Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File:                     d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier:          dul3LdQFPI3wuypKtcIjXsoBEeWBvcUnQIJerHSXNsc=
Subject key identifier:   37:20:AD:21:8A:33:19:8D:A6:C7:0D:52:FE:4C:30:7A:BD:BD:84:8C
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer:       /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial:       01962E98C224BDC4A34D43A8C8F7B394D25C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: km6aFYPK6xbNT73YpOQ7CKacNHfHElUs6wsRvgGa3TI=)
                          2: dl3PAMO_cjTEN-X9xexRuh-Chb4.roa (hash: EybA63Tgz5VJ0tdqhdyDgjCCTh9UVwGU3vK+Wpg2GJ4=)
                          3: lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa (hash: UW3HI87+Tvs0vPfpNH93w8VClrUvFKCrCGbfw0Tz9ZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c2:24:bd:c4:a3:4d:43:a8:c8:f7:b3:94:d2:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=3720ad218a33198da6c70d52fe4c307abdbd848c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:47:d4:04:39:2d:9e:6f:5f:d4:ed:7d:18:
                    89:6f:21:57:b9:c4:bf:41:f1:30:4d:5e:3b:7b:5d:
                    e2:0b:8d:82:47:09:a6:e8:8d:e4:eb:f5:79:7e:e1:
                    6c:04:4d:c2:fe:a9:13:b0:eb:d0:0d:29:3e:e2:16:
                    ab:2f:b5:56:d5:46:ab:a5:b0:a8:14:2c:8c:6c:f2:
                    28:b5:fa:3d:b2:d0:f8:46:fd:c2:cc:5f:e7:30:e7:
                    47:de:92:37:2c:c4:fd:3b:90:3a:8e:1c:1a:c3:6f:
                    b7:a8:f9:46:1e:6d:c3:7b:41:52:2e:a5:73:a4:89:
                    07:93:d0:dd:a0:83:e1:72:6c:e3:94:ee:24:ee:b1:
                    77:e2:da:ec:f8:5a:72:ef:77:f1:b1:fe:2e:0e:00:
                    e2:50:7c:37:6a:1d:ed:8f:ff:3f:c0:bb:68:30:16:
                    f4:62:44:8e:60:07:ce:11:c6:13:3a:41:2d:d8:bb:
                    e2:5c:e2:ca:8f:83:79:bb:4b:63:00:97:44:3f:5f:
                    89:3c:c5:2f:5e:fb:5a:76:4b:93:f7:9d:74:31:cc:
                    2a:07:8d:d1:2b:3a:6b:45:e8:b3:2d:2e:e6:42:d0:
                    14:97:19:2b:f5:90:7f:d5:b4:08:6a:a4:22:92:06:
                    d7:90:70:d3:d5:8d:d9:30:89:06:f2:c7:38:fc:7a:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:20:AD:21:8A:33:19:8D:A6:C7:0D:52:FE:4C:30:7A:BD:BD:84:8C
            X509v3 Authority Key Identifier:
                keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:75:97:6b:a5:47:34:90:e1:17:fc:e3:a0:8f:18:3b:4d:b0:
         2e:17:4f:7c:e9:8f:c5:64:8f:6d:c3:c6:32:06:a6:e2:52:6f:
         27:37:46:68:1f:9f:2d:77:d1:d8:f1:c8:c7:82:fb:91:b8:49:
         33:8b:d7:ba:e0:75:dd:0c:22:34:69:93:81:48:00:45:b1:f1:
         3d:a6:cf:46:08:c6:3b:db:89:e3:72:ce:21:40:f0:d0:87:94:
         36:ad:fc:30:c2:51:d1:ec:b2:bf:c3:5f:b8:20:ff:6c:0b:95:
         4c:59:d0:aa:b5:c5:b1:31:b6:67:11:fb:b0:9e:3e:c2:79:9d:
         b3:5c:3f:0f:f4:a3:fd:1d:df:65:ce:e5:fb:b5:c1:05:ad:5f:
         4e:cf:2a:7b:af:e5:88:5b:5e:af:59:a6:12:32:40:0c:79:44:
         34:3e:d4:13:20:42:63:35:5f:cd:39:38:95:8c:dd:20:4a:15:
         a1:53:88:ae:7b:1f:f1:21:bc:18:be:51:f0:4b:28:a3:13:d6:
         5e:92:98:dc:2c:46:3e:b8:f5:84:c1:f8:14:ca:af:cc:a7:24:
         d2:90:e9:4a:20:d4:e3:8f:34:44:c4:f1:b3:27:d5:cf:f5:2d:
         16:d9:bc:f6:ce:a2:d1:2b:51:c1:ce:38:e8:20:cc:e4:53:83:
         7c:1b:45:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----