Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File:                     dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier:          ogD2HiToZNQCIRFzPT5Db08ZOmD1wwBJCtJY1iCzsSQ=
Subject key identifier:   2E:A1:D2:23:A9:24:7E:4F:A3:D5:6F:FB:57:27:F5:D9:40:37:7E:6C
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer:       /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial:       01962F74B24DD519F99D0AB8623C7E2CDB14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number:          0CC9
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=)
                          2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: 63p1+hzrWor7EwVkCcesgPY8vtfTEEJLk7Ju1Dx/zoE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b2:4d:d5:19:f9:9d:0a:b8:62:3c:7e:2c:db:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=2ea1d223a9247e4fa3d56ffb5727f5d940377e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:a8:df:6f:0a:f2:d6:77:47:42:24:2c:72:
                    c0:7c:07:bd:50:11:7f:17:51:81:36:87:f3:b0:c9:
                    af:9e:a9:5f:93:f6:c2:4b:f7:d2:63:2c:84:24:3e:
                    9b:c7:14:96:dd:6c:43:c1:df:81:61:00:72:00:f8:
                    ed:80:f9:e2:08:9f:20:a8:37:45:8d:7d:f0:c3:6f:
                    6d:b6:2a:68:4b:1d:6f:95:5d:56:71:67:47:ed:fd:
                    95:13:9c:6a:bb:df:25:af:6a:86:76:85:5a:16:44:
                    d4:9c:05:1f:ec:c3:03:0c:e5:15:e2:02:db:48:19:
                    17:d2:b9:f7:b0:a5:c0:3e:9f:b3:11:88:63:22:d6:
                    71:9e:a9:ca:01:22:1f:ee:30:37:24:28:5d:fb:76:
                    14:2e:34:de:3d:94:2f:d4:a2:38:3e:98:37:85:f8:
                    99:e1:9f:44:92:6b:89:5f:cf:9a:a1:51:5d:15:37:
                    c3:3e:1f:00:7c:62:df:b0:51:45:46:aa:6f:7f:87:
                    c0:f5:e4:e3:a6:a7:37:28:b6:16:d3:30:df:e1:61:
                    b7:9d:3e:09:da:3b:f3:01:43:6b:36:b5:e9:ce:61:
                    de:70:7c:51:0e:b6:70:82:98:89:04:02:91:65:11:
                    90:fb:09:53:3b:71:21:52:5c:b5:a2:70:3d:5b:c0:
                    2e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A1:D2:23:A9:24:7E:4F:A3:D5:6F:FB:57:27:F5:D9:40:37:7E:6C
            X509v3 Authority Key Identifier:
                keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d0:bf:74:76:2c:b6:2e:73:a7:41:5c:03:87:ef:56:2b:83:
         c5:23:9c:4b:47:52:ad:02:a3:08:a8:51:0e:03:f2:2a:ec:ce:
         d8:d3:22:f2:10:10:4b:a5:89:13:85:f1:25:08:dc:64:89:bc:
         33:fa:4e:cd:0b:88:c8:d3:02:20:b0:4a:ad:65:c1:75:58:66:
         ef:71:6e:7d:68:59:16:2a:41:f6:8a:63:c1:f8:df:11:f5:59:
         0d:7d:80:72:d0:ac:e8:73:c9:7c:e6:ba:e2:82:83:97:f1:c1:
         80:fa:f2:6d:cb:cb:3a:24:ab:7d:b6:4f:bd:96:88:82:2a:5d:
         d5:6f:bd:fc:7f:73:f8:2f:91:21:62:77:86:19:dc:ab:91:20:
         db:cf:01:76:ca:6b:be:87:5e:db:a7:bf:c8:4c:71:bc:37:cd:
         1e:83:dc:d5:9c:bf:e4:c9:5c:fe:e5:4e:c9:86:f1:ad:6d:ae:
         e7:a4:ca:d8:8c:34:b4:8f:c6:5f:94:91:33:13:9b:06:6e:17:
         c8:0c:17:15:7c:6b:8c:88:59:72:ae:48:e6:fb:fd:43:fe:d4:
         f1:6d:15:9e:01:6e:a6:bf:5f:6a:d5:8c:57:6d:f2:bf:da:11:
         a2:0c:5f:fd:a7:64:d3:5b:69:bc:57:86:28:2d:91:ce:43:37:
         0d:f2:a5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----