Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
File:                     pFIjl-wNFJkgGvD6nqKgS31c-mo.mft (raw, json)
Hash identifier:          HhEReR9+i4s5AX9N/LUhA2VB2yeCPQHOVeYpY3i8cLs=
Subject key identifier:   DF:7C:A5:6D:B6:BC:05:6C:92:BD:36:41:42:FB:E2:CC:EB:FB:64:E1
Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
Certificate issuer:       /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Certificate serial:       01962F06440194BC78CAE1B4E269253C1E0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
Manifest number:          01D2
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: 3zuNm_rolfFNztpZzjMDGM_7wOs.roa (hash: 6DVW+skCd5kOszHOwiH8v1Z8QoCm6yJygVbagRePo+4=)
                          2: pFIjl-wNFJkgGvD6nqKgS31c-mo.crl (hash: ZHCqrmcawnHSd+4svWqwVTCiYaERtQgrn58I9umgmMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:44:01:94:bc:78:ca:e1:b4:e2:69:25:3c:1e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=df7ca56db6bc056c92bd364142fbe2ccebfb64e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:d7:44:31:18:b4:0d:d4:0e:5f:53:7e:7e:
                    e4:82:69:8d:65:d1:d9:fb:43:54:9f:be:a3:28:22:
                    46:37:3a:72:bb:fe:d8:7b:7c:95:71:90:6e:f8:89:
                    69:9e:45:f7:a1:31:4b:f1:5e:6c:ff:54:50:6a:76:
                    9a:80:a6:0b:85:fb:74:fb:11:14:07:a2:bb:a4:88:
                    9b:d1:05:56:aa:fb:f3:47:1f:b5:3b:73:4e:9e:fe:
                    71:03:19:2c:d0:05:56:92:7f:39:ca:f7:08:c4:11:
                    da:15:6b:d8:4a:fb:69:df:e2:76:8a:af:0d:65:83:
                    57:ce:56:d9:98:e8:39:bc:cf:a0:ae:21:32:3e:96:
                    ff:5a:9a:33:b0:61:a3:0e:55:fd:de:72:d3:99:df:
                    b2:7d:a1:d8:92:5e:42:c9:2a:15:d8:cb:0b:10:2a:
                    49:09:c2:15:72:4c:12:45:6a:7b:43:53:51:b2:c4:
                    f3:01:02:08:ea:0b:4b:f9:0c:c2:48:04:0f:14:67:
                    09:c9:8d:d4:28:ee:80:fb:5a:16:16:0b:63:c7:f6:
                    72:fd:ee:4f:40:4c:d0:23:87:f7:56:a2:93:19:8a:
                    ee:18:0f:fd:ad:6c:10:76:05:02:47:07:45:15:83:
                    a2:8c:80:fa:77:8a:d2:7b:f8:b6:13:3e:5c:b2:bc:
                    e3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7C:A5:6D:B6:BC:05:6C:92:BD:36:41:42:FB:E2:CC:EB:FB:64:E1
            X509v3 Authority Key Identifier:
                keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:03:01:7c:16:7e:82:ba:e9:6f:22:fa:53:71:48:26:44:c8:
         de:71:01:db:22:fc:a7:32:d6:39:5d:2e:be:ff:68:f4:60:70:
         7d:53:01:0f:95:0c:6b:4c:e2:aa:98:a5:43:57:7b:e6:95:04:
         ae:8e:13:e7:67:5c:55:20:77:31:9f:e0:0b:22:7a:b8:7b:bd:
         ce:47:bd:3f:71:a8:08:a2:bd:35:50:c0:0d:82:4d:f4:ca:84:
         3a:2f:8f:a1:2b:c1:45:45:fd:18:d8:8d:bb:4d:c2:c2:28:03:
         c9:cc:52:e4:2c:25:f7:a4:1b:97:24:82:2e:85:a8:92:9d:32:
         6f:0f:90:d6:20:67:34:4c:a4:20:e2:91:13:24:11:8d:9c:86:
         7c:fc:40:63:23:93:82:2e:b7:9e:72:e9:fc:db:cc:4c:f5:af:
         12:f9:cf:55:33:f9:f0:21:b9:7b:95:36:c8:80:71:ea:f7:39:
         08:74:aa:a3:00:80:05:06:05:1f:d1:d5:52:4a:b9:a1:b3:d0:
         bc:bd:99:66:0a:89:b5:80:1f:fb:5f:66:80:6a:53:ff:94:36:
         6b:66:a8:3c:c2:26:f2:b2:bb:bf:fa:a2:8f:e3:dd:f4:ff:4b:
         ce:fe:f8:68:57:33:51:5c:03:6e:55:25:c5:ee:94:19:11:cc:
         51:28:9a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----