Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
File:                     d7yR94ozULrLv743b4gTIS0UmTE.mft (raw, json)
Hash identifier:          6m3x2e2oX1qnad42jQE43EVC54vjWRFlBtKqgM5Q9rI=
Subject key identifier:   3A:1B:02:D6:B8:D2:E6:CD:9B:0A:14:FC:66:DF:66:15:7A:A3:BC:82
Authority key identifier: 77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
Certificate issuer:       /CN=77bc91f78a3350bacbbfbe376f8813212d149931
Certificate serial:       01962E2AFC2A708B23DC68427E49AD4606E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: 1-1kKr9VJ8bw_SUqQcMUBecH1TKg.roa (hash: 3o6hb5np+9u5Gu9cp0jYxsJnhLz7Y1oIDpNf2dIi2oE=)
                          2: d7yR94ozULrLv743b4gTIS0UmTE.crl (hash: T5iscsgces4BRdkn28vD3UiRH9hn1nqRmVxlHMHqpVU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fc:2a:70:8b:23:dc:68:42:7e:49:ad:46:06:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bc91f78a3350bacbbfbe376f8813212d149931
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=3a1b02d6b8d2e6cd9b0a14fc66df66157aa3bc82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:48:e0:d9:18:93:f6:fe:ed:da:8d:8b:2f:
                    75:e4:1a:dc:75:0d:af:f9:1f:3c:6e:65:94:66:8a:
                    af:98:fc:4c:85:f2:10:69:3b:18:00:49:b3:73:2f:
                    31:3a:5f:4c:6a:b3:f9:1d:d2:b4:0d:4b:1f:1f:6e:
                    7c:2a:4a:76:8e:d7:2d:93:75:86:97:00:5c:f4:75:
                    69:6a:fb:7b:ea:2e:51:59:5e:cb:44:8b:72:80:89:
                    60:d1:be:fb:54:83:1d:39:d1:85:a5:1e:18:47:dc:
                    c6:6b:4a:f7:8a:37:5b:53:73:c2:c0:4d:05:7c:28:
                    2f:ad:c3:0d:82:2d:e7:27:76:1e:a7:4d:e5:61:43:
                    dc:3b:f7:de:21:2e:c0:40:0c:29:c4:3a:c0:d8:5f:
                    19:e1:da:60:99:f0:30:71:fa:2e:58:c7:1a:68:4a:
                    f2:d3:79:06:40:b1:a4:6a:9b:55:5c:31:f1:ab:79:
                    00:eb:7b:73:bd:c0:a2:1e:d0:6b:96:21:3f:63:7e:
                    0a:83:7e:81:d4:6c:ad:56:ec:6c:77:81:87:d7:d0:
                    3d:f8:5c:f3:6f:fd:c2:66:33:d7:33:e3:0d:c4:0e:
                    b8:13:b3:0d:23:70:99:b4:e0:7a:17:7a:9f:24:aa:
                    4d:09:cf:24:cb:1c:d5:bd:9b:83:df:a0:6a:b2:58:
                    65:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1B:02:D6:B8:D2:E6:CD:9B:0A:14:FC:66:DF:66:15:7A:A3:BC:82
            X509v3 Authority Key Identifier:
                keyid:77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c1:90:05:1c:2f:eb:ec:e4:9c:ad:ad:91:e6:ac:de:04:c6:
         24:22:8d:a0:c0:ab:30:38:d9:3b:9b:c3:ad:49:8c:d1:d0:d1:
         bd:3e:97:04:72:98:9d:7b:4a:93:20:d2:4d:e2:60:9e:1c:db:
         52:63:d0:09:e2:e5:fc:2e:83:57:0c:39:b5:13:3a:28:0e:6c:
         83:f8:14:4b:1d:dd:17:63:63:c9:d3:64:1b:54:3e:d6:eb:1d:
         30:31:22:ae:8d:2e:1f:e6:a3:16:8f:aa:78:45:2c:be:98:ce:
         5f:94:f0:1f:66:84:28:67:d1:ad:61:15:09:0a:57:d9:05:cc:
         2a:c6:29:10:fb:d2:1c:b0:7c:ab:00:42:a7:85:9e:c2:ef:25:
         32:94:77:a4:df:30:e3:6b:22:c1:60:17:c1:6e:6f:af:98:8a:
         81:04:90:80:f2:9c:7d:c8:6a:58:32:f5:3e:71:32:ba:0c:35:
         0a:f2:76:ea:f3:ac:51:b6:33:6d:99:3f:84:37:af:a1:0c:79:
         47:c8:01:b8:49:12:45:58:e6:32:85:23:9c:22:79:88:2c:cf:
         da:ae:64:af:ae:4c:c0:ef:e0:36:89:76:79:1a:f3:2b:70:87:
         f9:77:32:01:a4:70:9e:95:ad:0b:92:a4:e0:e8:c4:ac:74:57:
         ee:c2:a3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----