Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
File:                     rcpuVKzQJs76NitCJ7iQgcClAEk.mft (raw, json)
Hash identifier:          fesHE9cwvj2nelyP8yrUhx07IuQo6kkc/ZJ6zTlFxfM=
Subject key identifier:   D0:C8:72:F3:1F:DA:22:40:F2:62:FE:9A:17:9F:EF:0B:7C:E5:EF:D0
Authority key identifier: AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
Certificate issuer:       /CN=adca6e54acd026cefa362b4227b89081c0a50049
Certificate serial:       01962E2AC84C39FA515F5F1F6686A34B13C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
Manifest number:          0248
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: nH-mLa1nqtF7NuWi_AxaaJ7rrpE.roa (hash: k+SK+iFUjD8k3G8uFqdLPMVQgq2VY/v5iPwBM07SwqU=)
                          2: rcpuVKzQJs76NitCJ7iQgcClAEk.crl (hash: FmgYjfP2bmBkRwt/UDdCCIuwmTJOQ4VaouUnEXjw7ww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c8:4c:39:fa:51:5f:5f:1f:66:86:a3:4b:13:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adca6e54acd026cefa362b4227b89081c0a50049
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=d0c872f31fda2240f262fe9a179fef0b7ce5efd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c1:78:61:62:ec:39:54:72:40:60:65:9f:6b:
                    64:da:f1:5f:82:f3:56:60:5e:cf:1d:e3:b7:5c:0d:
                    af:fa:9c:c7:92:23:f0:93:fc:07:62:50:87:78:df:
                    66:e9:d1:24:a2:c8:6d:e1:8c:35:ba:14:60:91:56:
                    3a:b0:50:19:46:f1:0c:41:06:fd:e1:bb:19:a6:68:
                    97:88:2a:3e:96:e4:38:af:92:c1:9e:c9:97:a0:ef:
                    d3:20:48:7a:2c:ec:d8:d1:29:c9:21:63:5d:55:8c:
                    94:5b:8d:fe:7f:5d:90:57:10:f2:d5:ee:aa:bd:40:
                    ca:0a:6e:3a:83:dc:a8:df:da:b1:eb:45:49:d0:c4:
                    b4:62:55:f2:45:39:8c:ec:16:8b:ea:2b:10:77:c0:
                    f4:07:b1:c5:9b:df:2d:80:7c:a9:73:a9:a1:7c:d0:
                    7a:02:5f:8d:60:10:81:61:be:24:b2:75:ac:4c:04:
                    50:88:98:47:eb:8e:17:09:6b:f0:c1:4c:02:62:ff:
                    b6:ec:17:83:5a:6f:ce:93:15:0d:da:fc:46:11:88:
                    ad:f6:23:d4:10:23:71:8d:e9:6d:d0:de:b4:b0:12:
                    49:b9:e0:53:69:29:d5:6a:9a:d6:1f:48:06:3c:db:
                    bb:11:d7:54:5a:0a:ab:6f:60:8f:73:48:43:4e:f9:
                    44:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C8:72:F3:1F:DA:22:40:F2:62:FE:9A:17:9F:EF:0B:7C:E5:EF:D0
            X509v3 Authority Key Identifier:
                keyid:AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:79:29:7f:9f:10:4f:41:42:a4:f3:98:e4:62:ca:9c:04:af:
         79:60:0f:de:a4:3c:e7:0f:14:3e:91:42:44:75:8d:84:e3:72:
         2c:c4:7f:ea:a6:42:0f:04:75:e4:26:b0:db:35:e2:94:80:6c:
         3e:dd:f4:55:d2:e9:21:25:86:e5:f8:55:83:1c:d3:ac:ca:f9:
         c0:27:bf:8b:e7:1f:31:09:1a:e5:be:2d:bf:c8:53:ed:14:b1:
         39:b5:3d:08:c9:00:36:6e:6d:87:8c:fb:d5:dc:75:50:c0:9e:
         5d:71:c0:93:0b:78:05:62:c1:81:d6:89:f8:93:e2:a3:e3:79:
         63:da:fd:16:93:a3:5f:73:c9:9b:11:1b:27:f5:3d:c8:1d:36:
         c3:fa:e6:31:bd:de:17:41:ec:5e:d0:ec:cf:f5:ac:5b:60:0e:
         4b:a3:f3:72:32:fa:91:08:76:d4:b9:6e:19:f2:e1:20:63:47:
         71:05:7e:88:2f:e8:7a:44:fa:bf:5d:d5:ba:43:78:68:31:e1:
         fc:83:2b:fe:73:fe:30:4b:80:0d:e7:0e:c0:af:d7:bc:0e:87:
         6e:f1:57:b6:e2:2a:ee:36:e1:da:18:5a:e3:56:fc:bd:90:07:
         af:34:5d:22:72:db:e2:c4:2e:da:88:c0:51:6e:ce:c3:1b:26:
         0d:16:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----