYm_g.roa (hash: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9d:33:5b:58:27:8a:fe:15:e2:ef:e2:49:c6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=547d0dcabfc5726e83b0d45b1f561d539e953f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b3:f8:e1:46:10:d7:d5:99:d9:ee:60:61:ed:
                    81:52:81:da:b0:ab:71:86:33:9e:e4:ec:f0:a7:9c:
                    1a:3c:1f:eb:70:ea:7c:5c:27:dc:da:78:67:ec:73:
                    07:18:90:05:6e:90:b8:c7:27:de:14:7a:dd:f4:12:
                    94:1c:80:67:e7:45:bd:56:64:90:c9:2c:c8:8d:3a:
                    7f:dc:8e:4c:fa:18:f1:4a:6f:93:95:3a:f1:8d:2c:
                    c8:f4:bb:8e:18:9d:79:00:30:02:74:5e:25:5f:93:
                    71:6e:50:17:32:ca:0e:1e:12:6c:ab:7d:9d:61:3c:
                    73:69:4e:7e:04:66:d3:d9:03:0b:19:d0:6e:6d:b3:
                    6c:51:fc:ab:f2:c4:0a:dd:6a:36:55:82:7e:c0:17:
                    4e:7a:37:00:c5:f6:72:40:7f:42:cc:ce:6a:56:6a:
                    bc:da:80:bb:0a:97:e1:ce:ac:43:83:85:ae:d9:23:
                    32:66:f6:e1:1b:14:54:02:93:58:43:84:b4:70:1a:
                    6e:c6:89:6e:f1:41:f4:82:87:15:c6:19:8e:d6:37:
                    8d:80:9b:98:25:ef:eb:05:d0:7b:91:21:c4:3c:23:
                    50:37:fe:6a:4f:68:52:bf:e8:3a:96:c5:3b:ca:52:
                    a8:c2:78:62:98:1d:d3:90:34:a4:52:a7:a0:e2:45:
                    7e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7D:0D:CA:BF:C5:72:6E:83:B0:D4:5B:1F:56:1D:53:9E:95:3F:90
            X509v3 Authority Key Identifier:
                keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:03:d5:af:65:d5:8f:5f:09:c9:a2:a4:f6:bf:0e:55:a3:0c:
         8d:e5:bb:3a:61:60:d2:1f:0d:72:61:10:0b:a2:16:76:e4:82:
         1b:88:82:f6:d8:c7:a7:85:41:6b:e7:a8:e3:e7:da:01:ab:dc:
         38:3b:bd:01:6b:0c:45:a9:d4:7f:3c:7f:4f:e3:4c:a7:53:ac:
         86:c9:11:25:23:ba:a6:1e:91:16:81:20:9d:02:ce:df:a0:78:
         f3:2e:33:2a:14:03:68:03:bf:b1:9d:44:59:99:5f:31:61:c5:
         5d:38:bf:ca:aa:31:ad:64:5f:05:98:0a:18:ba:49:b7:08:c3:
         8a:f5:49:74:3c:d3:63:c1:7a:0b:8f:d7:b7:e5:fd:f4:cf:9b:
         45:ed:8d:ed:bc:43:77:4a:cc:d6:65:64:5c:a9:93:b5:70:eb:
         df:fa:b5:fc:80:34:80:19:53:8d:85:c1:c8:ba:e6:1b:22:d8:
         f4:12:84:ae:81:c5:bd:f7:10:d8:4a:1c:54:f1:02:11:a7:ce:
         1b:8d:51:63:92:aa:00:7d:7e:3e:06:74:1f:08:62:ce:74:46:
         e5:b3:15:1b:0e:a9:c4:87:40:bd:76:19:f7:7e:15:5a:b9:dd:
         a4:b4:d1:0d:02:5e:1a:d2:50:23:c7:9c:21:e0:fd:2a:e1:53:
         bb:dc:40:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----