Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File:                     dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier:          Uc5TQZneaUmfoxdm50P6EyyC0E48bgPGakh+LBdhOVw=
Subject key identifier:   82:88:F0:2F:3A:F3:D7:34:02:4D:F3:6C:E7:0D:51:74:58:91:E0:F7
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer:       /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial:       01962F067940C3F607C00D03F46B473EF7C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number:          02FE
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: tc/BnSuji7oF9l6PJCpUdcmuSYgYJPc3Dv8bBbQ+cZo=)
                          2: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (hash: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:79:40:c3:f6:07:c0:0d:03:f4:6b:47:3e:f7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=8288f02f3af3d734024df36ce70d51745891e0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:c0:bc:af:27:3a:c5:94:29:45:8e:99:6e:
                    63:5e:9f:f6:8d:92:19:bc:5b:db:69:7a:2d:72:03:
                    95:f8:db:3d:66:a0:b0:12:9a:77:0b:e2:87:da:b3:
                    75:5a:d6:c0:7f:5e:88:08:c4:42:0b:a0:bf:97:a8:
                    51:03:4b:26:5b:f9:78:94:c4:8d:c3:df:77:0c:30:
                    cd:0f:9c:4e:73:76:9d:96:57:75:ca:fc:26:7e:5b:
                    b7:85:ce:ca:2b:3f:0d:3e:15:4a:e0:11:6e:8d:9f:
                    d6:40:47:46:ba:a5:0d:6a:1f:5d:b1:00:31:d7:ee:
                    90:43:88:52:c9:fb:da:d2:0a:35:2a:ab:ef:64:8a:
                    f7:c3:dd:eb:80:db:74:8f:be:2d:3f:33:ed:41:65:
                    99:ef:e8:b6:83:69:8c:53:9f:e5:62:dc:4c:59:a2:
                    f4:07:8e:78:be:68:b6:fd:fa:48:45:44:bf:0f:30:
                    ab:d7:70:23:15:b9:03:c5:60:f3:84:f1:a9:63:0f:
                    90:55:46:fb:74:9a:21:b7:52:16:ec:a7:f5:18:c8:
                    17:d1:dd:fa:56:e7:a4:df:17:33:9f:14:e4:0d:b3:
                    c5:0b:0f:68:63:18:c2:7d:df:0e:80:fe:12:31:19:
                    88:7e:22:3b:1a:4b:53:f9:47:5a:ea:5e:6f:77:7a:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:88:F0:2F:3A:F3:D7:34:02:4D:F3:6C:E7:0D:51:74:58:91:E0:F7
            X509v3 Authority Key Identifier:
                keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:30:60:fa:ed:47:f5:60:25:d2:94:8f:30:88:82:35:1a:55:
         74:1b:06:47:1d:c9:20:17:d9:1f:3e:b3:36:cb:b0:10:b1:a8:
         2c:7e:d1:e3:ab:39:3c:1e:c0:91:d9:51:e9:f8:83:7c:20:b7:
         17:ec:69:9f:f7:54:3d:52:6c:3c:cf:df:83:84:ac:5a:54:61:
         ae:04:2b:8b:88:02:d2:f4:ed:1e:e6:65:59:79:83:3a:95:ed:
         43:29:db:4e:82:e7:b1:ea:f9:d3:ca:24:38:a6:81:6d:77:87:
         a4:10:61:21:22:7c:9d:df:71:52:c3:43:95:67:8a:cf:2a:e1:
         17:41:32:5d:78:38:af:56:d1:a3:2a:03:18:2a:82:8e:d9:cd:
         52:0d:c0:3e:4c:eb:22:f0:38:8b:0f:8f:92:3d:b3:94:dd:61:
         1d:39:5e:e9:4d:e2:ed:b9:47:39:f2:b8:87:ff:21:ac:e8:11:
         90:52:f8:10:84:02:b7:39:7f:37:04:1c:ad:d2:eb:ad:82:1c:
         c0:48:bc:a0:13:01:de:ed:01:14:63:61:e9:05:4e:69:0c:23:
         fa:98:bc:55:8a:b0:3f:0d:ff:c8:2b:b8:82:b4:cc:a3:76:83:
         eb:29:20:d1:57:77:a8:a9:b3:88:62:a3:21:c9:a4:e2:9c:45:
         20:8d:8c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----