Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File:                     d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier:          turBDrKgt8KCvHmrROzu95li6YIJdcQoP86GfoSQKLY=
Subject key identifier:   C9:28:E4:3D:EC:E0:B0:BE:9C:41:8B:A0:80:4D:BE:40:79:C5:02:A4
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer:       /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial:       01962E2ADE9178D59A6E19C0ACF6E84C366D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number:          0BCF
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: 3fVp55RM8WJ-CAkYXQzPen4QsPU.roa (hash: GhSbT3tbIT6J4s8weD/xKmKS+sqFk4JjUnduge7t9L0=)
                          2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: DQJsK/ZPJIW/WVKG/z4LPQSEO4U1EWrBsXj97lUqsqY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:de:91:78:d5:9a:6e:19:c0:ac:f6:e8:4c:36:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=c928e43dece0b0be9c418ba0804dbe4079c502a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:8f:3c:64:22:72:e8:6c:e3:35:08:88:20:
                    f5:d7:1d:93:22:ee:a4:9e:90:92:cc:8f:68:77:1a:
                    4c:6f:fa:09:65:fb:9f:82:81:9f:da:27:63:78:20:
                    a8:6e:0c:97:9d:65:0a:c1:19:fd:2e:11:28:90:19:
                    39:fd:35:93:e2:ec:6d:c0:b0:ff:bb:68:e1:10:4f:
                    e0:71:f9:06:27:bb:67:2b:79:5d:17:9a:ee:70:6e:
                    df:43:38:7b:98:a3:77:b6:28:d1:77:a9:87:e2:0a:
                    d8:cc:55:b9:0c:ed:21:45:7a:bd:3f:53:92:73:c7:
                    5c:8e:bb:b5:f4:15:27:db:a8:0f:15:7b:5a:3a:46:
                    59:42:29:fd:78:17:7e:56:c2:7a:50:b0:ef:61:89:
                    01:fd:07:37:89:1d:0d:dd:0a:ae:40:ca:af:d1:33:
                    8d:4f:70:6e:26:cd:b3:cb:f0:6c:15:92:3b:74:4c:
                    ee:28:31:18:fe:92:e2:db:64:e5:00:9b:f7:23:05:
                    bc:09:27:b1:43:b1:4e:d3:63:0c:9d:98:25:d2:ee:
                    0b:1a:c7:41:6d:a5:64:db:bd:e7:30:e4:a8:25:78:
                    27:d1:65:1d:e8:7b:52:e2:cf:ce:22:77:27:71:f2:
                    cd:76:9d:e5:13:3e:1e:df:7e:bb:81:bf:6e:7f:17:
                    40:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:28:E4:3D:EC:E0:B0:BE:9C:41:8B:A0:80:4D:BE:40:79:C5:02:A4
            X509v3 Authority Key Identifier:
                keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4b:7c:71:29:49:2d:aa:43:95:31:0a:48:57:a8:c3:cc:75:
         d1:76:c2:63:b7:2b:f1:d9:5e:e2:92:9f:db:de:83:52:62:cc:
         4c:82:57:11:e8:42:66:d6:2a:01:f5:91:fb:b4:a3:67:cd:72:
         9c:14:49:56:a2:5f:bf:51:33:1b:ee:db:19:63:f2:8d:fa:22:
         9d:5a:48:9e:db:1d:84:6b:a2:3a:53:13:35:a1:fe:7b:46:39:
         fb:f3:da:dc:59:43:c8:4b:d6:19:91:0e:df:be:94:9d:70:b3:
         03:64:62:80:30:d1:2d:26:a6:f7:28:e7:82:1d:7c:d5:7a:03:
         2d:56:c5:e3:09:e0:8c:8c:0c:35:64:76:48:ed:92:81:a6:54:
         28:ae:6a:29:9f:1e:17:8a:39:f3:37:b0:2b:24:a8:7a:58:c3:
         b3:45:d4:49:ee:87:c5:b0:44:56:58:bf:d8:b5:40:ae:c4:c5:
         ec:5f:73:75:02:3a:4e:1d:28:36:fa:8f:cb:28:12:da:5b:81:
         e2:01:93:47:4d:2e:5c:34:4a:b2:b7:a6:89:e4:21:f6:f0:e4:
         73:1e:75:70:01:ba:d4:c9:bb:58:33:cd:05:d6:c0:2f:20:26:
         4b:8a:28:4a:9a:ad:ac:bd:7c:29:0f:4b:b5:4a:2e:0b:6c:4f:
         9d:0b:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----