Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
File:                     S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json)
Hash identifier:          DvWcMTFapophDeqDZdD0YVYXHKG9MwIaNtdEL7wla4k=
Subject key identifier:   D3:F3:B2:54:BA:0F:8B:FE:AF:EE:E7:6B:14:11:97:36:42:65:13:68
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Certificate issuer:       /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial:       01962F3D444A15E715F9259AAB5D368FD035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
Manifest number:          06D5
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: qkAWttg2gv3k+XZnIyc64RV57CHXQqrCTOORz6+N6UQ=)
                          2: takXMVWWq86gQFEdW1EUOBKN5bA.roa (hash: aj1iYELR5J1LrrkI2DJAheQdQ03iRDb31bSm3xq1fzk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:44:4a:15:e7:15:f9:25:9a:ab:5d:36:8f:d0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=d3f3b254ba0f8bfeafeee76b1411973642651368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:59:50:eb:1b:4f:f2:79:da:f0:ff:53:25:71:
                    c9:bc:54:bb:52:98:ed:1a:8d:46:f2:08:07:24:9f:
                    12:be:32:22:eb:7e:8b:00:63:85:e7:aa:c9:65:ee:
                    03:ae:3c:fd:a3:32:d9:a1:fa:07:5a:9e:3b:c3:b1:
                    6c:92:aa:b6:fb:a3:86:dc:1c:29:bb:72:e3:ce:89:
                    21:17:b2:c5:d4:7f:bb:45:2e:70:22:02:8b:16:5d:
                    06:e8:2f:93:83:2f:0f:fe:82:91:3f:5b:d0:cf:95:
                    f8:cf:46:70:c1:9f:03:fa:e5:df:86:ea:34:f5:ad:
                    a1:28:bc:39:fb:8f:2a:a5:99:f4:93:c2:14:30:61:
                    59:2a:92:ae:b2:08:82:37:c7:72:53:65:22:1c:a5:
                    88:6f:4f:b1:02:8d:06:ae:c4:91:25:e4:fb:d2:58:
                    4f:50:0b:ff:66:14:5b:0c:4d:05:1e:92:3d:4f:dc:
                    9b:08:b1:11:55:34:8a:1a:f6:30:fd:32:fe:0b:4d:
                    4f:c7:ba:41:f8:74:74:9f:91:60:a3:f5:d2:dd:ef:
                    c5:cf:0f:2d:68:30:92:f9:d0:c2:34:46:cf:c7:a4:
                    f6:6c:7b:14:68:fc:e0:16:85:c6:bb:6e:72:19:4e:
                    16:a5:6b:5d:e3:5f:48:98:34:ff:09:13:dd:e8:b8:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F3:B2:54:BA:0F:8B:FE:AF:EE:E7:6B:14:11:97:36:42:65:13:68
            X509v3 Authority Key Identifier:
                keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e6:d0:aa:4f:d5:49:ee:ef:65:4a:21:d7:0b:a8:2d:f3:06:
         bb:50:25:95:83:e4:00:54:30:7b:85:83:da:6e:c7:c3:56:f9:
         78:bf:73:1f:60:2b:47:ab:8c:06:18:2e:40:23:1c:e9:6a:87:
         c4:9b:4e:85:29:1b:4b:87:56:ea:f3:62:ba:59:a8:97:6a:20:
         67:99:25:45:ca:f3:0e:e2:62:28:f0:ed:5c:65:d2:3a:18:40:
         8c:a1:08:c8:d8:80:1d:8c:3c:e8:6b:6c:0e:6b:dc:6c:33:29:
         2f:e9:cb:ba:64:a1:cb:6d:4a:2e:6a:58:aa:c3:e9:1a:0b:7f:
         fd:e6:2d:02:79:ce:aa:0a:ca:e9:98:fb:76:e0:14:a6:e3:c1:
         75:09:a7:1e:b2:d6:56:45:64:88:b8:7e:c8:9c:43:c1:1e:b5:
         af:43:89:8c:1d:dd:26:bf:eb:8d:c0:de:5a:24:7d:1a:d6:48:
         10:b1:a3:1f:38:ff:d7:aa:1b:63:50:0f:05:28:27:ef:c0:18:
         3f:cd:0f:1b:e4:a1:87:04:95:df:87:f1:df:30:f8:a3:76:fe:
         32:c0:80:53:79:39:38:19:c5:c8:c4:3d:49:86:dd:59:38:44:
         f0:f5:1a:e2:a9:fb:37:d1:49:aa:94:77:07:bb:ea:7f:ff:03:
         b6:66:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----