Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
File:                     POwGHF7VbcoHdT_ktbjAkNl60OE.mft (raw, json)
Hash identifier:          dJzu9CXfpWypbzb1jkZ+Rx0gBmI05pqJf4GBhKXZfFU=
Subject key identifier:   5F:C5:A6:EA:6B:69:48:16:B0:71:97:56:83:29:30:75:E9:36:3B:C3
Authority key identifier: 3C:EC:06:1C:5E:D5:6D:CA:07:75:3F:E4:B5:B8:C0:90:D9:7A:D0:E1
Certificate issuer:       /CN=3cec061c5ed56dca07753fe4b5b8c090d97ad0e1
Certificate serial:       01962ECFC553D08B5061510B873D2D59240F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
Manifest number:          048C
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: J--9FTqyd7jwis3viXw5cnMN5-o.roa (hash: DC3T7Frr+GR57cEYLFoZVlKHfiR/SiiUWqjetZEXAWY=)
                          2: POwGHF7VbcoHdT_ktbjAkNl60OE.crl (hash: 0UzMR9BB2NxwPfYlU/2BBHfpDrN9udN89awwFUycdxU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c5:53:d0:8b:50:61:51:0b:87:3d:2d:59:24:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cec061c5ed56dca07753fe4b5b8c090d97ad0e1
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=5fc5a6ea6b694816b071975683293075e9363bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:2f:4f:c3:be:f7:78:37:84:a4:b9:4f:37:
                    8c:77:ef:73:6e:5c:9d:56:61:6a:6d:99:f2:00:61:
                    f9:ee:4d:9b:32:8d:e6:95:f3:fe:16:04:b7:24:92:
                    36:23:9f:ce:4b:88:50:61:37:81:e5:fa:07:8e:02:
                    18:7c:17:da:17:ad:08:a6:43:87:ae:b2:de:a9:1f:
                    fb:12:a8:50:53:27:21:c8:5c:69:f3:f1:ff:5d:13:
                    13:f3:ff:a7:1b:7b:d1:a1:03:c1:e9:88:1b:a6:0c:
                    6c:76:f9:7f:d5:a3:f9:e8:fb:a1:28:19:3e:af:16:
                    51:29:7c:70:1b:33:8e:10:cc:6b:c5:75:b9:79:b3:
                    24:c2:b7:77:a9:4f:83:15:b3:91:69:4d:92:8e:d0:
                    94:db:b1:51:47:42:9a:e7:ab:df:0d:42:e4:2c:6c:
                    c1:38:a1:24:cd:3b:fe:45:6d:94:26:cb:95:ae:2d:
                    74:3a:60:3c:23:6a:c7:83:7b:91:14:53:c2:9b:5c:
                    2a:0d:f8:26:96:70:e2:8e:2f:b4:2f:74:fa:e7:2e:
                    c1:44:73:2e:f8:0b:44:e3:c6:87:26:68:db:7d:cf:
                    b9:16:83:24:2c:e3:46:99:b7:67:17:74:bc:9f:be:
                    71:48:4c:27:7c:63:07:ac:ae:0a:60:4e:4e:7e:76:
                    6f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C5:A6:EA:6B:69:48:16:B0:71:97:56:83:29:30:75:E9:36:3B:C3
            X509v3 Authority Key Identifier:
                keyid:3C:EC:06:1C:5E:D5:6D:CA:07:75:3F:E4:B5:B8:C0:90:D9:7A:D0:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1f:0c:54:b3:08:73:ee:92:24:79:9c:26:69:99:70:ad:ab:
         4c:fb:6a:80:d2:4b:1e:88:43:18:08:50:3d:65:2c:84:2e:ed:
         ad:78:de:61:3c:df:2b:f5:36:b2:c1:53:13:98:e3:30:46:1a:
         61:46:8c:d0:61:51:86:fe:26:51:a1:e3:1c:fe:4e:c3:f8:e3:
         84:d1:5c:77:1b:09:32:2e:12:e0:27:b1:da:aa:7c:25:a1:64:
         68:d7:ab:a1:09:cc:e2:a1:c4:08:b0:32:f9:88:31:df:53:c0:
         c6:5b:bb:db:52:18:df:84:c2:99:55:87:d6:f7:2c:93:a4:ee:
         d5:d3:07:79:f0:62:b1:d4:0b:57:9d:21:90:e7:33:d3:b4:c4:
         00:db:9e:82:9b:85:9b:29:29:ff:d9:13:8e:08:90:6b:9e:e4:
         5f:5d:16:16:2b:53:fb:5a:08:5b:55:bb:91:fc:27:8b:2a:f7:
         07:ca:41:bb:ef:27:3f:f8:ca:86:f7:eb:8f:7f:07:81:b1:04:
         7a:94:0e:4c:9e:c2:5e:65:5f:21:cd:45:2a:38:ea:ff:88:7c:
         73:d7:c3:24:fe:f0:f3:a9:43:57:d2:a1:30:63:e7:1f:74:eb:
         49:30:8e:92:05:82:2c:2a:31:d2:b2:34:23:ff:37:ea:19:5d:
         8e:07:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----