Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
File:                     04m0GNo0qjk07N4rcx3x1O1-yA4.mft (raw, json)
Hash identifier:          FSJM/WmfuyPb6iTftORBd2VXE8LTaHjSOPZ4/M40+5c=
Subject key identifier:   A8:EF:E5:B4:FC:83:91:98:6C:E8:5F:4E:49:13:67:A0:09:C9:06:63
Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
Certificate issuer:       /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Certificate serial:       01962F74991C64D0151DA27D3200BEA8749B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
Manifest number:          11FC
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: 04m0GNo0qjk07N4rcx3x1O1-yA4.crl (hash: ooIrR3MSlDgyPD2eo7yz6kJsdbAlXPvAtxs7XcPovNM=)
                          2: cWwT1szK5NdnVm06LjbXvG6eYg4.roa (hash: W4zwG2oQXcpZIEG+6MYSyZ5G6TI/ulbfB+7HQbWQK/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:99:1c:64:d0:15:1d:a2:7d:32:00:be:a8:74:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=a8efe5b4fc8391986ce85f4e491367a009c90663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:59:0c:28:e9:45:8a:c5:0e:b3:b1:b1:ec:75:
                    ca:44:2a:bb:eb:9c:98:c6:8c:61:9c:a8:c8:fb:aa:
                    4e:85:bd:b9:18:27:7e:f8:57:60:bc:4a:6d:79:d6:
                    f7:b7:f3:4c:74:e8:4a:41:da:0c:fb:28:5b:53:8a:
                    6e:71:63:29:fa:95:46:8f:e3:a2:49:99:cf:dd:a9:
                    e1:4e:72:b9:ea:a0:3e:55:e0:e0:98:20:ec:ab:9b:
                    7b:7d:f8:89:0e:70:1e:06:6a:a8:ae:73:29:40:bb:
                    fd:f7:06:11:0e:0d:d9:cb:6c:22:e2:27:09:a8:fc:
                    cd:1b:ec:24:30:92:b1:d3:e4:60:a3:14:51:ef:d9:
                    61:0a:83:8f:e0:20:67:bf:d5:6d:53:81:5e:8a:d0:
                    b3:1f:93:1b:41:30:98:8c:a4:9a:46:0f:59:b9:9e:
                    4c:9d:37:97:f1:ab:93:c1:29:9a:af:44:02:81:b7:
                    05:66:18:d7:08:48:b9:2d:9e:c7:4c:56:81:ff:1d:
                    8d:c5:50:26:c0:fc:79:a4:eb:37:81:0c:25:6c:6a:
                    21:23:0b:f4:6c:97:b1:82:9b:36:3c:c5:0a:09:86:
                    99:d6:73:e6:2e:76:75:29:15:38:42:42:f6:c8:9e:
                    3c:ca:a3:61:86:d9:bc:0e:f9:13:40:ed:ee:08:d8:
                    10:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EF:E5:B4:FC:83:91:98:6C:E8:5F:4E:49:13:67:A0:09:C9:06:63
            X509v3 Authority Key Identifier:
                keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:32:40:a7:d9:41:e9:50:e3:6d:91:87:0a:83:c3:b0:15:8b:
         38:cc:25:d5:c5:84:08:6b:0f:a8:ac:7e:cd:52:9f:4c:c7:9b:
         5a:d4:3d:4c:15:c7:a3:3d:61:b6:b0:db:85:11:32:5e:3d:5e:
         1b:7d:fb:55:48:1b:bc:ea:d3:f0:99:f9:eb:f7:6d:e0:e8:15:
         e6:03:20:2d:b9:10:18:3b:50:0c:57:87:07:07:06:1f:a6:7f:
         84:d6:3d:98:18:46:7a:8f:7d:4a:76:3f:43:6d:80:a0:3e:ab:
         a1:8f:4c:bb:79:a5:c6:79:7c:ba:80:f1:75:ab:64:c9:bf:90:
         8a:af:64:0e:84:78:74:c6:87:68:bc:41:4c:94:fd:99:28:dd:
         0f:53:f8:36:d0:65:ca:91:9c:53:14:c7:6a:c3:75:79:61:f1:
         31:38:8c:bb:63:b4:2e:13:f2:89:5f:02:76:63:c3:aa:51:6e:
         a3:9e:8a:db:8f:0b:3e:37:3d:7c:35:9f:59:64:06:18:59:1a:
         43:05:eb:78:84:a3:e7:6e:e2:aa:b9:8e:66:73:71:db:62:2c:
         5e:c4:84:0b:5b:1b:e4:d7:2c:9c:65:ba:d9:30:b8:d3:b9:9b:
         ac:2d:6a:a1:c2:14:7b:8e:08:4b:26:54:21:af:08:16:7d:e1:
         b8:aa:2d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----