Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File:                     klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier:          m0yRmlGcPSGpzAoeH4pPUUSm3x0OvzKbP0f2HYfiqrw=
Subject key identifier:   23:D6:84:D8:A5:B2:C2:B1:1E:D7:AF:33:21:67:BF:A3:FC:5E:96:1E
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer:       /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial:       01962DF441F209873730849802AB7591AEE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number:          1078
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: Hvxuzsj6EczQMtzXmG3ZXMTDSzY.roa (hash: IsEfb4XnUiiJKA1AVKZnGfwgI7NGrVN9fX4TxNoqt/g=)
                          2: RZ8C7kJw0WnSALfkl5thd-tNGAc.roa (hash: siN5gEDK5XnJ7yawdzNqRM0ni+t0tEVv4a0T208KnEI=)
                          3: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: jWG9fBrK/jko/VRybPeKnSUyBm5+lgp+4W9I7t1P+ns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:41:f2:09:87:37:30:84:98:02:ab:75:91:ae:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=23d684d8a5b2c2b11ed7af332167bfa3fc5e961e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ee:47:e0:df:8d:d4:6f:f1:0a:97:a3:19:24:
                    df:b4:f5:cd:70:e8:b5:56:b0:bd:46:1d:7b:1a:aa:
                    69:bd:b4:87:59:c3:f3:0f:06:a1:12:02:8e:80:a2:
                    20:d3:ea:27:16:d5:c9:9f:f0:3c:9e:8d:9a:c9:6a:
                    3c:db:60:e6:1d:f9:61:e1:e6:65:62:d5:33:d9:a8:
                    79:c1:5e:e8:57:ef:6c:7e:0b:0c:86:9f:1d:14:99:
                    10:40:13:9f:5a:58:0f:43:d1:c0:fb:ad:98:b1:e2:
                    22:6f:f0:5c:b1:85:4b:96:1d:e0:0e:63:d5:8c:66:
                    3f:b9:13:71:93:c8:ff:a6:99:f2:ce:25:6b:3d:0c:
                    d2:d1:3e:b5:12:89:c0:02:7d:d1:8d:07:99:2a:e1:
                    11:7e:e7:8b:c6:da:22:43:ff:75:0d:79:45:01:cb:
                    ab:cb:25:d5:74:8e:fb:2c:e0:30:e4:d4:2f:63:20:
                    7e:e5:09:8b:0e:23:1c:ce:12:3a:60:85:9d:72:00:
                    0d:38:bf:d5:ce:e7:f1:83:4b:9f:75:00:40:01:b5:
                    17:b2:87:b7:fa:20:bb:dd:e7:02:7c:39:13:f9:c1:
                    87:70:ac:71:40:34:58:bb:69:f1:45:d9:2b:9b:cb:
                    38:5a:71:57:30:f4:9e:49:cd:c3:fb:82:4c:c1:24:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D6:84:D8:A5:B2:C2:B1:1E:D7:AF:33:21:67:BF:A3:FC:5E:96:1E
            X509v3 Authority Key Identifier:
                keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b6:d7:f8:7e:78:6b:6a:b7:73:87:a8:68:b1:f3:5c:04:f6:
         46:72:c8:6c:de:04:19:82:74:98:9a:79:7a:d4:00:44:54:c1:
         e2:95:26:b1:19:6d:ba:3d:60:72:65:5f:10:38:96:e5:74:07:
         87:c9:4b:24:b5:8c:b6:a3:5f:2f:f3:30:3d:7c:8a:c4:67:d7:
         1f:83:bb:c3:27:b4:47:8a:b6:58:a5:80:f8:d7:46:dc:4a:ff:
         74:2c:56:59:fd:cf:2a:a6:4d:f2:f6:1f:10:ad:96:70:c1:5d:
         a2:57:de:61:4e:57:2c:c8:9c:e2:fb:6a:fe:cf:ac:34:55:f0:
         a4:bd:7a:7c:c2:a0:96:1a:30:38:ef:70:d8:0b:85:38:01:a2:
         9b:3f:6d:53:4c:d3:ac:34:66:a9:66:34:93:b6:33:bf:d6:e9:
         4e:9f:00:6a:73:2e:fc:5b:6f:2c:67:27:a0:6a:2b:b3:68:7f:
         ab:4f:36:67:30:02:dd:85:59:5d:1d:f9:9e:0f:b2:df:fe:1b:
         f0:e2:39:ff:c9:90:0c:86:f6:94:ba:6c:7d:6f:a2:7c:95:ed:
         7b:71:ca:58:b8:fa:57:69:a3:c1:ab:dd:61:83:21:52:14:dd:
         43:03:77:7f:9e:62:1d:f6:3a:d8:8a:b2:a6:dd:ec:ca:b7:bb:
         61:24:f7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----