Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
File:                     byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json)
Hash identifier:          ZKq9xAzqK+njX7+PPSChRdiI7rUjF5WXTU1euQa17ag=
Subject key identifier:   56:65:2F:02:9F:27:34:4A:FB:AA:94:7A:CC:12:76:8B:6F:A5:09:37
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Certificate issuer:       /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial:       01962F06908B9DBCCEC2D3EC85B40F68340D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
Manifest number:          04CD
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: 9yjooD5E3mD9Rz44bPP1TIJoZOU4sdbKH+IzgZPRZUs=)
                          2: jcl3DEDvFDbe2n1OkuP9O1mNtE4.roa (hash: zm9D2SdmmGYoULIl+hQH6eijqdwsjK8xxtq2NuIqYhs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:90:8b:9d:bc:ce:c2:d3:ec:85:b4:0f:68:34:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=56652f029f27344afbaa947acc12768b6fa50937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:15:dc:b8:34:84:23:d7:33:a4:1e:17:31:
                    30:74:fc:38:76:4a:7d:ec:99:cd:8f:fb:43:66:d3:
                    b0:1c:cd:f6:06:8b:ea:d9:9d:65:a7:fd:84:a7:aa:
                    1b:1a:2d:04:38:d5:55:c0:73:36:1d:58:c4:cb:78:
                    7e:7e:41:1c:f3:ec:a2:11:d6:98:ee:b1:e2:ff:79:
                    85:d3:58:18:05:23:d6:55:e2:c5:b8:36:bf:51:f1:
                    fb:d5:46:b5:fa:a0:94:f7:79:b6:19:65:08:2e:a6:
                    3c:3b:29:ee:9b:11:3d:0b:c5:22:c7:0e:84:48:91:
                    38:0a:ce:c1:91:7d:19:99:2b:97:52:92:c4:8d:a8:
                    1b:6f:9d:ff:bb:bd:04:e0:e9:0e:12:87:f5:78:15:
                    98:f5:dd:6e:96:bf:f8:1f:1f:a7:25:3d:c2:97:14:
                    5e:c7:9f:96:e4:9a:da:a3:f7:49:fc:35:46:e7:bf:
                    49:0d:c3:93:a7:c3:11:3e:78:0c:9f:55:8e:d4:bc:
                    ee:51:5a:1e:78:3e:28:3d:a8:8d:f0:9f:c6:4c:d9:
                    d3:45:67:dc:a4:80:b6:aa:fd:90:2d:5d:d1:39:f2:
                    67:41:a8:75:d0:00:6d:4e:2e:17:66:0c:a3:c7:65:
                    35:2b:e6:57:27:eb:33:93:5b:12:04:50:26:86:72:
                    d3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:65:2F:02:9F:27:34:4A:FB:AA:94:7A:CC:12:76:8B:6F:A5:09:37
            X509v3 Authority Key Identifier:
                keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:94:c1:7c:a9:bc:51:35:56:c4:25:0e:7d:56:94:69:fc:09:
         a5:30:2e:e0:2a:f0:c6:bf:23:cb:16:a8:19:61:3e:d0:39:72:
         ac:fd:1a:ad:88:83:65:bb:1f:a8:7c:00:b9:fd:d2:9c:e3:85:
         be:3c:fa:0a:bb:ed:9f:eb:5f:f1:03:71:8f:10:a5:44:c1:ee:
         12:ba:ca:f0:31:f2:51:5c:48:26:1b:8a:c1:96:9d:00:97:63:
         ea:0d:3a:c3:3f:dc:67:d4:24:f5:cc:cc:10:e3:eb:7f:25:d4:
         22:4f:cb:0f:d5:ce:87:aa:9a:9b:02:c0:a2:bd:d7:d0:09:63:
         be:f9:03:29:cf:de:27:eb:5f:35:cf:1e:1e:84:a1:ae:77:f6:
         26:e0:e3:cb:9d:39:cc:8a:91:5b:41:bd:6f:da:11:45:29:ce:
         d3:6b:8c:f4:0e:fc:55:40:62:55:28:50:69:1f:08:3a:62:16:
         26:28:09:02:05:0f:c4:95:e6:07:86:d0:f8:68:e0:c7:ff:ce:
         ac:80:17:6a:1f:45:62:c9:51:24:68:bf:1a:fe:a4:ed:90:4b:
         e9:e1:3e:e4:f3:9e:06:48:13:5e:7c:5a:83:5e:79:44:c1:0d:
         79:32:7a:70:e5:6d:76:5e:75:48:ac:b6:9e:5a:a0:ec:da:78:
         77:ef:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----