Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File:                     RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier:          SIUasYPN/3ylQfu2pw6hOXvs8JwQuVt801HF2OpeaHQ=
Subject key identifier:   50:9C:A2:0F:C5:EC:50:F6:38:FE:DB:14:C9:90:53:4E:98:CF:7F:6D
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer:       /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial:       01962FAB4636CA493A5FD060A0F087B7BBC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: 4Fc8DyjVSWCEsU_EUG8kyZV4jp4.roa (hash: f+6PC2+8l4GQP1uSjRq7ZupGlBtpnFIedMNKrq+WMR4=)
                          2: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: l9Z7RBOu8xnXUKJpp0zMWbqvDXwdFJW2K+DERT8aqxU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:46:36:ca:49:3a:5f:d0:60:a0:f0:87:b7:bb:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=509ca20fc5ec50f638fedb14c990534e98cf7f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:86:9f:b7:20:d9:57:b1:b5:1f:da:33:92:
                    fb:77:0d:08:ba:9a:dc:44:71:10:d5:81:06:25:5f:
                    f1:f7:34:c3:e8:39:63:bc:98:12:48:24:c1:17:27:
                    1f:69:2d:a4:c5:42:72:a6:1a:7d:1b:54:8e:c0:1e:
                    21:7a:ce:98:48:d0:88:e8:2a:3d:1b:aa:ec:86:58:
                    6d:d7:9a:b8:3a:a7:72:fe:17:02:71:46:30:5b:ab:
                    ed:57:8d:52:ea:53:90:15:fb:d7:81:fd:74:5e:9a:
                    49:84:9d:60:79:69:ad:e4:57:b7:a6:ae:80:d1:dc:
                    a0:88:08:4e:c1:49:0c:e1:f2:93:e1:46:85:5d:4b:
                    08:af:e7:86:e1:cd:02:17:0d:6d:16:1c:02:c7:61:
                    62:ce:eb:15:9b:51:cd:9a:c6:a0:c8:bd:f3:1a:11:
                    97:8e:14:bd:45:e2:98:77:57:d1:8b:4c:d8:e6:11:
                    c3:51:e1:8f:96:60:e9:03:8d:a0:0d:64:87:43:3e:
                    0c:e4:53:23:94:49:d7:c1:b8:1c:7b:a1:bc:af:8e:
                    67:44:b8:d6:19:c8:c6:a2:89:1d:7e:05:18:2c:24:
                    f5:9c:77:73:75:bc:71:fc:ee:9f:18:07:15:f1:1e:
                    31:4c:5c:ce:d9:ff:a2:68:c8:8e:1e:c4:e2:6d:37:
                    fb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9C:A2:0F:C5:EC:50:F6:38:FE:DB:14:C9:90:53:4E:98:CF:7F:6D
            X509v3 Authority Key Identifier:
                keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e9:29:5f:0d:46:16:12:95:05:e9:62:0a:67:d6:71:e5:de:
         b4:a3:1f:93:14:2a:b5:15:8e:e9:c8:47:01:6b:0f:56:71:ed:
         18:19:2c:16:ec:3c:3c:d2:b4:c5:e5:46:22:07:03:46:d8:01:
         41:8f:b1:58:7f:59:0b:f2:2f:db:3e:31:3f:2b:8e:f2:ab:2d:
         d2:38:a4:57:c9:d2:10:00:90:33:a3:42:0b:18:54:52:12:e8:
         fb:18:83:00:e3:2f:52:5e:f2:97:46:e4:05:26:db:6f:b9:7b:
         55:47:18:79:44:a6:e4:76:62:b0:c0:9c:32:be:30:50:b9:0b:
         a6:8e:7f:77:be:69:ae:d9:ca:65:8e:d1:08:e6:40:fd:30:aa:
         35:03:28:ff:c8:56:c0:5d:1f:95:6b:2f:02:68:7d:9e:7b:68:
         85:14:f1:47:d4:9c:45:fa:e6:ae:e1:3c:37:0a:22:ec:c0:07:
         7a:b5:1c:c6:e4:02:ed:55:93:17:57:69:46:36:58:9c:fe:0d:
         14:df:f4:cf:23:42:76:25:bd:15:5e:4d:90:3c:d9:38:35:bc:
         cd:6c:6d:6d:b7:11:55:7e:fb:18:71:a9:73:da:87:8b:e7:e1:
         b6:0a:0e:71:92:2c:52:73:94:de:7e:11:57:b2:43:a1:6d:6f:
         cf:98:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----