Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File:                     ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier:          jliaNDy/QxkaPx52EPkRK+dDYScC5TUC7RaxBEISab8=
Subject key identifier:   F7:71:7D:B5:03:69:EB:E4:78:B1:30:9A:7C:E1:98:8E:AF:D7:BE:76
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer:       /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial:       01962F063F93A701D8E39AC65406233E27F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=)
                          2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: FpKNZplF55PAj6PEgx8NJiLtSET1g3aHUvAKK8BGM2g=)
                          3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3f:93:a7:01:d8:e3:9a:c6:54:06:23:3e:27:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=f7717db50369ebe478b1309a7ce1988eafd7be76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:72:28:0f:26:3c:1d:7b:a9:31:d4:7b:43:61:
                    ca:68:f4:cc:38:6e:3b:8d:45:97:0c:35:67:d0:0a:
                    f8:a5:07:10:a0:86:86:9b:3f:13:6e:95:c6:be:fc:
                    c8:68:0f:f0:3d:34:1e:4d:cc:db:3b:d7:19:cc:fb:
                    36:a1:53:c9:d7:0c:d9:6f:dc:c2:83:7b:f4:2a:cc:
                    66:d5:18:57:7e:35:4f:ac:99:e3:9c:e8:08:62:cd:
                    df:d5:ad:aa:85:ca:00:03:c1:1a:d5:5f:ca:51:c2:
                    ba:b1:c5:a7:fb:26:89:84:44:f5:09:00:5d:23:46:
                    0a:b1:89:de:17:57:9b:63:87:d3:9a:14:de:67:1a:
                    e1:93:20:af:ae:71:3b:b5:61:f7:44:11:0b:1b:a7:
                    48:98:12:22:1b:e4:b2:d8:96:da:ce:af:5d:f4:ca:
                    44:74:4c:8a:8d:cb:0c:94:41:9c:0f:09:ac:52:dd:
                    a8:c0:53:36:b4:f4:ac:31:29:46:7d:05:fd:98:3f:
                    f8:f3:fe:1e:c4:cc:64:4d:7e:a9:35:66:51:7c:c5:
                    ee:2e:b6:9d:1c:1b:af:21:e2:af:29:20:4b:df:cf:
                    9e:1e:ea:8f:48:39:46:20:ea:d2:17:90:2d:f5:65:
                    36:88:81:0b:f6:b0:39:c5:c1:89:9b:8c:22:aa:04:
                    e2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:71:7D:B5:03:69:EB:E4:78:B1:30:9A:7C:E1:98:8E:AF:D7:BE:76
            X509v3 Authority Key Identifier:
                keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9c:65:f3:87:eb:9c:66:76:56:ee:63:d2:8c:43:2e:30:4a:
         e4:8d:88:77:d1:33:ff:8c:15:5e:8e:91:5b:e8:6c:ac:1d:e1:
         82:e0:2c:aa:3e:af:77:28:38:16:d6:25:e7:d0:dd:16:04:2a:
         22:ee:bd:68:89:03:cb:ee:95:ae:08:d6:0a:3e:aa:88:8b:1e:
         d6:93:13:3d:e6:5d:84:8c:12:71:dd:46:d5:8d:ff:e4:69:d0:
         a0:09:27:9c:2b:f8:21:c7:0e:57:09:6f:fc:b1:43:c0:8d:14:
         b5:bb:f5:a5:0d:e8:ee:51:86:9a:01:2c:c3:35:b8:ea:9a:d9:
         33:29:d1:da:19:a8:3a:8b:42:f4:cc:64:95:c0:2e:fb:07:e8:
         6e:b3:1c:35:2a:2d:f8:94:63:df:83:ed:6f:95:aa:22:6f:b3:
         cb:0a:d1:43:49:e1:7a:e8:80:26:ad:77:da:c8:46:60:cb:89:
         ba:eb:e1:1d:58:8c:09:ab:0a:e3:66:50:72:9e:5c:63:a6:ce:
         1c:8b:1f:c7:18:c9:e9:5c:97:83:09:15:ec:c3:de:80:5d:59:
         0e:b0:f7:11:82:02:ba:25:8c:93:2a:64:a0:19:41:a6:18:fd:
         e9:6f:9e:d6:cf:8b:e7:8f:87:a4:2e:12:4f:df:d1:34:27:d3:
         8b:7f:c6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----