Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File:                     lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier:          v0OL1yYqL2GsmK6hjiVM2zDAIeN6emidPPqWYYVpMqM=
Subject key identifier:   C5:AB:8F:D9:07:90:0E:31:7E:37:B4:7D:43:1E:F4:CC:C3:B1:D3:62
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer:       /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial:       01962F07311A7558E974B26761F0519F12EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 12:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:02 +0000
Files and hashes:         1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=)
                          2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: BhSVuQqyq37q1XsRnrZNoUZhHEUtyFyfzMuj7EyuzUc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:31:1a:75:58:e9:74:b2:67:61:f0:51:9f:12:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
        Validity
            Not Before: Apr 13 12:02:02 2025 GMT
            Not After : Apr 14 12:02:02 2025 GMT
        Subject: CN=c5ab8fd907900e317e37b47d431ef4ccc3b1d362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:c6:a2:0e:97:95:81:33:7d:0d:22:4e:fe:
                    00:23:74:96:9a:22:0b:d5:d3:2b:aa:87:ed:20:10:
                    27:93:d2:f7:44:4f:18:2b:2a:69:dd:f3:4d:90:91:
                    32:f2:e8:21:4f:50:39:0f:5a:f8:82:5e:e0:39:50:
                    15:52:e1:04:ed:48:81:4b:ae:c4:c6:02:31:62:71:
                    b0:40:1b:9c:fb:c4:a9:10:bf:79:87:ff:c4:26:7f:
                    81:2a:cd:78:c4:b5:4e:53:68:49:cf:f7:15:43:07:
                    d2:11:b8:15:48:38:30:0f:e5:c2:16:59:47:f3:04:
                    a1:99:46:f8:92:94:f3:c6:1d:11:26:63:ba:e8:3f:
                    6d:17:b6:67:de:6f:08:92:5e:10:dc:ad:ce:b9:f3:
                    51:7c:88:15:a7:18:05:80:e0:de:0c:93:46:c8:af:
                    80:02:61:10:40:a3:6d:a2:df:db:3f:c2:9d:fd:82:
                    f2:f6:33:39:b3:c5:f0:94:bb:a5:ee:84:e1:ae:cd:
                    5d:8f:12:7b:6c:ef:c9:1a:a1:6f:04:db:f6:f6:ef:
                    bc:b7:a0:53:ca:59:ff:b4:81:21:8f:65:1a:22:a4:
                    a5:94:8a:a7:59:d6:18:e3:0a:08:61:75:10:45:ab:
                    48:06:0a:57:ae:fa:e0:07:38:3f:bc:1a:28:e0:2e:
                    56:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AB:8F:D9:07:90:0E:31:7E:37:B4:7D:43:1E:F4:CC:C3:B1:D3:62
            X509v3 Authority Key Identifier:
                keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9e:24:c3:70:9c:0f:00:9c:8c:7b:78:bb:ca:b3:d2:3d:82:
         b1:23:97:8e:7d:f8:63:f0:a1:7a:c2:e1:71:f6:83:80:d8:3d:
         c3:5a:c9:b9:c1:92:af:7b:8c:ce:93:0e:a2:fd:f5:2d:0e:65:
         fe:9f:f0:b3:89:8b:54:b7:80:26:e1:5f:34:54:b9:ee:fb:bc:
         19:15:df:3e:42:9a:e7:51:63:66:9d:02:90:8e:af:c1:e7:c9:
         6d:fa:6d:db:a7:65:10:71:c4:54:ef:2d:16:82:d3:28:df:50:
         05:47:f7:e9:ce:0e:25:31:59:f2:15:4c:b2:88:50:35:a4:3e:
         22:65:b1:05:8c:8e:ed:f2:23:01:9a:95:73:6b:13:b1:dd:7d:
         a2:46:d6:c8:5b:3e:ff:04:67:fa:a6:8b:fb:57:29:65:0a:a2:
         32:31:5c:49:b8:d9:db:5d:92:9c:36:7a:0d:be:1d:4d:d7:2b:
         d9:0c:d8:6d:ae:3f:68:fb:1a:52:ca:84:40:c6:f9:8f:89:4b:
         02:24:e5:b4:e3:0c:4d:c4:14:6e:4c:a8:09:c5:f2:20:e4:48:
         3f:1d:e9:1f:28:b6:c2:94:76:88:6a:30:99:8f:82:27:a0:fa:
         11:ec:af:24:6e:75:39:31:ac:59:88:bc:eb:4a:93:78:17:2f:
         dd:a5:7a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----