Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
File:                     V4DOZAV5R263qnPBnLdOvt_daCs.mft (raw, json)
Hash identifier:          3v4wf0hLMHgAZMy/8Xag/DVS8JzJJ1abvKf1cn4V/aM=
Subject key identifier:   F8:3A:B5:B0:FF:2C:28:34:7B:40:67:DE:14:61:B1:05:85:71:09:D1
Authority key identifier: 57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B
Certificate issuer:       /CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
Certificate serial:       01962DF39E732E85C844C958AB5D700CFDC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
Manifest number:          0C1D
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: V4DOZAV5R263qnPBnLdOvt_daCs.crl (hash: sdT5d1Tl36aZU8H77YoSIHGBXrja5Zadhf/uR3AQ5i4=)
                          2: r_tsaMbjHoSCsd17cgTnbS8F0qc.roa (hash: GyoTnn/PfaIn4sRuGe7d5zf2OcCelYM3H/gIy6Qo2Lo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9e:73:2e:85:c8:44:c9:58:ab:5d:70:0c:fd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=f83ab5b0ff2c28347b4067de1461b105857109d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a5:b3:a3:2a:68:ab:8d:80:34:c4:29:7f:52:
                    33:45:de:df:20:bc:74:65:0d:43:e6:0b:a6:15:36:
                    1e:f0:f7:44:8e:67:47:52:7c:6b:5e:0a:da:5d:45:
                    58:b1:b1:38:c6:8f:4f:86:6c:6f:7c:9a:c8:d5:1a:
                    34:70:06:c6:6e:55:ef:6d:8b:31:11:ea:49:11:75:
                    38:98:17:f0:3e:83:a5:cf:d0:04:61:f3:3e:50:ce:
                    0e:4a:86:d9:6c:4a:73:bb:7c:9e:ac:aa:f0:e8:16:
                    91:69:e4:9b:ec:01:fd:8c:29:d6:e3:4c:77:d9:27:
                    6d:d6:85:3e:e3:8f:f0:14:f5:ca:46:5a:8d:a5:5b:
                    b9:70:fc:2f:aa:f2:04:09:68:8a:27:c8:44:f3:83:
                    c6:4d:a3:a1:03:a8:08:3d:d8:71:b9:09:d2:c9:01:
                    6b:6c:a6:e4:4f:b9:1d:c5:ec:22:84:1e:f0:9b:ce:
                    90:de:0c:e9:25:c3:90:34:ac:1d:22:9d:d3:49:d8:
                    c8:2f:a8:ce:ea:64:09:06:4f:68:5e:1b:93:d1:ff:
                    4b:64:78:3c:a2:c9:eb:05:df:6a:70:be:34:fc:6a:
                    6a:2b:3c:2f:62:48:86:75:11:88:f7:81:cc:93:b7:
                    58:30:70:0b:a7:71:db:56:47:be:cb:99:bf:26:ea:
                    cb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3A:B5:B0:FF:2C:28:34:7B:40:67:DE:14:61:B1:05:85:71:09:D1
            X509v3 Authority Key Identifier:
                keyid:57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b7:67:44:f1:b1:5a:2b:ff:ba:93:0b:c1:18:c3:fc:21:42:
         3f:50:53:ec:e3:59:51:05:2f:d1:82:9b:34:19:11:54:8f:50:
         5c:c3:7a:52:6c:05:ec:79:9a:af:9a:55:50:b0:b3:1c:14:b3:
         c9:a2:fd:6b:93:8f:93:80:bb:2c:4b:95:e2:96:45:b4:de:51:
         5a:fd:43:e5:21:2b:92:b8:99:f4:7f:bd:76:42:32:ac:7c:17:
         ec:fa:63:6a:7e:d2:10:56:8f:a0:48:23:28:91:44:fa:7a:bf:
         1a:73:57:ce:4b:24:59:54:e2:a8:b1:ff:c1:a4:08:71:fd:6d:
         5a:18:5f:7a:09:48:2a:a9:3d:ae:ba:68:f2:d6:36:8c:db:e6:
         39:db:36:4d:10:5f:b2:a2:27:c1:1f:2e:34:f3:71:85:7f:a0:
         13:48:6d:ad:9c:16:a8:49:bc:9f:bb:56:57:74:1c:6d:1a:3c:
         f8:b6:d8:18:f4:07:e1:d0:30:38:fb:3a:e6:d9:67:b0:c2:51:
         ae:a4:fc:bb:c5:e2:02:9b:96:cc:d4:e2:ad:45:75:6f:ce:3e:
         fc:43:77:04:83:22:ef:e4:6a:41:e2:78:2f:ff:44:7f:3a:1d:
         da:af:53:db:ef:56:8b:b5:63:66:61:47:0c:1b:36:0e:0c:15:
         5e:1c:db:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----