Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
File:                     dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json)
Hash identifier:          gzq6bd3mDzdYw7Tk3s91tb8zXd/p/AaXTNG/LhxS9UM=
Subject key identifier:   86:CA:F2:71:A1:E4:F9:41:27:CB:80:10:73:A2:74:18:1E:3B:7F:9B
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Certificate issuer:       /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial:       01962E2AC584D8918FC81256BDF91DA71036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: OevXGO9big2d2JK12PRdEUk2MPE.roa (hash: FmOYT06hQMPm9dCUUJxlovK9qL/uV14wUJ4HLBabvxQ=)
                          2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: 3IvMAwgHd0NgZhGCOA8LJ2JRj3MqIVdWxwjAU6tl6+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c5:84:d8:91:8f:c8:12:56:bd:f9:1d:a7:10:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=86caf271a1e4f94127cb801073a274181e3b7f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:66:8e:50:1a:e1:91:d5:9d:5d:bd:87:67:
                    b9:aa:18:e1:24:5e:40:9d:38:de:6c:f4:31:1a:a6:
                    72:70:36:1e:c9:74:b7:01:a4:7a:ee:d2:d9:e6:ab:
                    e2:87:c1:8f:0e:b5:4e:9e:05:da:9a:e6:77:d2:a7:
                    af:cf:c1:26:91:d5:6f:c7:a8:a8:6f:2d:6e:5b:75:
                    30:22:9c:66:fd:f4:61:83:fd:ce:67:38:cb:8d:d6:
                    ea:67:aa:06:bd:17:7d:2c:0b:8b:a0:da:15:b8:89:
                    51:d9:18:0e:5e:97:c4:53:9d:09:8e:87:93:c2:0e:
                    90:ae:59:d0:25:b3:4b:68:5f:39:03:ba:3c:1f:a4:
                    9d:38:77:21:c8:2a:99:d0:3d:f0:64:0d:15:c7:65:
                    0e:60:bb:e7:49:d1:5c:03:b0:02:91:88:4e:44:04:
                    2f:38:80:b4:0d:90:6a:53:2f:ae:43:67:a3:b1:2a:
                    3f:80:25:e5:89:cb:37:b0:2c:a5:b3:a0:71:2b:3d:
                    82:1f:0e:9d:a4:5f:ff:b5:e6:76:ba:59:24:dd:19:
                    85:09:77:32:09:21:41:b5:28:aa:15:49:72:76:8a:
                    ff:ce:ec:b3:f5:75:34:b8:a6:d0:3a:6a:5d:51:34:
                    90:ac:74:30:62:be:ee:bd:fe:79:01:70:e8:ca:32:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CA:F2:71:A1:E4:F9:41:27:CB:80:10:73:A2:74:18:1E:3B:7F:9B
            X509v3 Authority Key Identifier:
                keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:a3:00:1c:ff:38:8b:a7:6c:41:03:12:34:54:97:70:ae:6c:
         0a:5e:81:ce:5d:9c:c9:61:25:de:10:17:43:0b:42:bf:a6:07:
         80:e4:a4:39:9b:01:b9:78:55:f9:65:5b:20:b7:59:01:9d:72:
         31:d9:78:cc:67:d7:6c:80:cc:f8:8f:89:43:4c:ed:fd:05:a4:
         88:2a:0d:e3:33:17:5b:c9:dc:ba:b1:71:c7:2a:cb:c5:f5:3c:
         20:96:92:db:db:23:aa:cb:a7:cc:af:17:28:e3:ae:b1:e4:4e:
         c8:28:2d:94:04:b5:d4:3d:aa:40:af:36:f6:ac:90:cd:8f:fc:
         b1:4e:ee:1e:76:f7:dd:4e:b8:78:ba:8f:d6:b4:ce:69:72:41:
         66:21:2c:29:dc:07:cc:d0:be:50:05:97:48:48:ee:e4:6b:ae:
         7c:31:6d:cf:5f:a7:ec:67:5e:75:95:9f:22:83:a7:bd:0d:dc:
         0b:a7:dd:86:75:22:4c:8c:4c:ac:db:e8:a4:f3:1d:94:16:c2:
         69:d5:73:33:cc:0d:82:b8:2c:cf:63:65:fc:75:2f:36:ac:ea:
         13:6d:44:5e:7d:8d:dd:d0:13:5a:72:b1:cc:52:85:91:05:81:
         2c:8b:d2:0d:4b:90:6b:2f:ed:e7:6b:e5:09:a4:ff:89:66:6f:
         85:f0:da:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----