Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
File:                     xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft (raw, json)
Hash identifier:          WvIOx/TTN6hPuHNqrMzrYCcqycJkjPubou9YHKPI8nI=
Subject key identifier:   23:07:91:D8:46:73:C1:E8:4B:93:E3:68:57:7F:49:FC:9D:3C:08:87
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Certificate issuer:       /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial:       01962F74A7CB882A09CB72E82C5964544CFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
Manifest number:          0BD7
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: G5_4IPMG5NHZjmfzPhI-Ht0hMBo.roa (hash: UQfSOOWEfVsgKWPp7JPv9q8rf4PIS8Inp9Mcfn7NDVc=)
                          2: xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl (hash: 0PiNNd3L0qydIQzZnnLwYE3HAd7HoINtM8xJDyprywg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a7:cb:88:2a:09:cb:72:e8:2c:59:64:54:4c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=230791d84673c1e84b93e368577f49fc9d3c0887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:d7:de:b8:3a:47:c0:7a:5d:ba:b4:19:61:
                    dc:48:99:97:59:32:72:e6:70:a6:77:59:a9:40:79:
                    48:f1:0e:6b:65:2c:13:b5:41:d4:2d:c6:71:c9:66:
                    0a:1b:46:4a:92:36:22:e3:98:5b:04:28:10:7c:f1:
                    2e:49:dd:c6:2f:51:c0:ba:e1:20:0e:fd:32:71:b2:
                    af:55:d5:27:92:e3:d3:cd:15:0d:a5:ba:2a:96:e7:
                    fb:6d:31:3b:e0:41:04:17:82:d4:5d:27:9a:db:90:
                    3b:59:63:e7:cd:38:24:2b:4a:f9:67:b0:38:77:e2:
                    97:08:7a:52:29:39:f7:4c:ef:7e:ac:2d:93:12:02:
                    7a:13:36:92:ed:e0:53:bc:dc:56:19:3c:8e:7c:55:
                    21:38:29:05:d3:07:a1:45:4e:1d:53:1a:81:c7:a1:
                    8f:df:00:30:7d:d1:82:64:25:2f:64:b0:fd:3a:bb:
                    c4:ec:5c:b9:9c:27:ac:b5:cc:0f:9c:b2:df:ed:8f:
                    28:16:16:93:06:ff:8a:5e:5f:45:72:bd:d9:d9:6b:
                    a3:b8:95:09:a1:0e:bd:37:06:02:94:71:be:19:05:
                    f8:7f:b9:9b:8f:50:7a:07:0a:63:f9:5f:dd:24:8d:
                    23:46:c7:a1:89:87:6c:1d:fc:96:f3:f3:8e:a7:e4:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:07:91:D8:46:73:C1:E8:4B:93:E3:68:57:7F:49:FC:9D:3C:08:87
            X509v3 Authority Key Identifier:
                keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:90:56:0a:bd:4e:c3:16:ab:11:58:ea:0e:88:da:7e:71:ac:
         e8:2c:32:24:e0:4e:df:27:e5:0d:36:33:d9:10:c3:a4:9f:d7:
         9e:fe:35:60:93:0e:03:f5:4c:72:fb:07:e8:e4:38:5c:5b:bd:
         4b:56:12:64:16:84:02:99:09:e7:d1:3d:c9:01:35:5e:51:6d:
         b8:7c:49:2e:a4:33:ac:b8:94:1b:12:00:b2:94:72:0c:74:34:
         ed:2d:63:85:03:29:66:5b:2b:d5:4c:bf:2e:54:43:d3:49:4b:
         3f:23:b8:c7:25:2c:08:1c:11:67:4b:5b:95:f4:92:80:a4:9c:
         41:81:6a:fa:75:a1:42:56:38:1e:0f:ea:d9:e5:59:5a:7e:81:
         3b:81:f9:b1:59:84:7e:94:93:c6:e7:06:26:48:8b:4c:81:d2:
         30:05:da:ac:15:03:27:9b:5b:83:18:e9:e8:69:dd:77:1b:4c:
         c4:79:2a:93:5c:b2:13:46:2a:97:3b:d7:8f:88:c3:6e:48:47:
         b0:02:cf:21:fd:c5:8c:44:0e:2e:e8:72:32:d8:97:59:49:f5:
         de:d1:c1:7f:a1:1c:e1:d1:ed:40:fb:e7:11:20:7e:9d:40:5a:
         7e:0d:60:1b:5f:ea:a0:04:4a:8c:d2:97:92:71:1d:5d:09:79:
         51:23:23:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----