Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
File:                     yMHp4LxfXaGOMkoYEltCeAGoB_E.mft (raw, json)
Hash identifier:          5vF0nfqdzmTGKpEM7JHBJwfxefAGC0fFBhdmHRAfIPA=
Subject key identifier:   31:FE:E7:BD:08:D0:20:9A:CA:77:95:46:D4:4C:54:1B:F4:97:FD:D6
Authority key identifier: C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1
Certificate issuer:       /CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
Certificate serial:       01962F071C56DD2D775674923FE1469D50AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
Manifest number:          0642
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: KzFfCDjHV6hqDoqqVxbHisFAzqw.roa (hash: EJN3VDm9IKnbYFgaxZt9SIfMAHKvU3wGx8Z5+gCSQRo=)
                          2: yMHp4LxfXaGOMkoYEltCeAGoB_E.crl (hash: /9dHHvc5RFhcG4EIRL7vFHHWH1OkmGSBeiekERBpS/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1c:56:dd:2d:77:56:74:92:3f:e1:46:9d:50:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=31fee7bd08d0209aca779546d44c541bf497fdd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:fc:19:e8:25:01:a5:84:03:2c:76:a6:66:
                    e5:f3:41:5c:e2:2d:08:65:29:ef:21:8b:bf:37:18:
                    69:4b:b9:d3:f8:f7:82:cc:7f:77:cd:06:57:d8:cd:
                    92:80:bd:6c:f6:34:3b:a9:fb:27:a2:56:bd:12:30:
                    ad:90:6e:f6:c4:4e:86:bb:db:55:da:84:03:e3:7c:
                    fe:12:d0:ce:66:1a:5a:ab:f8:b8:f7:d0:58:05:78:
                    6b:6e:72:96:c3:96:05:d0:24:fd:bc:25:61:da:e4:
                    b8:1d:1a:c7:a3:8c:29:32:4a:b3:82:e0:17:7e:79:
                    10:50:17:4f:d3:bc:a4:13:00:25:81:2b:c4:a7:1d:
                    39:81:ec:cd:21:15:ed:f7:5c:4f:62:c0:5f:ed:24:
                    1c:43:e6:ca:08:97:00:9f:e2:8c:5b:44:de:b7:18:
                    e5:f9:12:7e:e1:95:a9:90:c3:af:b0:28:db:39:2e:
                    97:05:ee:51:49:1f:c8:86:f4:07:b6:dc:49:c0:c3:
                    ea:85:53:44:88:5d:80:14:f0:a6:7b:fa:2c:86:55:
                    40:38:c0:3a:8f:69:a6:96:b8:0d:51:e2:cd:b4:74:
                    62:5a:69:c6:08:83:57:55:bd:f0:32:c8:ae:c7:c4:
                    09:f6:3f:3c:7f:5d:a1:be:45:20:1f:b7:b1:b8:a3:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FE:E7:BD:08:D0:20:9A:CA:77:95:46:D4:4C:54:1B:F4:97:FD:D6
            X509v3 Authority Key Identifier:
                keyid:C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ee:73:a6:4d:00:76:e6:26:bd:17:e6:13:a7:b2:88:ab:76:
         dd:ed:c9:0f:de:aa:6f:99:b0:ba:11:ae:80:23:04:6a:93:b8:
         84:64:c3:5c:25:68:4e:78:9b:0f:ca:5f:ab:a1:c7:5f:fb:6b:
         bb:e8:a6:44:2b:35:4e:61:d6:b1:42:a2:b3:ec:14:ee:b6:ed:
         cb:cd:6e:f2:f6:d3:fb:ce:56:2f:16:6b:16:4f:fd:37:1e:85:
         58:c2:4b:d2:e2:c0:86:c5:d1:e8:41:68:3f:0b:ef:1c:99:b3:
         64:21:95:15:fb:43:61:43:eb:16:4b:9c:7e:61:c1:07:2b:5c:
         80:18:ea:1c:f8:35:a4:57:6b:8a:36:46:ba:57:24:1f:2f:b0:
         8a:90:f1:5e:d1:00:1a:63:08:7b:09:cd:a6:5a:2e:ee:0f:f7:
         4d:b8:b4:ca:2f:8c:f0:89:2d:12:e3:3c:9a:a0:17:d4:2f:59:
         54:ad:25:0f:08:02:3d:1d:d6:81:68:fb:33:09:71:5e:58:5c:
         ab:6c:ac:e6:5a:4b:e3:63:27:ec:8c:ca:2b:33:e7:0b:80:a7:
         81:b7:dc:a7:16:e4:bd:42:d3:23:f6:e7:c1:bb:06:c5:8d:12:
         ec:4a:26:b1:ba:bd:b6:fa:22:c0:66:37:04:da:7e:b6:90:d2:
         fc:da:53:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----