Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File:                     dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier:          f5J/7kzc5576dG0frAmZ33NRumijqalZWmC5y9UYvqM=
Subject key identifier:   4C:47:87:17:EA:EC:FE:E5:7B:5A:D6:23:45:D6:E7:3A:25:44:D5:7B
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer:       /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial:       01962F0710E148F0D92191D176CC8AABA5A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number:          0356
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: 59Mn6Fq_ztW3ZpObO3_epXiDhpk.roa (hash: cp+rR6j5Vo4FlHwAzBmhQ3KTx+zcyZnQHkQLzqefDBI=)
                          2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: r245TrGfBF1dE7/llet2aqFoASO7VRz8pBJ7zGq4ltY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:10:e1:48:f0:d9:21:91:d1:76:cc:8a:ab:a5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=4c478717eaecfee57b5ad62345d6e73a2544d57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:c6:16:50:47:7c:5a:2f:22:e0:f4:69:1a:
                    8e:50:5e:3e:98:b0:05:5b:9f:88:f8:da:cf:e9:e4:
                    5f:23:08:cc:5b:02:6b:78:6a:a5:d6:e2:3c:db:c3:
                    dc:01:48:d2:3e:35:fa:7f:27:60:a7:0d:da:b0:05:
                    42:d0:e3:2e:4b:3b:99:c1:80:aa:d1:cf:02:2e:f9:
                    fe:f6:b0:13:80:54:d8:16:7a:bb:6a:a6:c8:ff:ec:
                    03:e5:36:92:20:dc:d4:06:55:72:4e:8f:55:57:c6:
                    40:28:83:8a:0a:38:f2:42:01:4b:ba:99:2d:e1:6d:
                    da:e0:55:09:04:4f:d7:1d:a6:67:fc:e1:42:c0:24:
                    8b:66:ef:c2:2d:dd:1d:a1:88:13:f7:5f:7e:66:de:
                    8e:d9:81:f7:2e:40:98:20:4c:1b:7d:98:47:e7:d9:
                    fd:9a:87:c0:7e:56:00:c9:c9:57:60:f9:b0:f1:12:
                    a0:d5:b0:74:be:48:66:8e:9a:e2:c1:8e:c4:64:58:
                    59:f1:a8:86:eb:3b:5d:e2:b9:11:bf:55:c3:50:9f:
                    5b:f3:5c:db:85:35:ac:d8:9a:82:15:aa:74:6d:61:
                    40:41:21:93:0b:2d:88:09:ca:d1:3f:2f:f6:c3:e0:
                    1d:c5:f6:eb:cf:aa:46:3c:57:0f:1e:e5:db:31:0d:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:47:87:17:EA:EC:FE:E5:7B:5A:D6:23:45:D6:E7:3A:25:44:D5:7B
            X509v3 Authority Key Identifier:
                keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:62:c3:1c:90:65:2c:35:6b:f2:24:57:e5:3c:6b:e2:f1:90:
         fb:45:fd:eb:9b:68:8b:72:f0:66:20:d1:60:d4:d4:bc:63:b4:
         37:61:92:c9:22:d6:6f:f6:6d:2f:3e:24:e5:fe:63:28:8d:fa:
         0b:28:b8:02:20:e1:4b:fc:e8:fd:73:1b:fc:ef:c3:41:05:87:
         6a:b6:f3:65:b5:e7:b9:f4:57:07:e0:cf:9c:21:6a:02:75:cd:
         32:91:eb:a5:a1:94:84:8e:fb:5f:f7:9a:8f:5b:a0:98:a0:76:
         f5:11:2e:08:5b:38:ad:1d:40:01:8c:cd:3a:73:e1:71:be:70:
         f6:52:7a:7d:eb:1b:11:c7:ee:95:98:12:89:6a:d8:d4:8b:54:
         bc:51:f2:bb:31:2f:01:9f:fe:3e:1d:7e:1f:4c:7d:0f:79:6b:
         27:9f:09:08:8a:e8:9a:a4:18:1f:4c:2e:e9:36:aa:32:2f:81:
         11:8d:9e:7a:72:ea:06:d2:d1:1c:3c:8c:ce:59:b5:4f:6c:9f:
         54:cf:b6:35:f6:48:0d:b8:c1:db:fb:ce:19:59:51:de:aa:64:
         07:17:bc:3b:ef:aa:fa:50:20:35:a4:b2:be:3d:ff:20:a0:34:
         9c:e4:5b:b7:ee:42:52:6b:67:94:00:79:0e:93:1b:aa:db:f7:
         f9:cd:aa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----