Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
File:                     puiiWpN5KlizotgPsarZWeZa7d8.mft (raw, json)
Hash identifier:          OJqtGEfyUurz3kAzeFH1xnQ8AKkmXFjL6/qcZw797rk=
Subject key identifier:   47:A4:53:56:B1:D5:B4:21:58:A8:AF:D3:EB:C7:BF:D9:06:DA:4D:89
Authority key identifier: A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
Certificate issuer:       /CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Certificate serial:       01962FAB174FE28CE96B857D6CE9E0ECE219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
Manifest number:          1444
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: m4oaOJvUbTCnMfIaVthxaAca0Fo.roa (hash: 63YgwjxraN8fKu5dlPjbo9SecMVJoKvca3zxswMIA4c=)
                          2: n3U4T0b_eZvC8-6ycL0d5_eDNuM.roa (hash: 9t7F6PBfxlnF6OlI2OhDxP2xK45ENz8bFdMmt86tiuo=)
                          3: puiiWpN5KlizotgPsarZWeZa7d8.crl (hash: 8/qxtpTQyv6bMljAWqkRdDWM1/CUURLo8fFNv2/LVuk=)
                          4: tDmGVhL-hfe86EtwqqFgtbugIGI.roa (hash: yybIZyz2WHKbdDgnIhAh2oqd5wKR3WI3gpGpCQsuSFc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:17:4f:e2:8c:e9:6b:85:7d:6c:e9:e0:ec:e2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=47a45356b1d5b42158a8afd3ebc7bfd906da4d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:db:43:e4:e0:62:a7:f6:5a:c4:bb:c0:35:
                    c9:64:45:82:5c:bd:0d:20:88:32:73:aa:65:22:e7:
                    b0:6f:3d:57:2a:62:50:9c:89:f0:72:f5:8c:d6:60:
                    45:7f:d2:12:91:cf:d4:66:dc:bf:f5:9b:0a:b7:08:
                    c3:3b:a2:da:50:b1:36:2e:fc:31:f5:f1:cb:31:a2:
                    48:bd:96:0b:bf:a4:71:0f:91:8a:9e:87:23:74:0f:
                    42:d4:0f:1d:24:b7:af:a0:ba:64:3e:21:78:2a:62:
                    44:b7:c6:fa:0a:01:88:d9:99:1f:90:16:bb:b6:df:
                    e8:48:30:ec:dc:f0:c3:19:2e:fc:49:23:7c:fd:91:
                    b5:e1:31:b6:8a:ad:1f:be:ce:f0:1a:86:fa:70:e4:
                    b7:f0:29:ba:06:fb:33:70:82:d7:52:cd:f8:1c:6d:
                    a8:41:e6:f5:ac:ea:54:e1:f3:3a:73:44:40:54:c8:
                    93:4b:c7:f2:25:20:db:3f:68:f3:a4:a8:27:d1:8c:
                    88:ed:18:b2:06:da:16:80:97:71:85:3e:08:01:dc:
                    6f:c8:82:42:61:9b:7a:37:86:6e:e4:7c:6b:1f:fb:
                    d4:16:1a:27:75:ea:0e:fd:ee:90:2d:4b:fa:f3:31:
                    12:16:c8:d4:cf:70:c8:38:d2:88:57:30:01:5d:e6:
                    0e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A4:53:56:B1:D5:B4:21:58:A8:AF:D3:EB:C7:BF:D9:06:DA:4D:89
            X509v3 Authority Key Identifier:
                keyid:A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ff:04:7d:15:f6:ab:e0:25:2d:65:73:98:48:b4:2f:48:b2:
         24:63:8e:ba:82:f8:0a:25:c2:75:3d:0d:49:e2:0e:c3:c5:1b:
         75:c0:23:93:7d:cf:02:08:e5:7f:9c:f1:73:bf:64:23:77:b8:
         58:0b:80:63:a3:9e:54:23:3e:66:24:76:fb:1d:38:b4:37:7e:
         cc:f0:74:03:a5:85:8b:23:f6:5c:d6:9e:61:f3:6b:3b:92:fc:
         55:8b:bb:46:e6:e7:f0:14:cc:85:c3:11:2c:85:17:65:d8:a0:
         d0:6c:16:6b:2d:eb:40:c5:3c:51:28:51:f0:fb:e3:f3:1a:70:
         6c:d2:fe:6d:af:1c:02:9e:e8:65:fc:df:a9:97:f7:27:7d:b3:
         7e:dd:e1:db:6e:40:9c:a6:dc:e0:cb:1e:9d:2c:3c:1e:fe:7a:
         2d:0c:03:c5:aa:f2:46:80:ab:77:9e:6b:26:ad:d0:87:1e:f9:
         e6:9d:1c:fe:12:cc:a3:d0:f2:74:ca:78:a5:8c:e1:60:73:6d:
         d9:9b:a9:bb:23:b3:3e:eb:af:80:89:6d:0b:5c:77:e1:44:83:
         83:e6:d0:74:6c:a8:ad:03:73:f7:cd:f1:bf:9c:92:28:3c:07:
         e3:aa:92:dd:61:7a:45:db:b8:df:1a:5c:a6:e4:31:c2:eb:f0:
         4a:96:b0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----