Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
File:                     dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json)
Hash identifier:          q9UmX1o+3dF5eQV7duTSk6fFkrj3hKbiVx2hFdnFXXw=
Subject key identifier:   CB:19:2C:ED:F6:08:E5:53:07:B1:CB:37:23:86:FF:ED:6E:97:55:B6
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Certificate issuer:       /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial:       01962F3D86F1B996EA09F8E0504CE4D78BA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
Manifest number:          0797
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: RbCZ4FuBiM5bQVW3sP5PrxSE_ic.roa (hash: heyjJE1M941WJSvHrhTQkBoLwbj5RIQs9kFiPjSVnUw=)
                          2: VgQVNXTLznzmHsP79v3Zsr2IWwU.roa (hash: V8Zv8ak7cEH62i1TGjfWmCMowy8kun9bTSlwi87+E9s=)
                          3: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: l8gfbW7JF2DMrPoqQVmHvvPe1BcYY/jYdimgEGpIdkI=)
                          4: rgad5_QrqjzIqPuzW_IRWvVFFb4.roa (hash: CW37KfuVvlCtejt5YGCTadY3jiqhfL5iQfoIqu008Bo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:86:f1:b9:96:ea:09:f8:e0:50:4c:e4:d7:8b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=cb192cedf608e55307b1cb372386ffed6e9755b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e5:62:3b:b8:c1:92:db:8d:d5:cb:6a:71:5a:
                    ae:37:e8:86:b8:f8:7f:a3:64:ad:17:6a:25:b5:c7:
                    e1:12:75:e0:01:3d:e7:33:f6:83:75:96:e4:ea:7f:
                    ad:5b:45:65:90:4e:5a:05:8d:52:99:fb:81:d0:71:
                    2b:13:c1:f8:af:f6:19:21:eb:13:f0:d7:74:45:6e:
                    52:91:42:56:b8:2f:1c:27:cf:64:89:2e:4b:ea:06:
                    32:7f:e8:7f:48:da:3b:db:83:26:46:fa:7e:ff:fc:
                    59:bd:13:56:32:ff:18:b1:d5:e7:d9:db:29:27:62:
                    e2:1e:52:2f:43:f7:a9:5d:8e:53:e6:52:95:1a:4c:
                    59:ef:c3:38:5d:04:b1:2e:a5:1b:13:00:ee:fd:73:
                    a5:c0:a1:61:6d:ca:cb:e6:92:89:89:bb:f7:bf:d6:
                    c8:06:8a:62:3c:fe:6d:ec:86:62:14:a8:d9:c2:91:
                    78:04:87:d4:48:bf:a9:b7:51:f6:66:c1:ad:94:90:
                    81:63:73:9b:7f:67:56:f9:08:8d:9c:98:78:84:dc:
                    5a:3b:40:2a:6d:62:43:7d:6f:92:cb:62:30:96:94:
                    37:12:9f:b6:ac:05:b5:2d:66:e2:ed:a9:fc:c6:73:
                    f7:5f:96:44:cc:2a:49:77:c5:d9:36:be:51:66:e3:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:19:2C:ED:F6:08:E5:53:07:B1:CB:37:23:86:FF:ED:6E:97:55:B6
            X509v3 Authority Key Identifier:
                keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a2:e7:8f:33:45:03:a6:9f:b4:af:92:05:4f:32:23:6f:59:
         4c:9f:ca:d5:37:fc:ae:b5:6e:f9:64:92:3f:1e:8f:c1:5a:89:
         c3:2b:4b:87:42:61:bf:95:b1:3f:ac:87:21:cc:23:06:ef:8b:
         87:fa:99:96:71:c9:39:9e:af:a4:b5:8c:01:5c:a5:88:67:b3:
         3b:02:b4:b3:dc:b4:7b:02:b9:0f:b9:3a:41:d8:5a:da:f9:f9:
         e0:39:40:4d:2f:68:2a:1d:23:92:03:12:8c:ff:b4:e2:07:6c:
         d3:e3:4c:25:16:3a:e7:14:a4:c9:e9:db:9e:ef:94:3f:5b:34:
         e1:b3:5f:84:96:49:99:23:ba:4c:a7:3f:f4:1e:ec:18:67:16:
         2c:56:9c:ff:cd:b7:46:16:06:6a:8e:c5:b3:91:5e:bb:9f:12:
         ac:eb:e2:e8:12:d9:99:2f:d4:f3:95:9c:b4:48:2c:b3:87:47:
         73:50:51:42:bb:2c:13:41:4b:60:63:d8:6f:34:3b:85:fc:2c:
         c6:3b:24:be:ff:ef:51:d7:e2:21:28:05:c3:39:33:5d:53:f5:
         c8:2c:0f:e4:cc:d9:9f:2d:6a:c7:ec:1d:59:4c:23:88:b8:dd:
         33:d0:a7:7b:9e:3f:d2:19:8a:42:76:5c:8a:92:7a:d8:88:dc:
         6f:ce:ab:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----