Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
File:                     dHyzZv9uI99sCX9grcf6gHVZgZE.mft (raw, json)
Hash identifier:          F2fk3RXFwhlAW4Tly96/8pRtSHaJgp/CG3wPpC7renQ=
Subject key identifier:   C2:F7:3E:9D:85:E1:28:B9:CA:88:FD:48:F5:E4:CC:5E:D4:19:23:1F
Authority key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
Certificate issuer:       /CN=747cb366ff6e23df6c097f60adc7fa8075598191
Certificate serial:       01962F74ECA5D90609B88D471AC6D7CFA1ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
Manifest number:          08B2
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: _yLmchLwIYVTnPdJc9fw9h7BqNI.roa (hash: jQg4aqJLhfqC2o9cWdzjV4aGpmH8JtaZPWEi/oExAo8=)
                          2: dHyzZv9uI99sCX9grcf6gHVZgZE.crl (hash: FCvTYdWJT2LZSbgAsBhRV7PWGyHf8m6/sA1inTea/RU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ec:a5:d9:06:09:b8:8d:47:1a:c6:d7:cf:a1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747cb366ff6e23df6c097f60adc7fa8075598191
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=c2f73e9d85e128b9ca88fd48f5e4cc5ed419231f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b2:50:ea:26:88:f3:c4:86:3a:d9:9f:77:fa:
                    53:3c:46:0f:f3:94:94:a5:c2:a6:78:66:5d:a6:44:
                    db:64:ea:4c:42:1d:0b:b1:cc:5c:ed:b7:1e:70:aa:
                    a4:91:6e:f4:8d:fb:10:f6:4c:c4:0e:7e:a3:bb:93:
                    1d:36:3f:c9:0d:02:51:31:29:25:9a:09:b1:81:3f:
                    b0:4f:73:e8:90:c0:8b:7e:81:d8:98:af:0c:2e:0c:
                    09:0d:d9:8c:d2:ef:78:cd:c9:fe:d4:39:2f:7d:27:
                    1a:ef:c5:77:2e:9b:6c:4f:93:50:bf:bd:0d:56:5e:
                    54:f3:1a:bc:8d:50:f2:36:52:43:e6:a9:ac:66:74:
                    b6:6d:0a:a4:61:94:b0:da:93:61:a7:04:5c:2c:06:
                    ea:99:fc:56:c0:be:0f:2b:a9:ab:44:e4:e8:db:ed:
                    57:42:8f:c0:24:23:17:cf:51:02:43:eb:2e:d6:89:
                    a8:95:44:88:ff:af:c9:93:e1:ba:32:ff:da:0e:13:
                    aa:71:a9:c3:b2:ae:59:9c:40:97:28:47:85:63:c2:
                    08:92:f8:59:9f:ce:5b:80:c3:9c:79:e5:9a:2c:de:
                    cb:9e:fc:e1:e0:f6:b1:ee:2e:bc:9f:b5:54:81:75:
                    ef:0e:1d:2a:38:8a:df:d8:f6:49:fb:9b:f2:a8:c5:
                    03:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F7:3E:9D:85:E1:28:B9:CA:88:FD:48:F5:E4:CC:5E:D4:19:23:1F
            X509v3 Authority Key Identifier:
                keyid:74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d9:23:c7:c1:d7:fe:9b:33:8c:50:67:b9:b4:7f:4a:69:86:
         ef:1e:86:ce:c3:3b:51:76:40:59:e2:05:ce:d7:cc:da:d7:74:
         27:a1:c4:33:6a:b0:b2:83:40:10:35:09:ee:b5:13:5e:f3:6e:
         31:1c:b0:18:2e:5c:7a:d5:5e:12:d2:2b:e8:fc:f3:89:4b:99:
         d3:fa:fd:90:4e:36:9f:85:d9:94:72:51:e5:6a:ae:3d:e5:7d:
         df:2d:9a:11:dc:d6:99:af:c9:ec:96:79:4b:fe:10:4e:da:df:
         24:cb:fa:85:62:e6:c0:d1:1e:dc:1a:d6:a9:46:8e:5e:a3:c3:
         ed:59:f2:a1:63:30:53:33:72:2e:e8:df:0b:7e:81:a5:c8:b5:
         48:6d:5d:7c:ac:2a:1b:a6:a7:c2:42:85:42:94:4f:98:b1:9a:
         be:d5:01:6a:22:49:6b:33:7d:57:9f:a0:85:87:de:85:f1:cc:
         3f:f4:54:4b:99:23:86:14:7b:2b:8e:eb:78:47:da:81:15:df:
         11:cd:8b:ed:a5:a9:dd:bb:32:7d:e8:33:7d:a7:51:e7:c3:a0:
         43:34:00:b0:6a:56:ef:90:1e:b8:f3:2c:e1:1d:5e:0e:a7:69:
         b0:02:25:a7:2d:db:7e:19:e1:d5:48:9e:1c:08:bd:71:b1:6f:
         5a:f5:16:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----