Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
File:                     kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json)
Hash identifier:          U91qL75N/s/RViWyuBFaXvQrdVVpBlVxk95x95QYLbY=
Subject key identifier:   18:A3:8A:15:C3:27:8F:F9:A0:A3:81:A5:F2:76:A6:7C:03:27:AE:F9
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Certificate issuer:       /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial:       01962E99763FC48F10D4D1B7CD5152A75481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: 75qkVCY5XXIcFQQiW3dyFVzW6eQ.roa (hash: dXFNWNpycxDfWS4F1kZ68a/+XDX33UqEzrugZvo8DVg=)
                          2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: LO8AR3iMpq8VTOxx5pr03d1NZEWlAVFkEmoS+LCBZyQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:76:3f:c4:8f:10:d4:d1:b7:cd:51:52:a7:54:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=18a38a15c3278ff9a0a381a5f276a67c0327aef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:b5:00:69:08:f8:93:d8:f3:b5:35:d1:75:
                    77:85:5e:26:9b:a0:3b:7b:00:fb:b7:b2:f9:45:ee:
                    f0:fc:09:af:12:c7:b6:03:f1:42:3a:f2:44:1a:4c:
                    52:8a:63:58:0f:06:e7:36:0a:27:0d:83:fd:9a:d0:
                    89:cc:1c:6f:1f:7c:53:63:6a:db:a2:c7:a0:12:21:
                    b4:65:84:cc:6a:20:66:00:71:99:69:88:be:bb:91:
                    5a:78:4a:10:87:a3:d3:06:3c:bb:fb:6f:2a:f8:d6:
                    ab:62:e4:70:cc:79:68:3d:c3:c3:ff:38:c7:82:69:
                    ca:83:8a:28:00:aa:c0:96:3f:ed:39:b8:d5:a6:7f:
                    74:b8:d2:79:32:52:8f:7f:e0:15:64:73:e3:6c:0b:
                    b1:86:8c:86:4f:ea:4e:ad:f0:39:0d:e1:a6:fe:0a:
                    8a:74:5d:f1:83:a6:f1:bd:e7:bb:38:7f:cd:7f:62:
                    3a:55:6b:fa:83:75:fa:46:0d:9a:7c:43:01:ae:7e:
                    4f:bc:e1:78:7e:f3:25:a3:75:79:c7:09:38:35:b7:
                    a0:46:88:84:c5:ff:98:6c:08:63:51:f5:39:87:ab:
                    65:31:f5:43:fc:20:32:d9:2b:f8:9f:e0:e7:ac:38:
                    31:6c:26:43:48:5f:10:f9:55:f8:36:fb:a3:7b:e4:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A3:8A:15:C3:27:8F:F9:A0:A3:81:A5:F2:76:A6:7C:03:27:AE:F9
            X509v3 Authority Key Identifier:
                keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:86:21:57:d3:6a:7b:48:b0:ef:f1:19:ad:50:47:74:a9:a4:
         28:c5:c9:14:33:36:be:43:09:e0:aa:96:9e:46:e8:63:5e:9b:
         f3:32:a1:80:21:2a:ae:9b:2a:4a:b9:42:dc:95:12:20:6e:19:
         77:16:1d:15:d8:b2:8c:69:b6:7f:fa:64:c6:c1:44:3c:57:76:
         72:9f:f9:71:64:42:d3:b3:8d:ee:53:7d:ae:0e:81:e6:af:73:
         a0:34:97:3d:35:03:d9:ee:cb:95:e4:7c:d1:26:f1:ce:30:53:
         42:ac:f9:0a:9a:36:c7:07:4d:91:34:e3:61:e2:23:25:9e:81:
         69:c2:92:9d:29:14:6b:f1:e1:7a:c1:33:5c:ea:ff:82:f6:f5:
         45:d1:dd:32:95:f5:d1:1b:d0:cc:8e:2a:e1:a9:b8:52:7c:dc:
         f7:d6:94:38:7e:bb:0c:e0:9f:3b:74:86:75:ca:1a:82:e6:22:
         f2:be:07:07:72:ab:b6:e7:67:4d:a5:f3:5f:ef:ac:29:30:ad:
         1a:26:57:d0:f5:c0:ec:a6:d4:d3:0c:08:ba:2f:4e:6e:7b:67:
         e1:aa:c9:f4:d5:7f:09:6d:98:78:88:9c:2e:82:e2:4e:d9:3a:
         bb:20:25:38:ca:b3:de:64:5c:a8:43:b7:a0:f2:a4:a3:49:fc:
         31:b3:83:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----