Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
File:                     dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft (raw, json)
Hash identifier:          nbflW+3z1hA3rjNEXvChsGOZomMRCobVnlXkIB91CSo=
Subject key identifier:   26:33:6C:75:C8:DC:BB:F4:1C:0D:B8:AB:EC:8D:12:E7:D3:E0:3E:FB
Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
Certificate issuer:       /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Certificate serial:       01962E617776D4AA8980B764FCE86D4AE8F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
Manifest number:          0157
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl (hash: n4UVVrT0wwYRhnyqeJQ3WBQLLniL/6vugEShviFGsOA=)
                          2: nHio7uNF-gJsASyGNozixn0XJIM.roa (hash: jcd5sjivp19XVsrsVA1XbLT4Ewz4dljsdil0kUZsn2c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:77:76:d4:aa:89:80:b7:64:fc:e8:6d:4a:e8:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=26336c75c8dcbbf41c0db8abec8d12e7d3e03efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:c7:18:76:b4:b2:de:44:79:98:ad:bf:29:
                    d7:c7:1d:c0:56:42:2e:13:42:61:1c:79:0b:3a:4d:
                    63:e2:c7:b7:60:17:aa:b1:f0:d9:a5:c6:23:57:0b:
                    69:2e:07:ca:ea:7e:a7:ed:2c:b8:8d:c7:4c:90:79:
                    13:35:59:64:1b:78:bc:1b:bf:39:a0:3e:c5:9d:74:
                    3e:00:b0:01:90:c2:b2:2b:59:e7:42:0d:a9:16:00:
                    0d:fd:b6:62:18:a8:f0:95:13:d0:1f:f9:f8:83:8c:
                    0f:76:28:43:49:17:48:50:8f:2b:8b:d5:2b:d6:73:
                    ce:cf:6f:43:70:3d:d9:f5:c0:0b:0f:84:c2:5c:a5:
                    7c:27:06:53:79:21:ab:66:76:93:31:61:f4:35:fe:
                    14:27:ff:b5:07:e1:45:7c:b8:8a:9e:86:3f:ef:1d:
                    48:70:23:31:af:00:09:d0:d2:39:a4:31:35:42:9a:
                    05:96:c9:51:0a:44:a8:6d:55:70:2c:80:e6:78:d3:
                    ee:86:9c:e5:c5:43:95:1e:03:79:88:c8:04:4f:2b:
                    a7:4d:cc:97:dd:39:ab:b5:9e:a6:9e:40:88:5b:52:
                    41:38:b2:d6:0b:d5:c7:fa:e5:14:e0:1a:7b:22:44:
                    f6:66:3c:33:0d:a9:82:99:ff:1d:f2:37:08:9f:9c:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:33:6C:75:C8:DC:BB:F4:1C:0D:B8:AB:EC:8D:12:E7:D3:E0:3E:FB
            X509v3 Authority Key Identifier:
                keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:46:d7:9b:db:0d:93:d5:36:d0:ff:26:c0:b7:00:f2:8f:e2:
         92:1e:a0:b2:5c:33:ca:7b:2f:36:94:a7:20:d7:b5:42:3a:93:
         92:aa:94:30:8a:ca:c4:4a:75:b7:25:1e:61:21:1c:61:89:76:
         78:bd:ef:4b:e4:44:27:01:12:a9:fd:82:96:e7:49:2d:21:5e:
         48:e6:10:35:ec:ea:90:83:35:79:20:d9:71:1b:64:b9:35:f3:
         ff:d9:83:e6:04:60:34:0e:2f:77:e1:e7:27:8b:11:ab:46:87:
         5f:1f:c2:07:a6:0d:a9:f5:f0:bc:52:9f:8a:1c:4d:ff:ac:0f:
         20:cf:ce:d4:76:c9:b9:1c:dc:7e:a6:17:65:b0:f4:64:28:fc:
         27:8f:f7:a5:bb:1c:4f:a6:46:80:16:9f:f4:80:db:47:95:13:
         0e:91:bf:af:ba:a0:eb:ff:59:8f:cf:34:16:40:a8:85:c9:35:
         af:40:58:81:db:f6:41:dc:b1:5c:01:10:9a:db:22:30:3b:5d:
         13:86:5b:e0:6c:34:38:d6:8a:c7:39:33:92:7b:27:e8:f4:b9:
         8a:b1:c8:dc:f4:4d:81:ae:b9:d5:a0:d4:3a:f5:56:8a:d8:a6:
         e1:ff:24:43:3b:8a:21:67:c5:15:39:93:9d:3e:26:97:24:c3:
         6d:55:c7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----