Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
File:                     pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json)
Hash identifier:          hvoB+8pM/ZEByx0ka2VVE1r/uPL41xXfYZirgO9Lca4=
Subject key identifier:   98:F7:20:2D:DB:02:DE:C0:7F:25:AA:F5:02:85:98:61:D9:87:FC:F2
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Certificate issuer:       /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial:       01962E9932B8826C51399BD4A041F73D5DF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
Manifest number:          0D33
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa (hash: I7nX5ROvffTNGyuWZrNpPLtJJE4OFOAqh82VhWKzBDY=)
                          2: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: ywfxIGkBQQBDA7erOyEBuOAyOGKseJ9E1JPi4myBPRk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:32:b8:82:6c:51:39:9b:d4:a0:41:f7:3d:5d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=98f7202ddb02dec07f25aaf502859861d987fcf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e3:10:81:f3:98:47:59:85:89:24:25:00:28:
                    87:36:b5:ba:6d:a9:c4:b1:6f:95:94:ae:65:a0:17:
                    70:8e:2d:7a:e2:d9:13:0f:f0:7f:58:8a:77:51:59:
                    37:03:c1:28:d7:d1:b3:5a:ed:99:0d:f4:33:01:0a:
                    1a:db:3d:aa:36:ef:eb:89:e9:e4:b5:1b:a7:65:8c:
                    18:4a:b2:9f:e0:98:05:fb:7c:3f:1f:75:58:df:7d:
                    46:b3:62:78:85:a4:16:59:41:38:91:bc:0d:4e:dc:
                    3f:ec:56:d7:20:13:27:76:1e:21:fc:76:7f:10:05:
                    a6:d6:a5:93:45:8e:d4:b4:38:36:6f:3a:5a:84:ad:
                    ed:42:65:20:d1:ec:b9:1c:2e:87:d9:01:28:7c:88:
                    3e:3a:e7:c4:85:91:ae:20:71:b2:dc:f8:54:a9:17:
                    dd:b2:59:f5:50:05:bd:bd:02:de:4d:df:86:d5:21:
                    eb:7b:55:76:43:2c:9e:dd:17:45:9a:05:79:14:1d:
                    0d:9d:03:68:62:59:40:01:fa:2c:df:d6:38:e5:44:
                    42:27:ea:b7:ac:f5:a9:93:fb:ad:69:53:f9:77:82:
                    cb:1f:a9:fb:fb:9f:12:29:ed:6b:fe:8f:ac:d6:6c:
                    b8:01:90:f9:ba:52:9f:57:f8:f4:33:19:c2:f4:b6:
                    59:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F7:20:2D:DB:02:DE:C0:7F:25:AA:F5:02:85:98:61:D9:87:FC:F2
            X509v3 Authority Key Identifier:
                keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a9:92:97:35:0c:62:ae:51:4e:ac:7e:25:05:45:55:53:d4:
         03:9b:db:60:69:55:57:b1:82:0d:3a:82:d4:d3:9f:f1:95:a7:
         67:58:90:9c:78:15:db:e9:a0:f7:de:4a:c2:96:d8:33:69:d1:
         6e:5e:71:c5:b9:91:87:17:9e:7c:bd:16:a5:e3:b8:3f:26:97:
         27:4e:7b:87:7e:e1:7d:6c:e3:67:86:fe:14:68:9f:8b:83:0c:
         46:11:1e:4d:4a:9f:69:bc:33:54:c1:8a:4e:bd:1f:9d:d2:89:
         86:31:f5:8e:57:8b:90:68:dc:65:4f:a7:a9:51:6b:59:94:86:
         66:3c:ad:8f:89:87:b4:23:52:6f:8b:9e:ec:6d:9c:f4:48:82:
         8c:34:83:21:eb:4b:db:75:77:c8:c7:ac:d8:53:61:a7:a1:84:
         6d:e9:7d:ac:00:ac:87:91:ea:8a:08:cc:df:b9:37:57:17:05:
         3a:c7:6f:3b:0e:54:09:b6:6f:61:2b:34:f8:42:3a:c8:e0:74:
         07:0d:30:58:fe:be:e5:87:e8:90:20:cd:d6:e9:02:78:be:d2:
         68:c8:73:b8:86:25:28:8a:5e:66:9f:29:c1:40:f3:7c:6f:ff:
         60:62:65:76:00:40:7e:4d:db:8d:92:05:3a:3c:1c:b7:e8:89:
         5f:21:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----