Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File:                     d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier:          UmPPdFs5Zp3KHTr4rcQmCpMoEr2rBq/cwPLIV4EqbUE=
Subject key identifier:   36:A8:91:02:52:48:C1:55:91:66:15:7D:D3:F7:60:CF:FF:80:C7:6D
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer:       /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial:       01962DF3D17956A8026719ABA22C74467FF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: auoQhH7aBJnI1g3L4GojEkAsQQY.roa (hash: gWIiP5OtZwTCpaoFewi8x05lW349LkZSfT6+AFOcha0=)
                          2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: 08j+jm1pUHgIAtgpSeO/ookWgNKffaDS3gpbN+dvD8s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d1:79:56:a8:02:67:19:ab:a2:2c:74:46:7f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=36a891025248c1559166157dd3f760cfff80c76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:cf:91:7c:95:e7:96:ec:6c:4a:8a:25:72:
                    0d:92:c6:80:df:22:87:63:fd:ad:ed:02:18:9c:61:
                    0b:1e:2c:17:50:31:f4:1c:fe:aa:ee:ba:6f:64:2b:
                    7d:7a:ed:3d:4a:15:b1:3e:1d:ac:8a:c6:66:a6:21:
                    46:b5:2b:65:88:aa:ef:51:34:7f:e9:9c:87:0d:6d:
                    af:3e:3a:56:c7:0b:cf:45:d0:91:29:72:63:3f:f4:
                    4b:ea:e5:22:ed:3d:41:79:53:c3:62:e5:90:a0:86:
                    41:d7:60:91:64:8a:b2:a4:6b:26:19:23:54:99:cc:
                    62:c2:af:f2:6c:1c:18:e1:22:1f:05:cc:09:1a:41:
                    8f:4d:09:ce:44:14:a6:88:bc:dd:0f:d9:c0:32:fb:
                    d7:57:11:aa:ff:ff:a9:3b:76:07:7a:30:7c:fb:0a:
                    05:c3:2e:00:07:3f:ca:90:b4:93:07:3c:7d:ff:13:
                    11:a1:a7:5b:74:eb:e8:e7:5e:1a:89:0d:f5:b1:f4:
                    51:36:ee:6f:dc:eb:b8:a2:8d:4e:f2:39:eb:e1:5c:
                    bc:dd:04:94:94:43:28:e1:b0:88:16:be:6d:19:a4:
                    d9:0c:2e:75:7f:14:d2:dc:f7:96:56:7e:bf:5b:dd:
                    1c:ec:19:c4:39:68:ee:ea:11:20:4d:c6:e0:b1:aa:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A8:91:02:52:48:C1:55:91:66:15:7D:D3:F7:60:CF:FF:80:C7:6D
            X509v3 Authority Key Identifier:
                keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:45:1b:7e:e3:a0:e5:81:3e:10:bf:9b:d3:f6:7f:ac:9b:4e:
         fc:e7:79:d9:2e:49:cc:4c:39:16:92:9a:02:d4:22:7f:42:b8:
         ed:ac:db:3d:f4:21:3a:c5:48:a6:0c:57:a7:d9:88:dd:b9:71:
         bd:1f:9c:16:4e:46:cd:88:7e:47:72:59:c4:26:f9:b5:c8:53:
         fb:d0:71:6a:df:b7:89:71:74:81:f0:35:7a:d4:fc:04:14:68:
         f3:c3:4d:d3:98:02:5e:98:58:3c:ea:c3:00:1d:d0:47:79:e3:
         18:9b:c5:72:91:dd:85:de:f0:48:16:bc:84:a9:d5:7f:bb:35:
         50:70:59:d4:0f:2b:1a:f8:54:40:e7:52:9a:0d:87:af:86:39:
         11:06:18:0c:5c:e6:c6:1d:81:81:9c:52:1f:3a:bd:fe:63:5b:
         06:62:b7:2b:14:92:9e:c5:62:fb:f9:8e:63:21:0d:e1:fe:2c:
         48:8e:9b:13:ad:e0:a1:80:67:db:a5:ae:f0:b7:e3:8b:80:4b:
         55:aa:dc:5a:22:e5:0e:bc:33:3b:7b:1a:a4:9e:1b:79:06:bd:
         b9:9d:23:4a:67:99:e1:cb:38:13:af:02:c0:a6:93:9a:31:42:
         b7:c4:01:cd:e0:ad:92:be:ee:9c:27:25:c8:13:0a:0a:55:94:
         c0:0f:15:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----