Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File:                     dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier:          VpyyG/bWVPzoTwV2/qkl0v53R7XgdIT+nHZrsf1kS6s=
Subject key identifier:   B6:63:FA:F5:1C:F3:C0:55:44:ED:E7:2B:62:27:3B:0E:84:51:2D:E3
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer:       /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial:       01962ECF8633D2BFFF52C55FD108D838C7AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number:          01CE
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=)
                          2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: PhjS1kJi1DzuWKY1cWS3Is2WSNSPGnhLHmYZi6PRu6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:86:33:d2:bf:ff:52:c5:5f:d1:08:d8:38:c7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=b663faf51cf3c05544ede72b62273b0e84512de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:0c:fa:c6:82:68:0b:60:36:c3:aa:84:9b:
                    ed:d8:3f:e1:fb:48:65:3e:c8:80:e7:31:27:07:20:
                    71:7a:f6:84:a6:7c:92:c2:46:b8:f8:b9:d0:04:e3:
                    cc:2e:50:a3:be:a4:db:b7:97:dc:01:0e:19:b8:a2:
                    b7:b8:84:9c:e9:f8:c3:f5:73:d2:3a:4f:23:25:f0:
                    73:f3:4f:9a:8a:81:34:c7:c5:cd:7f:e5:45:3a:5a:
                    8c:39:ff:99:38:64:a9:a1:6c:7c:49:38:88:18:69:
                    70:40:8a:31:c6:c8:e8:d2:15:bc:b4:d8:d0:a5:aa:
                    2d:59:fc:26:a8:b8:ac:39:91:3c:ae:51:10:eb:6b:
                    f4:21:5f:97:a8:a3:02:ed:cb:b1:cd:5a:1a:55:80:
                    2b:64:43:c2:6f:78:77:2e:50:a8:a8:f1:d9:12:82:
                    d3:9f:8e:4c:62:0c:40:5f:43:81:37:86:13:77:a8:
                    2b:af:a4:94:60:3e:98:6b:81:de:1a:1d:87:99:a5:
                    ae:2f:a8:80:8d:87:ac:7a:91:58:88:89:f4:e5:5e:
                    26:59:6d:f0:9b:f0:c5:8f:fd:69:b6:b3:bd:32:d9:
                    11:8e:9e:b6:3d:b2:36:31:df:62:ca:c9:05:7a:55:
                    5d:ce:29:ee:fb:62:cf:7e:02:32:43:51:95:06:f0:
                    fe:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:63:FA:F5:1C:F3:C0:55:44:ED:E7:2B:62:27:3B:0E:84:51:2D:E3
            X509v3 Authority Key Identifier:
                keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7a:0e:42:02:f9:de:82:26:c2:3a:64:0e:a1:c9:1a:99:31:
         ed:a3:5e:e6:79:9f:5d:90:a4:86:1c:83:a7:5b:22:af:3a:95:
         bf:2c:dc:d6:2b:62:c5:2a:c4:ef:56:d7:4e:9e:59:00:d8:70:
         ba:39:7d:34:84:c8:30:b7:6b:0c:7b:72:df:94:f2:5e:f2:bc:
         24:67:27:51:09:c7:83:69:70:04:d9:0f:34:a0:b7:6e:9f:f0:
         b5:69:d0:be:4c:ae:2e:59:9b:7d:bf:27:17:d6:69:63:e4:b9:
         c9:c8:be:e2:b2:c0:43:1f:90:86:99:c1:83:53:92:17:49:fc:
         35:de:62:d0:6c:1f:33:d2:d1:9b:70:da:34:e6:4b:8f:ec:e0:
         7f:bd:7b:d9:b2:7b:4c:6f:50:60:5c:78:42:ac:fb:72:b4:95:
         1a:0c:62:04:cb:7f:2f:92:7e:c7:de:62:07:25:7c:27:9f:55:
         bb:d4:a7:c7:2a:8f:61:4f:0c:b8:c7:9d:9c:65:a9:63:31:82:
         25:88:ec:71:a2:d2:38:84:d2:41:5b:31:5c:e1:61:2d:58:6a:
         c6:47:83:48:b7:7d:0e:a7:f0:56:41:24:50:42:45:6d:ac:b8:
         b5:5a:c9:47:8c:07:b4:ce:50:3b:ee:f3:61:58:38:a4:ed:99:
         fc:e0:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----