Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
File:                     dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json)
Hash identifier:          l4NA/vG0BfZr4qm9NaRDRrvVPBNg/bVrI9NTVThnOHQ=
Subject key identifier:   F1:32:EE:ED:07:F9:8B:4A:B4:D8:5F:AD:61:F7:73:86:6C:4A:00:D2
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Certificate issuer:       /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial:       01962ECFCFA67782759211D6AF6D5004D5CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
Manifest number:          0300
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: 7ky7nj7F_jVbzl2sZpXMbb-mdKw.roa (hash: LY2VlTHDrXTzgp1AOuCkmRPYOmnqACU3YmdlJ3mfogY=)
                          2: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: jtT6h6BwMYosQ+F9Zmbk1qQ+XfeIJnd0ABr2JPHMQ/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cf:a6:77:82:75:92:11:d6:af:6d:50:04:d5:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=f132eeed07f98b4ab4d85fad61f773866c4a00d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:94:e7:cd:a0:3d:32:58:56:58:f4:32:b4:
                    30:34:3f:fb:7b:00:42:27:9d:ea:84:20:81:ba:1e:
                    d1:3d:1f:55:97:6a:79:c5:51:75:39:f6:50:5b:59:
                    7b:43:46:11:b2:d2:c4:59:0d:87:23:db:9b:05:0e:
                    00:5b:4b:c9:0d:10:88:75:81:17:d2:2d:a5:44:cc:
                    c7:fc:3e:5b:08:bc:82:7d:0a:6f:41:37:fe:20:fd:
                    ae:ee:89:69:23:74:61:f9:4d:18:74:6d:c1:a1:af:
                    b1:ec:2c:ea:28:79:ea:f8:f1:e6:78:eb:ff:a5:96:
                    6b:40:f4:f9:6a:b5:d9:7a:10:59:70:f9:91:c0:ef:
                    dd:d4:ff:3e:45:89:4c:bf:f1:2c:7c:18:62:8c:f8:
                    0b:1d:ac:3a:6c:f2:f0:65:37:96:56:e7:9c:ad:9d:
                    a1:0b:c4:22:a1:da:29:85:2c:44:4c:5e:34:ea:eb:
                    4a:22:b8:ea:38:13:f2:f0:96:14:6d:5b:df:85:bf:
                    2b:e3:49:53:2a:b6:c1:42:b1:0b:11:ad:48:03:f1:
                    3d:48:f4:43:32:b0:47:7f:24:0e:4c:aa:5b:92:01:
                    34:e2:ca:d2:4a:94:9d:be:69:22:06:28:0f:b3:ef:
                    75:a1:14:5f:9d:50:64:12:9c:08:ff:68:80:c0:ff:
                    dd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:32:EE:ED:07:F9:8B:4A:B4:D8:5F:AD:61:F7:73:86:6C:4A:00:D2
            X509v3 Authority Key Identifier:
                keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:24:28:6d:33:14:93:6e:5f:03:ca:1a:d1:35:4d:bb:2b:66:
         85:74:20:7b:7e:1f:b9:84:57:b7:20:64:19:a0:41:98:16:8b:
         71:0b:f5:7c:44:78:b4:0b:79:77:82:2e:b8:dc:95:3f:c2:fb:
         3a:6b:0c:16:a4:24:9a:64:53:6b:e9:46:68:17:15:d8:41:72:
         19:f6:52:7e:36:33:71:62:27:b4:22:55:37:58:18:5c:20:44:
         f9:88:1a:6a:df:c1:03:e5:c3:5e:02:da:b1:10:29:0a:93:da:
         67:98:c3:c4:79:8f:bf:23:b3:c7:5d:c0:9b:d9:2b:97:37:6a:
         cf:21:08:fb:40:db:19:1d:c0:d4:6b:f0:78:7e:a0:d8:e5:fd:
         e7:2d:4f:7a:64:2d:dc:5e:86:54:5b:d8:2e:37:65:a8:0f:68:
         e3:f1:91:00:d6:9c:f1:22:50:ff:d2:f3:64:f6:32:a0:bc:33:
         92:b9:dc:76:27:c3:44:f7:46:31:0c:25:32:8f:01:65:2c:29:
         91:2e:4e:ea:f8:34:71:64:cf:39:9b:d6:0a:b8:3a:a5:b4:e2:
         72:b7:e4:ef:d8:23:54:b3:de:43:8c:15:26:43:a6:dc:36:1b:
         79:5f:90:ee:46:5d:0e:d9:85:e7:3c:53:c0:02:a6:03:8b:b4:
         f5:8c:35:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----