Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File:                     cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier:          ONWKSz9dxwfUb1U2bQxY2v6bAFWqb60bfrjLRCLoiwE=
Subject key identifier:   D5:A0:3B:BF:AA:6D:14:25:CD:2A:BE:20:DA:5B:03:B3:A0:96:AD:F7
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer:       /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial:       01962E998B358251DF2979C936AB9B11D56E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number:          0647
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: 6BU3r1xdiEvnFOReVQrxMb6L/ZjTZiXv2CnLGpAC8Nw=)
                          2: xsLt5XL-OWIaNdR6BZ8HbsppEGM.roa (hash: fVuO1qpyondG1qElrhxFzaCfBXaBgOTcL+nbs40PcY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8b:35:82:51:df:29:79:c9:36:ab:9b:11:d5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=d5a03bbfaa6d1425cd2abe20da5b03b3a096adf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:3c:b9:9d:26:4d:f2:4e:fa:bd:e1:4b:33:
                    42:ba:da:40:94:5c:36:c4:67:68:a8:a7:d9:72:13:
                    02:02:74:47:35:59:08:e3:5c:41:06:93:ee:15:af:
                    40:e2:5a:c8:24:86:fb:fc:26:1f:0f:76:5c:09:4c:
                    ad:d5:8c:6b:6e:03:f5:3a:1e:71:72:7c:5e:ff:e5:
                    29:ba:0a:1e:90:b2:40:e1:72:84:05:18:49:da:f6:
                    f1:e7:76:96:1e:69:ee:bb:8a:de:77:67:75:24:09:
                    47:ed:35:21:43:35:2f:6d:55:b5:aa:4d:6c:12:4a:
                    49:66:c4:d6:9c:f2:6d:5c:0f:58:19:d6:23:b6:dd:
                    9b:2f:3d:5a:a7:a5:91:9d:fb:02:42:7b:a9:0b:7f:
                    c9:22:16:a7:0a:5e:c8:d6:b1:89:c8:08:ed:fd:e9:
                    2b:61:8e:7b:a1:13:47:fc:6e:48:82:25:6f:7a:33:
                    61:5a:f7:36:f8:c5:b8:94:7a:7d:bf:92:e3:53:2f:
                    81:ea:89:1c:e9:e6:18:19:b3:01:f9:ee:44:d6:91:
                    d2:7e:32:10:2e:4a:4c:03:89:e1:a9:65:42:e6:63:
                    7e:27:75:55:74:fa:e6:62:89:9e:0d:18:87:43:c3:
                    47:01:cd:c0:3a:0c:fd:b5:41:50:31:96:64:ba:83:
                    2c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A0:3B:BF:AA:6D:14:25:CD:2A:BE:20:DA:5B:03:B3:A0:96:AD:F7
            X509v3 Authority Key Identifier:
                keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:52:c9:de:8b:5b:e3:7b:1b:57:01:36:2c:6b:03:4f:10:d6:
         78:0f:3b:ed:88:b8:1a:0c:c9:df:8c:94:54:c1:23:dc:48:86:
         18:11:58:42:c0:2f:2c:cd:78:cb:6a:55:3b:6c:32:ee:45:8c:
         4d:4d:36:7e:8d:eb:08:cb:72:1e:a6:03:0d:6d:94:6e:b2:3e:
         0d:60:25:91:33:32:e5:82:8f:de:1c:40:ac:c8:77:1f:83:58:
         c0:26:b4:52:8b:f8:8c:c1:90:cd:8e:10:de:52:9b:86:16:ad:
         a1:f0:26:88:6c:25:75:f6:95:3b:ff:a1:89:b3:5c:59:4a:08:
         d9:c5:4d:a6:1f:70:22:f7:5b:b3:5d:cd:d7:d8:ed:17:e5:22:
         36:85:cf:95:63:46:27:c4:e0:b2:f8:99:d2:55:33:65:31:ca:
         65:26:f3:43:68:47:b0:5a:2b:2d:f7:b2:06:82:36:8a:37:8c:
         80:b4:45:43:b1:dc:c6:70:3b:cb:3d:ca:79:56:39:94:60:b3:
         4d:d1:5f:e5:1c:6e:52:d4:77:9f:63:68:9a:e6:51:73:b2:5b:
         57:85:23:0f:25:1b:89:cf:b2:81:fd:87:a5:ab:74:c4:ee:eb:
         55:af:6d:df:ae:fa:1f:8b:2d:ee:10:50:ed:b2:9d:58:06:de:
         8a:56:2a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----