Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
File:                     MjFs1IgVYto785JbSRi24R12UUw.mft (raw, json)
Hash identifier:          jYA3X8OMoTdG4uoZFV9KtqAGZamexyZJUbIrsyMH4lE=
Subject key identifier:   A5:32:74:98:56:86:71:1E:9A:DF:AB:EA:D2:97:9C:54:AB:5B:1C:D7
Authority key identifier: 32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
Certificate issuer:       /CN=32316cd4881562da3bf3925b4918b6e11d76514c
Certificate serial:       01962E618BEBA920108D3D2AB3B3031CA7FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
Manifest number:          0C46
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: MjFs1IgVYto785JbSRi24R12UUw.crl (hash: eqROfo7ulwfRtpJG7zal6TVGyY5E1Tybl+5EAO03FFQ=)
                          2: O3osI0EMQ6lE3X_ye8aviCt4iTA.roa (hash: 9DOrDt/vfxy297yCahpwE4Xa/8MH6AlQc6vnFQ987B0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8b:eb:a9:20:10:8d:3d:2a:b3:b3:03:1c:a7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32316cd4881562da3bf3925b4918b6e11d76514c
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=a53274985686711e9adfabead2979c54ab5b1cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:00:2b:a6:c7:3b:dc:f1:a6:e9:de:e3:80:bd:
                    a6:82:e9:4b:68:ba:f2:e4:db:e8:76:03:ac:da:58:
                    db:77:46:43:ce:5c:71:51:27:7c:92:4c:47:e7:db:
                    01:1d:0c:75:32:d7:7d:95:28:aa:02:35:8c:7e:51:
                    f0:ef:12:35:8c:12:ef:89:71:9c:07:54:a7:2a:16:
                    61:7a:6a:bc:e9:6f:74:d3:39:8b:33:10:8a:e7:d0:
                    f2:84:c3:dd:18:1a:84:6c:a9:3c:c1:b9:db:f2:91:
                    13:7d:56:61:2e:c1:d4:4f:c0:39:50:a4:63:5a:da:
                    37:af:57:24:42:05:f5:0e:e2:c5:91:c3:d4:64:5c:
                    d0:c9:e5:60:6e:32:0d:b7:9d:06:52:b4:27:e4:f6:
                    63:1a:27:f6:a3:87:61:ec:2c:8b:22:dd:68:70:59:
                    e0:5a:d9:f1:97:ed:2a:db:a3:53:55:d8:78:9d:90:
                    9c:50:fd:14:d6:57:e2:57:0d:51:d3:b8:4e:cd:13:
                    ca:2e:d8:3f:12:d9:2f:8f:e9:db:4c:36:41:c2:0c:
                    0a:d9:92:df:de:06:bf:9c:34:d0:a5:25:50:ac:48:
                    36:81:e4:18:a3:76:cf:5d:9a:81:64:e0:00:54:8e:
                    8c:1c:87:7e:d2:52:0e:90:65:02:0a:45:37:a6:54:
                    65:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:32:74:98:56:86:71:1E:9A:DF:AB:EA:D2:97:9C:54:AB:5B:1C:D7
            X509v3 Authority Key Identifier:
                keyid:32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a2:bf:75:fd:58:5d:56:91:42:83:d8:a1:fe:78:08:99:16:
         06:32:20:fc:02:19:ff:6e:16:5b:bb:0f:25:2f:78:93:07:bf:
         db:a0:13:cb:60:16:c5:c0:5b:4e:1a:c6:1f:30:bd:18:29:8b:
         c9:00:52:6b:00:2c:15:4e:1b:40:57:9e:0a:fe:bd:85:08:51:
         ab:51:ff:49:4e:04:24:67:10:f7:15:ed:1c:fd:82:5e:f7:a9:
         fe:9d:1e:90:82:66:8f:90:e9:a8:c0:09:3b:f0:33:e9:e6:31:
         8c:9d:c0:06:23:5c:9d:42:57:af:87:a0:c3:26:3b:3f:dc:89:
         26:e4:b8:08:20:dd:6e:03:91:fc:35:78:06:dd:c6:3d:78:a3:
         c0:90:7c:05:cb:39:5a:9f:20:14:e7:a0:8b:96:04:97:2b:24:
         2f:e9:bf:0e:58:7e:77:e3:c1:4b:09:a4:35:9c:d4:13:ae:01:
         46:1f:bb:f2:9d:ea:7e:b7:b1:d5:db:c0:a9:b8:b3:55:34:4e:
         95:45:06:78:e8:0e:ed:4e:c4:5a:ae:36:59:a7:47:a9:a8:b5:
         ec:1e:88:14:92:f6:8b:87:67:c5:d5:a3:a7:28:7a:07:c5:ec:
         c2:d4:5d:f5:31:da:03:8e:dc:0e:51:27:0d:e0:ed:c3:09:3f:
         8d:28:db:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----