Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File:                     d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier:          /XK+SRUZstlgndSs7Q8XByRH14JjhJjBIgX+Ke731I4=
Subject key identifier:   20:DF:2F:90:62:9F:02:8C:13:DB:E3:97:76:7E:D9:DD:27:CF:96:1C
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer:       /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial:       01962E98EC2E695E0E132ACCB62D8F660291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: 0zB1fvsCCNYlcy6iq3ZXOJ1Eq0X8Ks7YjDgVVaeL97U=)
                          2: r_pXvYOMh3gSQPYuo_0x5LIDY1s.roa (hash: bQrJT1cr1jHVeYHOeCbVvQ+uUO5ecYBMkZwEAtD6RHk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ec:2e:69:5e:0e:13:2a:cc:b6:2d:8f:66:02:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=20df2f90629f028c13dbe397767ed9dd27cf961c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:07:5a:06:9d:55:90:1b:7c:c9:f1:58:9d:
                    69:da:6e:32:af:84:d3:2b:3d:44:07:e6:98:06:a6:
                    12:80:40:3d:01:e4:61:18:bf:9d:cd:fc:d1:2e:63:
                    af:b7:95:bf:cc:3b:af:c5:53:28:20:cf:a8:f3:0e:
                    b9:2f:31:ac:b8:24:6e:59:d6:01:3b:71:bc:40:e2:
                    05:40:a2:d7:de:7c:6f:8d:66:f6:e6:83:70:10:4d:
                    08:5f:e8:11:df:1a:a9:b8:cd:47:f9:d3:9f:f8:64:
                    32:2b:43:f2:37:82:ad:c8:85:c0:5f:44:43:f4:44:
                    48:0b:38:6a:2f:43:f3:da:80:1f:5d:cc:72:29:f3:
                    31:68:ae:e9:d2:9f:e2:56:9e:0c:f0:1b:5b:a3:f4:
                    91:06:aa:d6:6d:9d:c3:a7:80:f0:b3:7b:27:e2:c0:
                    f4:5b:45:57:af:7d:7b:e2:aa:7c:f0:8d:c0:a7:14:
                    7c:f4:b5:f7:f1:4b:60:a6:26:49:ee:c1:f1:fc:c2:
                    ab:fd:41:09:6d:18:f0:e0:db:ee:c3:02:f4:40:3b:
                    80:56:6d:bd:08:55:ee:1a:c9:1d:81:73:6b:b9:95:
                    72:4d:7b:50:ea:4d:e3:4d:81:d7:ce:8f:83:08:ea:
                    4e:b2:dc:ed:9f:55:6c:2e:e1:e3:3f:50:4d:30:d5:
                    2d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DF:2F:90:62:9F:02:8C:13:DB:E3:97:76:7E:D9:DD:27:CF:96:1C
            X509v3 Authority Key Identifier:
                keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:36:f2:13:e4:25:44:75:08:2e:c9:1e:8e:e8:5f:73:84:13:
         85:86:ca:7c:06:5c:a3:49:04:2c:cd:ce:af:69:20:45:3a:fe:
         b0:43:c9:cb:9c:e3:ff:e0:95:7c:06:04:20:fe:f0:05:c5:cc:
         82:6a:ff:13:6e:ae:cf:1a:13:21:74:79:d3:6e:78:5b:67:0c:
         3d:b5:b0:2d:96:38:ab:cc:e1:fd:31:7e:f0:49:f8:7b:82:e1:
         fe:a0:2a:cb:00:db:af:bc:c6:c3:fd:43:ba:ea:2d:0d:06:31:
         3f:4d:15:4b:b5:d5:57:fb:4b:12:cc:53:b6:1c:89:b6:80:fe:
         1f:ac:6a:4a:8f:a1:61:f3:21:e3:f5:a7:fc:f4:a7:33:5f:a6:
         7f:f2:bb:c8:5e:f7:c0:40:3f:93:32:d8:0f:7a:f8:4e:00:4b:
         76:7a:d6:b5:0e:0f:57:63:fd:fa:9f:54:26:03:b1:0a:24:2a:
         73:cf:e3:f1:02:66:36:53:f9:15:52:e1:0e:ab:ef:e1:71:ea:
         68:4a:ac:f5:f6:96:2c:3a:55:7b:8d:8e:e6:1e:29:03:cb:b6:
         35:36:69:ba:c7:ee:0b:1c:24:72:1f:0e:ce:6f:26:4b:d4:dd:
         19:67:87:e7:cd:96:43:ad:e0:db:30:e4:8f:f0:1b:62:0f:07:
         6e:01:cb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----