Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
File:                     pZyqKnNoBpiyyeGmyWQadPPOdug.mft (raw, json)
Hash identifier:          FSinzvG5H65LaVfZsFhqJ6cjPVfexLzuPOvG6+5LA/I=
Subject key identifier:   59:9C:D3:2B:7A:82:06:22:A9:BE:25:10:74:30:18:B0:B1:5E:43:BE
Authority key identifier: A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
Certificate issuer:       /CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Certificate serial:       01962E61ABCEAE372F2B0580B00344A8AE74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
Manifest number:          097F
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: _c_c0M25UwpZ7eHBk4pzeagMlVQ.roa (hash: 8jqy4hlWYt18GsvMo6F88//T4bDxnnNcBAAfWfrvPK8=)
                          2: pZyqKnNoBpiyyeGmyWQadPPOdug.crl (hash: 0XgvtH5B/hzdqQwo1OakbjwfXvYlUYXkhoA/e6czpTc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ab:ce:ae:37:2f:2b:05:80:b0:03:44:a8:ae:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=599cd32b7a820622a9be2510743018b0b15e43be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:18:a7:57:ec:21:ef:8f:f0:6e:9f:4c:4d:
                    92:03:3a:a2:e2:17:08:ff:4b:97:89:2a:a2:25:16:
                    45:37:c9:a9:ca:ed:de:db:45:8f:b8:23:3e:f2:1a:
                    f0:14:ec:91:54:d6:e9:0e:0d:88:b2:43:07:c9:2b:
                    71:2b:bd:b4:55:d6:6a:4d:8b:3f:41:ef:b0:56:c6:
                    74:fc:ca:5b:f8:94:5e:5f:0f:0a:f3:c1:f0:03:c3:
                    28:e8:f6:51:3c:ac:54:b2:1e:f3:62:4b:56:a7:ef:
                    a8:66:30:9e:c1:a3:aa:9d:bf:c1:9a:bd:45:bb:b2:
                    88:b8:c1:6e:81:2b:53:d1:cf:22:83:c7:a0:a0:cb:
                    27:a9:bc:99:ad:ae:94:6c:39:b8:ca:c8:1f:83:40:
                    d4:88:c3:ae:4f:3b:eb:6b:3f:59:bd:97:35:ab:4d:
                    8d:5d:66:b5:2a:01:33:24:20:e7:87:dd:95:12:25:
                    a7:68:35:ed:6b:6b:c6:14:cb:d0:aa:39:0f:53:f0:
                    85:ef:42:d6:41:5e:35:38:d7:83:92:b3:e9:01:eb:
                    44:bc:36:e7:27:ac:a4:ae:84:7d:b7:cb:a9:1a:e1:
                    59:17:f4:76:d5:fb:60:93:e0:8e:66:89:a6:fb:d5:
                    9b:5b:25:48:68:86:73:74:38:8a:14:ac:2d:40:d7:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9C:D3:2B:7A:82:06:22:A9:BE:25:10:74:30:18:B0:B1:5E:43:BE
            X509v3 Authority Key Identifier:
                keyid:A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:16:65:52:f1:2a:ba:9f:b9:7e:cb:a2:ce:5b:e9:1f:0d:29:
         db:6f:a5:dd:be:d8:99:c2:c3:87:53:2e:50:15:86:37:ba:2e:
         21:07:d7:9b:04:70:c8:bd:a1:7b:3d:56:3c:0a:94:9b:b9:6a:
         6e:d3:f9:4f:5c:68:6b:a1:93:79:e9:56:a9:7e:25:e0:53:4b:
         c5:41:f3:ff:52:ce:fb:f1:f9:5a:6a:2c:df:68:05:75:b0:0c:
         92:90:b9:8f:41:b5:59:25:ad:e3:f9:3b:ca:01:75:fb:dd:f6:
         f0:7c:5e:a4:e7:2d:36:14:41:c5:4d:7b:1e:7a:7d:06:b3:a3:
         7b:88:ba:d8:28:45:b9:d3:ae:3e:fe:8b:1a:28:89:c7:02:7f:
         94:45:8b:d3:9d:15:c1:ce:71:f4:72:ba:c9:41:04:56:3d:a7:
         da:9c:66:c1:a3:e7:e7:d0:53:31:24:77:94:28:ab:1d:62:a4:
         2a:ee:8f:7f:be:4d:2c:66:2e:53:e8:a3:d5:9f:96:b0:cf:56:
         4f:f5:8f:7b:95:b7:ea:ff:04:c1:2d:66:b8:12:0c:f4:cf:e4:
         8d:1a:73:77:0f:f9:32:8c:52:55:3c:e7:a7:6b:49:41:8b:d8:
         fb:40:fe:8a:42:1d:07:f2:e8:4e:00:d8:ac:46:b9:2e:d5:05:
         b9:f8:a9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----