Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
File:                     F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json)
Hash identifier:          gFMUnE28ar4vXs/mFAf2gKrBX2lrTFOHgsKCj95Wpi4=
Subject key identifier:   6A:76:C2:06:43:40:5C:B0:10:9F:F5:93:C0:33:EE:D4:1F:5C:DE:1B
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Certificate issuer:       /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial:       01962F06E4EE98FDC20F23BF69D22B025B23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
Manifest number:          0442
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: YtzLtBOafNgUvAETmZchz9+F5ZpBd9LGOX/dAqlhf/g=)
                          2: tQhQQED_2rbtgmsDxQqfycOcoj4.roa (hash: 7QkytynjV9fTl5bHPu2TPRokrjL3zXWtRN7glg7QEBg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e4:ee:98:fd:c2:0f:23:bf:69:d2:2b:02:5b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=6a76c20643405cb0109ff593c033eed41f5cde1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:5a:19:50:be:9c:9f:f6:33:e0:38:0d:04:
                    4a:a8:32:59:3f:3c:0e:c6:21:2f:03:c4:9a:f3:4a:
                    5e:77:84:8f:87:a2:8c:f6:f0:19:24:a3:28:a9:9a:
                    ce:d2:19:46:48:b3:26:aa:64:82:ac:a3:71:b7:2b:
                    26:9f:49:a9:ad:db:8b:86:29:30:2d:19:71:a5:bb:
                    57:d5:32:bc:b6:52:ec:7a:30:03:3b:58:44:dd:a6:
                    fc:65:f3:01:c2:18:bb:72:db:d4:d8:6e:4f:82:ec:
                    3e:e3:cc:d6:50:31:6d:01:de:d9:fb:b3:6f:8f:c9:
                    ae:2f:a9:82:f3:22:03:da:9c:af:ca:f6:e0:92:81:
                    02:74:61:cb:9e:a8:fe:55:d7:41:b8:6f:df:88:61:
                    3d:a6:53:40:e8:e0:0f:21:d4:77:25:0f:ec:d6:47:
                    ad:f4:ad:8d:42:72:2f:f3:25:2a:ef:cf:05:c5:fd:
                    d9:99:c8:71:b0:e4:bd:c4:59:07:10:b3:84:12:ba:
                    5e:dc:49:38:c9:95:b7:b4:db:96:7b:f2:cb:64:fc:
                    8b:cc:fb:5a:ea:ca:bc:00:95:eb:fd:ec:cf:90:74:
                    1c:d4:00:5a:0c:89:fe:4f:c6:3b:86:b6:0e:44:7e:
                    63:97:a9:04:b4:75:34:78:79:95:ca:28:23:ce:64:
                    03:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:76:C2:06:43:40:5C:B0:10:9F:F5:93:C0:33:EE:D4:1F:5C:DE:1B
            X509v3 Authority Key Identifier:
                keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:28:50:29:bc:bb:81:08:82:ab:e0:cd:3e:19:2e:3d:92:51:
         1a:3b:43:18:bf:5e:27:96:a2:49:65:63:7c:aa:f0:61:d6:8d:
         93:83:f0:10:c7:9d:3a:e6:72:61:b1:9d:57:11:bd:bd:a3:ba:
         c1:6b:96:92:cf:ae:65:b5:63:53:2d:32:97:3f:49:41:d8:01:
         ed:4f:62:29:53:6f:43:da:f1:43:e7:68:8a:ae:48:09:39:6d:
         82:f7:83:42:7a:e8:36:89:13:31:85:b7:fd:0b:fb:a8:c3:d4:
         46:35:3f:29:23:5c:ad:9c:ed:97:63:5d:9c:2a:56:4c:81:5b:
         e4:01:e9:48:e0:19:3b:6b:51:5e:79:88:f2:e5:1a:aa:c7:d6:
         aa:b8:05:16:66:70:ad:24:a8:31:81:de:83:8c:17:04:16:e6:
         68:e4:da:e0:e6:77:7d:af:02:c3:50:c7:9a:3f:28:2e:76:31:
         87:5c:2f:96:c4:0d:0f:b3:14:f5:70:00:ff:37:71:df:5e:cb:
         2b:1a:1c:35:41:cc:64:c8:52:41:6d:c5:d7:04:7d:bf:65:2d:
         e5:00:a9:e6:2e:ca:b4:bf:dc:10:61:6d:47:4d:62:db:98:41:
         04:4f:f3:be:50:df:63:b3:74:da:26:b0:cb:e2:8f:b7:99:02:
         10:24:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----