Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File:                     pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier:          RB0CDwzXm7mRqW6gB/KaXNgkmWoVtSuK1rJRSz9sbUM=
Subject key identifier:   80:2E:C7:5A:5D:A6:D0:70:B8:40:93:44:58:7F:E3:79:9B:85:EF:18
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer:       /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial:       01962F74AFDF4014D06494C02B3E4C35DE78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number:          017E
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: aU9nU6J43VKML7pOttC9ZY6jQ98.roa (hash: FbRy0Mzafv2hiOEuNsxPoMw70K3GoSJZXHuz7LnmQeE=)
                          2: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: kqMQr5kq46IbfmtgVWOmc3MM2pNkE8agIDAHbIhOApI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:af:df:40:14:d0:64:94:c0:2b:3e:4c:35:de:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=802ec75a5da6d070b8409344587fe3799b85ef18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:bd:a9:02:32:8e:e7:b7:33:4f:d1:a2:30:
                    66:0c:07:1e:2d:30:7a:b2:88:13:89:09:2e:a8:ef:
                    ff:dc:31:e0:8a:12:4f:9a:d3:a1:4c:45:22:dc:f9:
                    c6:11:3e:34:bf:f2:c5:8e:57:94:da:26:78:79:cc:
                    e9:a0:ae:e5:0a:f4:79:f0:09:8c:8d:8a:80:7e:59:
                    fb:4a:b8:bc:50:1d:eb:3f:da:06:fd:8b:e7:cc:06:
                    70:d7:83:ab:8e:c2:d0:92:fb:8d:6f:e5:79:5b:2b:
                    22:88:93:ad:67:84:0d:89:62:92:25:5a:c9:b5:1d:
                    0c:20:80:a3:29:71:51:29:90:c0:e5:9d:4f:97:67:
                    b1:be:9a:29:e1:d2:70:07:72:d2:12:5c:3a:9c:b1:
                    e5:52:56:23:01:cd:a0:50:91:24:29:60:21:ce:2e:
                    6f:76:a0:dd:92:ad:42:f6:ee:63:85:fc:fb:04:03:
                    b4:c8:39:28:bf:1b:97:f0:81:36:aa:25:d4:2e:66:
                    06:bc:a5:f9:9d:72:9d:72:53:a1:92:b5:5b:8a:06:
                    a7:3e:a1:c5:87:2b:96:44:53:e0:b4:c8:27:1a:03:
                    5a:aa:03:ca:72:6e:7f:db:65:e7:8f:14:a3:f1:59:
                    0b:c5:3d:57:17:4d:3a:84:7a:6b:3b:73:3e:f7:66:
                    73:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2E:C7:5A:5D:A6:D0:70:B8:40:93:44:58:7F:E3:79:9B:85:EF:18
            X509v3 Authority Key Identifier:
                keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a2:6b:a1:3b:36:13:52:56:3e:58:5f:54:3a:44:ec:4a:ce:
         df:37:43:9e:90:43:a7:e4:c3:f9:fb:1a:52:80:6a:9e:64:31:
         73:8e:36:9c:fb:c6:9c:71:bb:56:04:90:47:8d:50:ca:96:84:
         4f:c5:2c:cb:28:58:0e:86:af:25:49:3c:ba:8e:5b:0d:86:5d:
         87:c5:6f:38:84:a2:8e:7b:56:35:14:91:bb:02:26:fe:a0:1f:
         15:10:61:70:1d:3f:7b:36:02:69:57:14:54:04:d9:99:af:54:
         7f:ba:32:50:6f:0f:60:54:d9:c7:02:04:35:93:58:9b:0f:e3:
         8c:db:de:a2:79:5b:53:3a:47:0a:81:6f:df:ac:6f:33:53:cf:
         7e:ad:5a:e7:fc:d9:c8:e6:6c:b7:e6:dc:f0:4f:05:cf:04:2e:
         66:ee:1c:24:65:e3:e2:b3:61:97:0c:25:10:64:f9:75:d3:05:
         2f:68:a9:07:7b:13:de:fe:ae:65:7f:52:b5:b2:64:df:85:06:
         55:d9:05:6c:1d:a8:b1:d8:19:d0:ca:e7:37:a4:a0:cf:f6:b5:
         22:f1:37:6b:f9:d0:ae:92:28:ec:09:13:b4:ce:11:cd:96:6d:
         44:8c:23:68:cb:17:ed:bf:31:87:5c:17:7e:91:0d:3c:2e:3f:
         33:e2:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----