Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
File:                     IQm0ddOrXNHMHElnHnf_nbXOGfE.mft (raw, json)
Hash identifier:          h4y40TzswJPHbiflpYdTkuwwARAKcvnJenogkTctcvI=
Subject key identifier:   53:0A:85:0C:49:01:EA:A4:22:72:9D:E4:3D:31:44:9C:62:6B:DC:0D
Authority key identifier: 21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1
Certificate issuer:       /CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
Certificate serial:       01962F3D659A5814CC2340FF289FDBC6D0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: IQm0ddOrXNHMHElnHnf_nbXOGfE.crl (hash: WvbUO0krPKGk2gA+s4CpyVzKRLzlrxzPuzCdN4Y+mBw=)
                          2: gxfPyS5KakpFEwmfLQLrUMtzDuA.roa (hash: rxllc4raZ48lNaZN0VdX0i2mHb0wFctajLKxvoGGQes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:65:9a:58:14:cc:23:40:ff:28:9f:db:c6:d0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=530a850c4901eaa422729de43d31449c626bdc0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fd:82:76:0d:3f:fe:1d:e9:47:85:cd:09:e1:
                    17:d8:ff:43:28:10:89:b0:7c:d2:5c:8a:98:06:39:
                    46:b4:84:64:c6:ee:83:11:2a:d8:3e:94:fb:76:61:
                    bf:81:ae:75:2f:68:ca:55:ee:5f:0f:75:78:dc:32:
                    60:05:22:e8:3b:dc:bd:c5:55:41:ce:0e:5f:fc:29:
                    e3:84:65:25:ac:56:bd:ef:a4:1c:68:82:4f:7c:1c:
                    70:36:d0:7f:6f:27:d8:65:a9:ec:6b:a1:16:51:8a:
                    7f:8e:ba:6e:28:c7:47:5c:36:82:09:60:f6:e5:04:
                    ed:44:49:e2:e3:a3:83:c0:40:04:83:9d:01:2c:c2:
                    9c:3f:b4:b9:db:a8:26:23:04:d3:bc:f4:42:83:c1:
                    b7:69:38:fe:af:fa:b6:e7:23:7b:d3:25:37:cb:11:
                    ec:9e:58:e2:34:c7:a6:0c:21:12:f6:ea:96:4c:7b:
                    25:94:7f:32:b0:e9:8d:87:2b:41:a1:8a:76:3d:53:
                    17:d9:27:51:1d:88:3e:85:ab:a6:92:50:42:f2:35:
                    6a:35:71:9f:b2:23:20:ad:40:0a:9f:eb:7b:76:d8:
                    37:18:62:c0:ae:ec:7b:33:a7:7c:c3:7f:66:2d:bb:
                    21:b7:5b:86:eb:b9:74:ed:6d:35:7c:4b:f0:c5:28:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0A:85:0C:49:01:EA:A4:22:72:9D:E4:3D:31:44:9C:62:6B:DC:0D
            X509v3 Authority Key Identifier:
                keyid:21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d5:f4:9a:66:28:92:65:ab:61:7f:50:73:38:fa:ac:9b:a5:
         e2:46:69:d2:00:00:84:5b:69:8a:09:6c:c7:f0:a4:22:4b:2d:
         2f:23:1d:26:56:b9:de:8c:10:c4:fe:af:c6:dd:b4:55:70:cd:
         31:32:49:06:ff:3e:2f:fc:95:b6:34:73:e0:66:a9:d1:a5:9f:
         a1:24:ec:31:7a:4a:b1:c1:7f:85:cc:f0:d1:2c:b2:3e:21:84:
         76:2f:a1:c3:6f:3b:57:59:7c:69:c0:de:ab:82:83:6b:56:1d:
         39:d4:5f:b3:ba:37:88:2e:29:f8:68:5e:e0:b9:93:e9:51:e2:
         31:67:37:3f:dc:92:94:eb:43:a7:3a:5f:3b:03:c0:af:70:36:
         ef:90:02:29:cf:36:dc:fb:76:4a:5d:c4:e5:82:10:e1:ee:a0:
         a8:39:9f:08:76:4a:fa:ae:b5:75:5e:1a:06:bf:e2:82:b1:d2:
         cf:4b:a5:61:06:aa:4f:dd:13:83:39:09:08:48:99:66:e9:89:
         f7:32:94:01:4e:4f:2b:4d:2f:92:aa:b0:ce:20:76:55:7c:fe:
         17:68:6e:d7:50:5c:af:3c:d2:41:c9:22:25:31:65:30:12:bd:
         40:e4:a8:91:b3:4b:ba:b6:f5:76:5a:1c:5c:58:f1:c2:02:7f:
         e4:d7:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----