Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
File:                     dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft (raw, json)
Hash identifier:          zoZo3+mKSXVRq94mA2N6trtzYWvQdgEf0xX8YKaOAOA=
Subject key identifier:   85:7E:01:1C:87:96:27:53:2E:83:D8:89:BC:60:8F:22:5D:2E:29:AD
Authority key identifier: 77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
Certificate issuer:       /CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Certificate serial:       01962F3D7A586374A7BA39C905EF2991CC65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: WpMT8suijybaT-axFHyfyzyaTBs.roa (hash: I0+iXOVNpy84NiUe0arMh2Z225OGAdH9+ziecARxFHA=)
                          2: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl (hash: i+vK/McDIIHs2KnzwQyusc3nK0dOoOJR2/ONZv1kGsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7a:58:63:74:a7:ba:39:c9:05:ef:29:91:cc:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=857e011c879627532e83d889bc608f225d2e29ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bc:9a:15:f3:9a:18:07:a7:4e:6c:a2:40:96:
                    02:8d:e4:b8:a9:06:46:2e:d4:e8:7b:ec:b6:45:25:
                    24:78:70:42:9b:51:22:fc:ca:0f:e1:ad:8b:c2:51:
                    f3:30:96:dc:18:f2:3a:ad:72:37:a3:11:b5:11:5c:
                    2c:78:37:20:79:42:af:48:3a:27:8f:e2:57:b2:88:
                    47:75:4e:ce:13:98:c7:c7:83:42:79:76:ee:80:c1:
                    dc:27:07:e5:72:71:64:f1:e5:12:96:96:04:16:a1:
                    76:43:55:61:24:b3:73:34:d1:9c:e4:1a:52:8e:2f:
                    b3:fc:fd:0c:5d:45:d3:31:79:ef:53:e3:95:2d:fe:
                    7c:55:57:6f:68:5c:b4:00:53:34:d0:3a:8f:87:8c:
                    d1:86:bd:8b:07:cb:06:76:50:f5:c2:cd:2f:80:00:
                    6f:9e:c0:2a:b6:88:70:9e:47:53:d2:35:3d:08:06:
                    87:2e:9e:78:30:eb:c0:4c:b1:24:0e:36:94:20:cd:
                    5a:55:24:c4:67:3f:98:e2:4d:86:c9:cf:5e:1e:58:
                    96:4b:2a:cf:04:7d:aa:9c:db:ab:91:85:1f:46:1d:
                    ba:03:fe:22:49:7a:54:a1:d3:19:7b:71:3d:fb:c1:
                    75:c8:d1:7a:8c:77:7f:da:75:23:15:c8:2e:e6:d1:
                    d8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7E:01:1C:87:96:27:53:2E:83:D8:89:BC:60:8F:22:5D:2E:29:AD
            X509v3 Authority Key Identifier:
                keyid:77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:cc:84:1e:d8:17:3d:bf:71:51:50:f7:c0:70:2f:fa:3b:1e:
         8b:7e:70:ca:94:9b:07:94:3a:07:4b:28:7d:4a:3c:8e:2b:66:
         02:65:45:23:7c:eb:16:72:40:67:62:34:10:d9:83:3e:6e:7f:
         06:72:22:75:34:4d:cf:ab:a8:8e:81:21:59:48:b1:17:41:c2:
         13:16:72:80:29:5e:27:b7:b0:da:68:58:93:f7:46:55:55:26:
         81:71:43:7a:a7:64:b4:53:9a:c6:3e:6b:eb:d6:e0:7d:d9:80:
         07:83:90:0b:b3:7f:cf:a9:e2:33:25:1a:89:2e:1b:2c:4e:ea:
         ec:c4:02:cf:18:ea:60:aa:4f:ce:b5:5f:22:bd:be:62:3b:09:
         29:e0:2a:63:a4:31:1d:68:27:5a:47:eb:69:19:b3:c1:56:32:
         9c:e6:27:8e:32:ad:50:f5:e9:fe:89:41:e7:5c:fc:30:e6:f2:
         89:98:bc:88:4c:3b:0d:7f:2e:4f:05:a9:ba:ce:65:ef:43:1a:
         e5:fc:1d:ee:43:f1:e5:56:0a:d8:1c:c4:9d:f6:66:b0:c2:ed:
         aa:9c:ce:0b:0b:0c:bc:0f:6c:47:6f:6e:11:81:aa:1d:0c:bf:
         a7:1d:6c:86:68:84:90:f1:e1:9f:3b:1f:39:df:e4:e4:95:13:
         95:2b:41:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----