Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
File:                     MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json)
Hash identifier:          +Hn5z7orw1aX1/RKx6PnPtxMnCsVz2nLxSr6ldnKdX0=
Subject key identifier:   44:8D:0E:91:2D:C9:69:26:6B:D2:40:99:70:17:EB:70:AC:6A:B5:C8
Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
Certificate issuer:       /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Certificate serial:       01962F3DD3C1F023288963802D9565A5557E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
Manifest number:          0157
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: JyQJbELaexgQ6fqiGT_WU8kf0iA.roa (hash: k3GN2/34cdpJMDa/U2bzg9E3dU3QeePwWvyheMjQ+5o=)
                          2: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: 1KQ4HX1DoI+rm1MmwPTv4BArlOpLRzWRjjxnsG1Ig7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d3:c1:f0:23:28:89:63:80:2d:95:65:a5:55:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=448d0e912dc969266bd240997017eb70ac6ab5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:86:a2:92:d6:22:bf:1f:b4:89:41:8a:79:1f:
                    34:f4:06:08:ab:52:06:59:49:97:1f:8b:51:9e:01:
                    a3:80:71:2b:61:dd:d7:36:fa:d2:52:b5:5d:06:3e:
                    4b:4a:51:13:a2:ca:f6:0d:f4:64:ae:ac:4e:15:37:
                    3d:e0:79:7e:17:e8:14:77:0e:13:18:ff:f7:6d:67:
                    82:6b:3e:38:26:6e:2b:58:a4:e5:8d:21:21:85:db:
                    f8:f0:16:ef:86:db:76:e4:45:63:81:00:36:74:09:
                    ab:22:6d:9f:a2:2e:47:ff:8a:4e:12:a3:e1:3f:8e:
                    d3:99:53:84:23:d4:fb:cf:a4:d4:93:db:0c:e0:e1:
                    3a:8a:e5:d0:c5:52:80:7d:4f:9e:d4:27:2d:2f:95:
                    c7:8a:49:b2:2d:82:7e:b2:05:8b:25:82:fc:0d:f9:
                    06:f8:ee:8c:6c:66:78:b1:d3:99:84:45:37:a2:f6:
                    d8:9a:3d:bf:62:4b:07:85:5b:7a:09:b6:29:62:f6:
                    56:96:56:06:cf:13:5b:bc:77:4a:3b:8b:c1:cc:f0:
                    7a:9f:e6:e8:0d:8b:2b:a0:c8:63:93:83:14:46:f5:
                    8f:39:f9:80:86:a9:68:50:f1:33:07:98:b3:74:53:
                    76:a8:ab:9e:5b:ef:84:25:08:7e:4a:fe:10:8e:68:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8D:0E:91:2D:C9:69:26:6B:D2:40:99:70:17:EB:70:AC:6A:B5:C8
            X509v3 Authority Key Identifier:
                keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:52:5e:fb:70:77:08:74:54:e4:12:72:bb:1a:9a:12:bf:57:
         3e:c1:5d:5c:99:2f:12:06:da:46:59:fb:85:ab:57:09:21:06:
         fe:27:d5:f5:3e:aa:5e:b5:ba:46:73:64:1f:8a:09:29:a7:25:
         f8:c7:24:9f:23:f0:c9:9f:47:85:37:85:c0:66:a2:12:82:45:
         9c:23:94:32:52:9c:1f:bd:c6:0a:49:38:15:7a:8b:a7:80:28:
         1c:e6:17:07:6c:90:45:fe:bd:df:ae:24:cc:6d:d5:bd:ae:2b:
         e0:41:66:0b:60:92:a8:75:cc:a4:ab:b9:49:4b:98:80:09:35:
         ac:42:d3:de:ae:d3:3d:e7:1a:1b:14:7b:51:18:a5:3d:ce:d3:
         ec:69:99:e6:0b:6a:03:cd:5c:aa:61:eb:8c:a5:9c:bf:32:9f:
         1a:57:8a:e0:08:bc:bf:02:1f:bc:5c:ad:ad:2e:07:f9:32:fa:
         0c:fc:f4:fe:14:b4:ca:51:9c:f4:64:80:1c:6e:da:3a:ae:00:
         1c:5b:74:11:c3:49:64:ec:5b:e2:11:a2:40:80:f5:5a:a6:ee:
         cb:76:40:72:db:14:12:3f:49:3c:9f:39:fd:4d:c7:b7:19:49:
         92:b4:78:79:55:8f:94:10:ea:cb:d8:01:55:b6:a8:b6:2b:25:
         b5:03:ce:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----