Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File:                     MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier:          erZ9gwHJ3YcsqDZeJEMguetJ2bFcsfGtKZyFo+Y462s=
Subject key identifier:   28:17:FB:E4:12:DD:41:45:01:03:BA:FD:83:82:0A:55:4F:F5:A3:88
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer:       /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial:       01962F0736489425DA5550FE6F4A07C69BD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number:          0FC4
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: IP2TA110bw-H4O1wamCYoNbCcjM.roa (hash: hPPZWdSxmIy27LNJGRF/m5E6I6iPJVLPz81w8YZa7M4=)
                          2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: nhDlvs68GWnoI2BJEnzGQsqrZT9hsP4sv4oRGaKvpUY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:36:48:94:25:da:55:50:fe:6f:4a:07:c6:9b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=2817fbe412dd41450103bafd83820a554ff5a388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:e1:5a:d8:09:52:b4:15:4c:f7:34:82:80:
                    b9:9e:e0:82:5d:f9:45:37:cb:7f:97:d6:12:fa:30:
                    2c:7f:1c:ff:28:16:70:c9:9d:5c:06:7f:f2:fc:8e:
                    55:75:48:03:66:36:3e:f9:f9:58:15:20:08:42:55:
                    d6:cb:2b:0a:9e:b8:3f:ef:fd:c7:f5:3c:60:5b:60:
                    ee:3b:ed:90:89:ff:5a:ed:72:3c:3f:7f:6d:4e:5c:
                    c0:74:e5:ff:b6:7a:ac:8d:59:a8:d3:b1:cf:db:91:
                    b2:45:d1:c9:33:2f:eb:59:29:e9:d6:7e:ff:f7:fd:
                    1c:c1:be:79:62:71:b9:f7:54:07:70:be:51:4c:52:
                    76:b3:ca:d6:7b:9c:d6:0f:87:fa:17:66:dd:dd:cc:
                    b7:de:73:5d:4e:a6:a4:b9:04:29:f5:88:8a:c4:cc:
                    97:fd:53:13:11:5e:b8:ee:e8:37:50:d9:27:b5:61:
                    33:71:7f:03:35:3e:01:15:97:7b:ba:1a:24:93:83:
                    c1:c4:4c:db:e4:76:ce:ab:47:af:ed:94:80:0b:b2:
                    45:7d:bc:00:80:90:7c:9f:6a:48:28:9e:00:f1:3c:
                    99:b8:2b:93:aa:41:1a:66:e1:71:ed:82:48:6a:90:
                    29:75:dd:b8:70:ad:d2:dc:70:f6:9a:62:35:95:0e:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:17:FB:E4:12:DD:41:45:01:03:BA:FD:83:82:0A:55:4F:F5:A3:88
            X509v3 Authority Key Identifier:
                keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e0:0b:1e:8f:0c:07:4b:5c:43:b9:1d:40:3d:5f:15:00:05:
         cf:6e:f2:6e:ce:e3:56:58:29:9a:59:64:33:25:86:38:8a:1d:
         e2:37:72:e4:d8:22:e8:8f:ff:7d:6a:f1:7d:ec:17:b5:80:fc:
         43:47:60:51:d2:6b:ce:ef:3a:93:50:fa:16:d2:ff:13:15:12:
         3f:23:31:43:7b:af:f6:28:4f:51:90:4c:ef:d3:54:d0:47:e6:
         3e:86:0f:84:ac:29:32:7d:83:c7:41:8e:47:ad:d6:e2:28:e2:
         c7:1c:64:70:99:5e:c1:27:f1:60:ee:24:75:be:73:a6:74:1b:
         03:41:af:0c:9a:c3:77:f1:d8:cf:09:c8:82:32:40:6a:2a:e3:
         e0:d2:e9:3e:8b:a4:02:58:f6:86:28:e6:76:47:dd:13:a3:81:
         b5:7a:58:94:57:ae:6e:e0:32:c8:a1:4f:c9:5b:1d:c5:89:ef:
         2b:d6:c4:b7:be:1f:ff:64:e4:cf:0b:ed:4a:dc:88:35:9b:38:
         0c:87:29:15:2f:2d:53:5e:f2:b6:5f:2b:09:37:27:26:f4:d6:
         b5:64:d8:34:93:b2:3f:ac:96:92:b3:af:e2:a8:67:ad:26:38:
         b0:31:08:b6:fe:e5:3a:91:3c:4a:ec:e7:96:1a:ed:ba:23:d0:
         ef:73:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----