Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File:                     mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier:          rG12DhkIchakTZ2/foSYUocEENGEzGIzN6sDkDsM+HQ=
Subject key identifier:   36:CB:F9:72:6D:7A:76:AF:2C:80:1F:CC:11:D5:5D:61:FD:C9:9D:7E
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer:       /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial:       01962E61F58858DD274A61A183747DB3995B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number:          0E8A
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa (hash: H5rv5m3vIYcLSxBobS/ikS6XumhtJHd2OiEi1Eup9mg=)
                          2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: HfcOQvUSk5qUxLl76EuQr1jYBAkkUPlwF4kYMryKa7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f5:88:58:dd:27:4a:61:a1:83:74:7d:b3:99:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=36cbf9726d7a76af2c801fcc11d55d61fdc99d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:22:ea:97:86:fb:7f:07:4b:e3:22:f2:36:82:
                    c0:bc:cd:9f:9f:50:77:f5:14:c5:0f:3b:bd:e6:85:
                    08:13:ec:c5:5d:f4:b9:47:21:72:ba:81:68:99:83:
                    92:15:cd:4f:01:c3:4c:17:39:6d:c1:98:62:a2:24:
                    34:75:cd:fe:df:a7:31:e8:79:f4:08:f5:41:44:29:
                    ee:fe:e1:2d:9d:c7:f4:f8:fb:a1:91:30:46:e6:d6:
                    ed:08:79:86:b8:e2:33:57:53:ed:6a:8b:5a:31:71:
                    ce:62:47:86:98:c4:92:82:6f:df:e7:b0:97:ea:74:
                    08:46:88:25:3f:17:7a:10:22:74:16:53:d6:cc:1b:
                    4e:74:23:04:c2:b5:cb:24:b9:27:7d:14:ce:e1:49:
                    da:4a:cc:17:c7:85:8c:51:ed:a3:cc:4e:d2:bf:2e:
                    e4:5f:a2:42:08:f9:0b:83:df:2f:c1:24:d1:83:34:
                    f7:02:12:4a:90:75:cc:6d:4e:e0:c9:35:86:e5:5a:
                    17:b5:36:93:82:dc:fa:a0:d2:42:50:de:5d:6c:3c:
                    8c:02:0c:0f:0a:4a:f6:4e:b5:54:c8:59:cb:ce:68:
                    6a:97:bc:23:e8:ac:cd:50:cd:68:9b:dc:88:ed:39:
                    64:dd:b7:ab:1d:3d:cc:36:8c:e9:05:d2:5a:ce:cb:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CB:F9:72:6D:7A:76:AF:2C:80:1F:CC:11:D5:5D:61:FD:C9:9D:7E
            X509v3 Authority Key Identifier:
                keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:75:e0:92:48:9b:2f:ca:6a:5c:4b:06:03:91:10:e4:ff:3b:
         f4:fa:8a:c2:fc:80:8a:6c:76:a1:78:5c:8e:68:a6:31:8f:24:
         91:c6:a7:c9:b1:36:21:84:88:5e:b2:98:9b:83:60:19:3b:cb:
         be:5f:70:ba:9e:e1:b4:c9:3f:d4:a2:bb:e5:cf:c4:02:55:d0:
         37:4a:19:d2:a5:84:a4:2d:fc:9b:ba:c7:90:a0:26:08:68:dd:
         68:32:bf:61:69:83:83:0b:b0:cb:58:95:69:78:07:a9:f7:98:
         7d:5f:0e:71:c8:10:2b:d7:e7:cd:77:eb:51:1d:d4:78:11:9d:
         da:82:5c:76:af:6e:a2:77:47:a7:2b:10:1e:0d:b0:c2:22:8b:
         31:ec:e3:2c:21:de:83:33:de:4b:98:cb:53:de:da:fd:f4:46:
         74:35:ee:0a:d4:aa:e2:72:1e:57:97:23:19:f3:b5:27:ad:b9:
         ae:35:59:7d:fe:6d:c7:5c:7a:fa:ab:3f:96:be:89:ce:58:ad:
         1c:5a:cc:68:92:9a:17:2f:ac:e8:7f:29:b0:42:18:c6:82:55:
         df:2c:16:96:d3:7d:66:31:ad:49:d7:47:e2:64:70:90:b0:d7:
         12:92:35:a8:19:65:83:b7:10:37:56:90:bb:eb:e4:4a:b7:2b:
         4e:6a:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----