Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
File:                     rysOIXo1FoOSIGvac85hlTWgLzU.mft (raw, json)
Hash identifier:          hhIDfvMPmYwlucuvAyjvt3iMJmDa3IpSAOAMoPW/wyY=
Subject key identifier:   63:3E:25:DC:96:4A:47:C3:8B:64:D0:40:C1:DB:0E:D0:D4:6C:22:62
Authority key identifier: AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35
Certificate issuer:       /CN=af2b0e217a35168392206bda73ce619535a02f35
Certificate serial:       01962E2AF22AD9F36CDC9F013F33AEB147EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
Manifest number:          0991
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: rysOIXo1FoOSIGvac85hlTWgLzU.crl (hash: pun8JUvsCg8Ej0IpAQZ80c7wDC5kd4JeXE8ssi8B+ok=)
                          2: tKwKl17jXwIeAtAZEyALLLwTexA.roa (hash: E9CmZ9NzF2HrbXjpDzFF0Gs0klh/PHaYx1PKsYvWrwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f2:2a:d9:f3:6c:dc:9f:01:3f:33:ae:b1:47:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2b0e217a35168392206bda73ce619535a02f35
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=633e25dc964a47c38b64d040c1db0ed0d46c2262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:03:1f:35:7f:af:cc:82:6e:b9:38:e7:03:
                    d0:66:27:4c:a3:e0:34:48:91:ec:e6:eb:a3:c2:fd:
                    f2:fb:f3:15:2c:7e:9c:10:f9:d6:92:15:2d:59:04:
                    87:37:75:7c:40:b9:73:25:64:c5:0e:f9:d9:71:22:
                    7c:62:f4:2e:67:91:3d:23:5f:a9:ec:ad:90:99:dd:
                    88:ff:43:7b:dd:9b:b1:35:f6:74:2f:eb:b1:b2:cc:
                    bd:ad:13:d5:56:70:c1:5e:5e:4f:63:b2:d9:1e:3a:
                    65:f4:02:f7:27:a4:31:df:4b:9f:eb:93:de:97:c3:
                    28:90:9c:9e:49:01:6a:1f:4a:74:fc:c6:5b:fd:09:
                    20:0b:bd:ab:04:dc:35:b5:18:ca:e4:6b:ab:00:45:
                    f2:68:0c:ec:7b:22:20:c0:79:49:53:96:fc:d5:d8:
                    3e:dd:99:ff:6a:5a:b7:18:20:89:c2:9b:87:62:fa:
                    7f:48:35:fd:46:78:78:84:8c:54:c8:f3:cb:15:14:
                    49:41:25:08:5b:bc:14:06:b7:5d:6a:bb:f8:79:f8:
                    70:ae:0e:b7:d9:19:cf:7e:ad:c1:11:a7:a4:3a:44:
                    e1:d4:79:1e:90:02:51:93:ea:cd:45:79:79:38:83:
                    da:a7:8b:f4:73:d5:07:8e:9b:74:c3:15:c5:91:cb:
                    90:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3E:25:DC:96:4A:47:C3:8B:64:D0:40:C1:DB:0E:D0:D4:6C:22:62
            X509v3 Authority Key Identifier:
                keyid:AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d8:19:c2:18:a4:95:47:02:5b:f5:97:9d:ee:04:55:9e:8a:
         de:58:6f:ac:7f:d4:62:9b:49:68:93:47:14:ec:cf:8e:c4:b0:
         12:ed:ec:8d:96:38:04:23:bc:04:c0:e8:8d:de:3e:82:22:85:
         c0:36:c4:78:8e:16:f1:60:79:eb:bd:5e:6b:2a:54:b8:be:3a:
         0e:59:9f:11:39:b3:e1:8d:19:07:ac:3a:56:e8:c2:6c:11:35:
         13:7d:ba:0c:14:7b:6c:56:d2:b0:e0:01:88:07:9c:f5:3c:93:
         68:5f:05:a5:e5:93:89:3d:8f:99:da:14:42:51:75:7b:e1:4f:
         92:e3:c8:f3:5f:b9:d0:7a:35:39:ff:8e:01:a4:26:38:e6:f7:
         75:40:f2:64:b6:48:c2:3c:ed:bd:44:72:52:a8:97:81:52:52:
         b0:73:98:8a:4b:a0:78:a3:98:90:9f:cc:1d:76:95:6e:98:43:
         cc:35:b4:9d:40:8f:74:b7:b6:60:d2:16:39:fd:98:79:40:62:
         41:a6:a6:75:a0:3f:38:24:22:ba:82:d1:f9:27:10:83:62:29:
         74:4a:b2:6c:4b:8a:8c:bb:e9:73:50:59:18:88:4e:90:e9:41:
         21:96:d4:e9:86:6f:1c:f3:89:6d:5d:95:ed:59:80:b8:64:76:
         86:43:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----