Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File:                     _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier:          z6smm8A5rUZl3XZM56cS/6r2aO37z9uFAyzCrqpY6/Y=
Subject key identifier:   4D:6C:5F:BA:ED:E1:8B:9F:96:AB:F0:BC:EC:9B:DB:39:B6:E8:BF:AF
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer:       /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial:       01962E986BE746FED63D8498E129DBADF5D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number:          0483
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=)
                          2: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: ODPtiHNQHt10DpDM7cInaJvLMaxn9+O3o+Ir5aWWjOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6b:e7:46:fe:d6:3d:84:98:e1:29:db:ad:f5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=4d6c5fbaede18b9f96abf0bcec9bdb39b6e8bfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:d0:59:3a:5f:50:26:84:33:90:bc:b3:c2:
                    0a:5c:31:a1:10:af:88:46:4b:ab:f0:12:6a:1b:2d:
                    af:96:d9:0c:d9:42:f8:77:c4:31:9a:54:d8:25:5a:
                    93:f2:79:35:42:46:40:46:da:ee:19:f2:c3:63:c0:
                    38:d1:e6:83:fb:78:fa:17:c4:8e:06:d7:3d:1f:e3:
                    4e:e0:8c:94:33:a8:d9:15:f9:1b:79:f9:42:60:4d:
                    23:e7:2a:a8:6e:36:ac:f0:62:07:96:d2:d5:4f:9e:
                    30:05:a6:ba:5e:71:e0:38:f6:ba:11:a1:a2:53:46:
                    1f:a4:1e:dc:12:27:50:b3:d2:68:e0:3f:8c:95:ab:
                    65:46:b7:45:50:68:8b:34:26:2f:a7:84:85:cb:2f:
                    bd:ea:d6:d9:66:3e:d5:5d:41:ff:33:ab:d4:d9:6f:
                    86:2c:12:61:79:c8:e3:93:95:bd:00:f2:c5:46:35:
                    9a:2a:ed:99:55:3e:8d:c8:3f:f6:84:76:f4:bc:f7:
                    da:03:c7:bb:83:74:d8:68:3f:c3:80:04:8b:bb:bf:
                    9c:62:a5:f8:36:d9:ea:60:f1:ba:b4:3b:b2:09:cb:
                    f2:d0:92:02:2c:6d:91:36:dd:fc:e3:b1:fe:7e:52:
                    14:f1:e2:b4:9f:c6:d2:64:d0:24:43:00:ce:9e:9c:
                    ec:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6C:5F:BA:ED:E1:8B:9F:96:AB:F0:BC:EC:9B:DB:39:B6:E8:BF:AF
            X509v3 Authority Key Identifier:
                keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6e:8b:34:ee:56:f8:ba:c7:68:7e:5b:23:99:48:2a:2c:25:
         33:a9:56:7a:7a:40:d7:b9:46:a0:4b:bb:20:a1:71:ee:81:12:
         5b:fc:84:93:9d:b7:70:b0:ba:83:1c:d1:47:2a:6f:2b:ab:73:
         dd:fd:00:e2:b3:9c:65:bd:71:4d:8c:5f:fa:6f:10:bc:5b:73:
         05:86:6f:5e:4c:23:c1:ef:6c:c3:d6:d7:ce:f3:46:e8:e4:07:
         20:05:64:5b:d7:dc:61:0c:68:9e:60:dc:91:ac:db:b7:84:e7:
         66:ab:a2:19:af:3e:14:57:04:24:f2:a7:97:f9:bd:1a:bc:5a:
         26:cb:eb:16:cd:73:b9:6f:3c:22:ef:aa:2d:70:83:81:a2:5d:
         91:cd:cf:92:94:d3:87:40:f1:3c:87:84:d7:90:b4:4a:e0:f5:
         99:2f:35:0a:22:4d:62:e9:dc:ac:ba:c8:be:cc:51:f5:f8:98:
         d2:85:68:94:b5:44:8b:8f:c0:df:51:06:ee:37:ea:9f:02:03:
         02:42:21:ff:86:bf:41:cd:8e:b3:7c:04:7e:12:fd:52:34:7e:
         09:2c:86:71:b0:1a:fb:48:3d:ab:4f:b2:24:fb:b6:82:44:6e:
         39:57:70:c2:e4:3e:61:e3:89:57:57:7e:8c:75:e1:4c:6d:8c:
         00:22:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----