Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
File:                     dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json)
Hash identifier:          NLtaX7VEWnqksPwxvNbqKwVF/eowwgebd8CHbhKYERg=
Subject key identifier:   17:27:22:7B:F0:46:E6:27:23:25:B5:E1:95:3D:84:8A:BC:1C:E0:28
Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Certificate issuer:       /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Certificate serial:       01962E98BCABCA4B079838D7409B0DC16725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: W7laKT87v55eDeKxTAWPXVHXOXxUFSuGe6pcJL/m1a8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bc:ab:ca:4b:07:98:38:d7:40:9b:0d:c1:67:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=1727227bf046e6272325b5e1953d848abc1ce028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b4:f9:44:5c:a9:10:b3:79:8e:05:a3:90:41:
                    d2:e7:e8:65:a2:5f:6d:59:1a:11:c5:84:70:b5:db:
                    5e:4d:53:f5:b4:4e:ac:99:97:23:23:bb:61:a8:9b:
                    52:44:c0:b5:8d:6c:74:66:0e:7d:44:87:a4:6e:11:
                    46:2b:71:b3:62:e0:6c:69:9b:e0:62:a9:64:61:80:
                    57:e1:55:95:26:c5:4a:fd:ab:6e:0f:19:46:cf:97:
                    c1:17:04:65:fc:29:d7:24:49:ab:a1:48:38:58:46:
                    74:b5:18:bb:bc:96:a1:16:82:f8:3a:55:70:c6:35:
                    88:7e:0b:d1:c9:c8:55:43:ad:e8:e8:79:0e:4b:cd:
                    0c:f0:79:5a:3e:aa:99:60:38:e5:ec:10:4d:41:33:
                    56:92:7e:48:68:61:2d:29:0d:a8:33:af:60:f8:d5:
                    7d:86:c3:84:cb:55:b8:2c:2e:da:30:4e:d0:90:0f:
                    c5:9f:4f:b7:88:84:5e:86:ce:43:98:a6:92:68:ee:
                    fa:9b:b7:50:e4:34:09:87:a0:9c:ec:ff:ec:b1:48:
                    ec:24:6c:e6:d6:44:78:c1:90:e9:69:cf:2e:26:44:
                    dc:9c:eb:69:82:4f:67:eb:d6:79:b5:1e:f7:97:27:
                    a8:85:52:06:91:72:02:ae:d9:93:19:27:35:df:c5:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:27:22:7B:F0:46:E6:27:23:25:B5:E1:95:3D:84:8A:BC:1C:E0:28
            X509v3 Authority Key Identifier:
                keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d1:4b:0c:f0:39:ae:a4:c2:4e:a7:a7:24:c2:53:91:a2:63:
         d3:99:a2:b5:d3:76:1a:ea:6f:a8:f7:34:c8:db:be:f4:42:16:
         d8:2b:be:48:c6:1d:20:c2:3a:1a:2f:1a:5a:29:fc:a6:92:26:
         a8:ec:3b:00:09:99:b3:18:23:ad:71:90:a8:42:37:f9:58:61:
         1b:18:0a:f6:1c:3a:d5:a5:23:b6:f6:43:b1:63:03:c2:91:f5:
         3f:34:77:d4:0d:7e:b8:01:a5:5c:61:8c:c7:94:ec:2f:0a:0f:
         f4:0b:5e:02:da:57:b1:d2:9a:6c:e4:c9:98:15:03:e1:d7:c9:
         f2:c5:a2:6d:5f:e1:1b:05:21:00:f0:80:f6:25:60:64:75:9e:
         8b:f2:c0:c7:4d:97:06:0a:99:51:e0:a0:b2:27:4a:3d:80:11:
         96:a6:c5:60:17:8f:96:7e:c5:f2:77:04:ae:f0:fe:0b:0c:2b:
         99:29:8d:77:0a:b6:74:7e:b1:38:a5:64:e5:c4:c1:87:11:7a:
         fd:e9:86:e5:93:72:10:ce:68:64:ac:a9:ea:83:1a:5d:09:09:
         b8:69:c2:ca:f0:6d:63:8d:72:cd:af:bc:d1:a1:17:ce:32:19:
         4f:31:95:4d:eb:0d:e4:50:94:f1:ee:3d:98:47:2d:12:3f:85:
         3a:4b:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----