Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
File:                     dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json)
Hash identifier:          75DqQGOfaGPeCTktEvOU8uQpwobJ5gximeGDeNxbz+Y=
Subject key identifier:   17:16:2C:39:75:A6:83:51:77:E1:AD:D0:D5:8A:7C:6B:09:C3:C1:14
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Certificate issuer:       /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial:       01962E9920C18F1037A21F05B69512E95593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
Manifest number:          07E6
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: tiwU4sOEIwyqIkPaoA4Deu6I2p1yxSDX4YM7NjML3rU=)
                          2: fckG1hreaQ8xP9aJJKEUiJVYbO4.roa (hash: H/fpzZgWfyhKP6Q91nDD52iN8W1nvip6ZLK/KybKJsg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:20:c1:8f:10:37:a2:1f:05:b6:95:12:e9:55:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=17162c3975a6835177e1add0d58a7c6b09c3c114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:74:88:02:ae:46:f6:5d:9f:f8:1e:73:4b:
                    1d:a7:51:02:bc:03:90:41:52:93:e1:f3:d0:2d:a6:
                    e2:a0:25:8d:d1:3f:8d:dc:fe:04:b9:ae:a0:cb:ba:
                    0f:78:8d:38:66:27:c6:03:d2:b2:c0:23:ea:c9:f0:
                    34:3e:dc:91:7f:a2:27:35:84:6f:69:c5:70:09:b7:
                    9d:77:0f:6f:ad:19:39:68:88:04:d0:79:64:a4:78:
                    83:7d:e5:eb:ad:7b:17:bf:d0:b5:6a:05:64:03:32:
                    59:28:79:11:0a:cf:c1:36:62:3f:7e:7a:a1:41:5d:
                    dd:5a:af:36:aa:1a:08:70:4e:4b:22:98:68:38:9b:
                    24:55:b2:5a:16:09:d0:46:aa:f0:0b:9a:b0:f2:00:
                    8b:8f:f5:26:84:ca:44:a3:d2:a4:69:54:d9:20:c5:
                    94:83:7c:38:d6:4d:7b:07:47:e2:db:13:81:e1:c5:
                    86:4d:97:99:51:89:a8:d6:de:9b:c1:e7:58:2c:14:
                    c8:79:24:db:9e:29:41:14:1b:3f:7f:2b:4b:6b:81:
                    b6:17:d0:26:b6:64:b7:46:19:ed:23:f5:b6:e2:fe:
                    90:26:2e:38:45:85:cd:27:1f:87:36:b3:78:bd:34:
                    81:7d:77:0b:ed:64:92:a8:0d:56:d6:51:56:1c:a2:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:16:2C:39:75:A6:83:51:77:E1:AD:D0:D5:8A:7C:6B:09:C3:C1:14
            X509v3 Authority Key Identifier:
                keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5c:3a:05:87:97:95:0c:1b:aa:ae:90:83:f9:c1:75:c1:6c:
         81:e9:af:ed:1f:75:00:f4:70:4b:15:fd:7b:87:78:b1:3e:a5:
         34:cd:09:c0:cf:cf:a8:cd:61:fd:d4:8c:a3:66:e9:f4:85:fe:
         87:6a:e8:c8:c6:f1:6b:73:69:9b:72:b3:47:4f:97:1f:00:8e:
         4a:a8:10:90:68:7f:04:5e:f3:07:dd:96:71:a2:74:47:80:6d:
         cc:c6:84:e9:5b:16:50:c4:0c:81:30:71:2f:1a:49:0f:39:61:
         0b:80:de:b4:c5:30:d5:ff:6a:13:a5:71:e7:61:80:4f:57:1b:
         2e:22:bf:65:5b:75:ee:b4:99:f0:a5:31:e7:8b:2b:c4:c5:4f:
         72:bb:34:eb:1b:97:94:f1:16:ba:f8:f0:09:c1:df:c3:18:ea:
         69:e6:95:5e:c7:23:cc:a9:34:c9:a5:29:8e:f1:fb:ad:d2:e5:
         97:0c:3d:1e:1a:e9:22:80:b3:4f:ea:72:05:14:be:9f:06:96:
         a5:3a:ec:2d:44:f7:a6:be:67:1d:29:af:15:b0:fe:80:e7:54:
         82:96:77:62:98:18:a1:50:be:b1:36:47:81:39:6a:b8:a0:55:
         f5:a5:15:1c:f5:8f:ce:18:20:08:3b:fa:91:e2:f7:d4:82:d0:
         cf:85:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----