Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File:                     M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier:          UXmAn6sgmF3eWJcqde5vF50KbA1Mhfk0mI23fu4AcJI=
Subject key identifier:   05:6F:F1:F1:40:1D:86:CE:35:9B:FC:C2:BE:82:B1:7F:14:CA:E0:FF
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer:       /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial:       01962F743F3151536121E90C4B91B5878858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number:          0EBE
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: 1_nKEKtn-rDapvV_FkI8ith69-A.roa (hash: HYbESAe393AiWHvbrJ4k/KX49GqaEptIBwkG+L+SrsI=)
                          2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: TiKE6xdYaCqJlGNqf08tSG8UAZ2Qhu31bOsaKe2LbuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3f:31:51:53:61:21:e9:0c:4b:91:b5:87:88:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=056ff1f1401d86ce359bfcc2be82b17f14cae0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:60:6e:cb:3d:94:27:51:9f:f5:d4:13:9f:2f:
                    d3:b0:ce:2f:14:6b:8e:92:4c:18:97:c6:64:16:c4:
                    7c:25:80:fc:49:b7:cf:c2:aa:55:48:90:59:30:f7:
                    ee:11:27:6d:73:8a:5f:a7:33:88:09:73:a5:a4:91:
                    3a:fa:24:f9:e3:f2:73:c9:48:b3:74:ef:31:e0:c2:
                    c0:c9:6a:be:22:c8:68:e3:4e:70:f3:57:7c:24:c4:
                    43:ab:30:7a:05:d2:ae:8c:76:45:40:dd:6f:35:06:
                    16:82:1e:18:7a:e8:b7:26:89:ea:b7:df:24:bd:30:
                    63:f8:ea:b7:6b:e0:7a:58:3c:df:8a:55:09:1e:f6:
                    d7:8b:43:f0:91:75:9c:4c:74:bb:33:f5:02:97:b9:
                    90:1d:f7:56:88:f5:10:29:8a:a8:30:0f:72:ec:a4:
                    f0:1c:5f:f7:0f:57:7d:5a:8e:bc:e0:42:43:fc:fe:
                    8a:8f:03:79:90:7a:10:73:ab:98:01:83:a6:e5:3b:
                    a9:36:a5:0c:a7:d0:c1:37:b7:00:e7:6b:d6:49:0f:
                    0d:2f:0e:82:b9:36:42:a0:96:34:8c:78:20:3b:e2:
                    d3:01:1d:5a:23:71:14:f1:15:49:03:8a:29:60:a0:
                    7c:87:78:e6:43:d7:e0:f6:a2:b8:e9:2a:8b:c7:c6:
                    fc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6F:F1:F1:40:1D:86:CE:35:9B:FC:C2:BE:82:B1:7F:14:CA:E0:FF
            X509v3 Authority Key Identifier:
                keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b6:40:10:55:05:97:42:91:cf:75:5a:07:4f:1c:64:d9:49:
         a8:0f:07:d4:fe:fe:c0:ad:d6:b6:ac:a8:99:93:a6:51:11:2c:
         15:14:d8:19:4e:0a:f6:12:e3:62:96:d6:a8:70:a1:ab:bf:95:
         45:1d:0c:78:a1:7a:01:42:4f:45:b7:a5:95:04:da:84:9e:6f:
         be:93:c7:e1:5a:57:40:0e:77:22:0d:87:a2:a5:37:5f:69:df:
         84:c2:8a:c5:9f:b6:82:19:1d:5e:5a:f6:2d:05:b5:0d:dd:86:
         66:0a:e2:26:af:41:78:bc:8e:70:c2:ed:dc:0a:4a:42:60:4b:
         a4:56:dc:d4:76:eb:1f:17:9c:95:ef:de:cb:28:76:fb:21:b8:
         eb:33:2c:2a:5e:07:6a:f0:aa:0c:ed:b9:31:d0:9a:96:68:ba:
         fc:3c:be:9a:63:bd:45:a0:e2:ff:f3:2c:83:c0:22:ba:38:99:
         23:d9:ea:af:99:5c:1f:ee:36:54:34:75:b7:8b:97:db:11:43:
         1e:30:4a:86:e1:36:cf:65:83:31:48:49:c4:be:b9:e0:ec:74:
         f9:01:bb:f1:5c:76:f2:de:73:ac:99:82:b9:48:59:4e:00:35:
         5b:96:89:ee:81:57:bd:45:9a:97:1f:ea:6b:33:6e:2b:bb:00:
         8c:9e:63:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----