Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
File:                     s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft (raw, json)
Hash identifier:          ri9W5BGBDJzTuoaK00qmp9GdjGAWs9A84XY6gNT9V1c=
Subject key identifier:   52:B5:E2:53:B0:91:E1:CA:73:4B:CC:3D:4C:75:1F:5C:EA:DD:0F:D6
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Certificate issuer:       /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial:       01962ECF567531319E2BAFA5A787BC6A552C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
Manifest number:          0873
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: IcIyZXTtvGCVT7kmzm3an6XI4Ds.roa (hash: 9+rlboX5YqLY2xGwqsRBQUwcIF0ZyOqFrf8SvNh+rfQ=)
                          2: s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl (hash: Rn9qT6dXw/SvyWLktZSL0J/NL3nIApCsiGs9/XUYIN0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:56:75:31:31:9e:2b:af:a5:a7:87:bc:6a:55:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=52b5e253b091e1ca734bcc3d4c751f5ceadd0fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:a0:fb:48:61:11:37:f5:2a:5d:01:14:af:
                    6d:41:68:bb:d6:a3:3e:35:db:98:47:48:5b:94:08:
                    25:4a:e7:39:3a:d4:f4:f6:ac:7b:1d:2f:ba:cf:fe:
                    29:b4:09:4e:11:ad:99:fd:20:10:48:4a:90:fa:84:
                    7c:0b:85:ca:f8:fa:cc:fb:ca:c4:04:55:6c:7e:d4:
                    50:e7:f7:b3:2f:57:17:ee:63:15:07:c3:b9:0b:db:
                    bc:26:da:bc:48:63:0d:66:6f:02:63:92:6f:ba:3c:
                    f5:e3:ac:0d:ae:db:28:2e:ec:30:31:12:6e:4a:c5:
                    dc:08:94:5d:3b:d3:db:8a:dc:8e:f9:ae:6b:7f:c5:
                    fb:5f:ff:6f:d3:6d:0d:df:c4:a2:d7:e4:6f:d4:d5:
                    bf:67:ae:23:79:5f:91:7f:c4:d7:d1:8b:ee:a6:8f:
                    4a:14:a7:78:df:55:bf:3f:08:68:ac:b3:d2:5c:eb:
                    cd:4f:9c:c8:a0:4b:28:ea:34:17:f7:90:ff:9f:d0:
                    fd:ed:95:5c:b9:bf:70:6c:8d:79:c9:b9:9e:d9:46:
                    69:eb:2d:08:1d:e3:b8:67:a6:a9:97:25:72:2e:51:
                    ad:87:b5:7e:de:72:8c:4a:ce:6a:2f:3e:48:9b:2f:
                    56:d2:95:91:94:15:c3:d2:3e:b5:77:f4:68:c4:bb:
                    58:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B5:E2:53:B0:91:E1:CA:73:4B:CC:3D:4C:75:1F:5C:EA:DD:0F:D6
            X509v3 Authority Key Identifier:
                keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a4:77:c0:8e:48:c9:87:3f:86:5b:29:0a:2e:aa:c6:00:46:
         81:5e:09:8a:5b:e7:c6:4c:eb:0b:5c:33:ff:01:60:71:88:a4:
         a7:cb:29:e6:1c:5a:94:46:c2:a3:87:ef:d8:2a:f7:79:68:d6:
         2f:99:43:60:d7:94:21:00:61:0f:ec:82:10:c7:4a:c1:64:9c:
         cd:56:a1:72:39:71:e6:b6:3a:bc:1f:e5:fb:94:d2:60:ce:d7:
         24:c3:8e:d3:fd:ee:8b:be:a3:52:05:13:84:24:35:af:9a:a5:
         38:bf:40:44:7b:33:67:9d:6f:27:c0:ac:d2:0f:ac:e2:19:82:
         e3:1e:41:b0:22:ec:c6:6b:b7:9c:ac:c5:7c:46:06:ad:58:2f:
         49:f0:af:e1:74:46:7d:7b:77:b2:a4:5c:b5:c7:8d:24:ac:ef:
         35:1c:e5:3e:a4:89:1a:ca:59:41:6c:f6:47:61:17:ca:d5:d2:
         c8:2f:dc:f2:de:1d:7c:49:dc:f3:f2:93:bd:3c:ab:d0:19:db:
         ba:74:27:19:f7:c1:c1:be:f8:03:f1:40:4f:9a:ff:ab:d4:e5:
         1d:32:95:d3:30:8d:09:da:50:b4:84:99:08:40:00:af:6b:93:
         aa:37:57:a9:da:db:72:eb:d9:04:97:8f:d6:fa:7e:ee:b8:6f:
         34:6c:25:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----