Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
File:                     dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json)
Hash identifier:          FUiSygFZCB5IIkswaBDmKtDajBohLDiSiedBOZVIu2g=
Subject key identifier:   39:2F:AB:23:41:9F:D3:DB:5A:B2:D0:A9:6B:03:84:D0:95:BA:2E:E6
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Certificate issuer:       /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial:       01962FAB24FA5661BE6DDF562CB2FEA88B6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
Manifest number:          0CD4
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=)
                          2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=)
                          3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=)
                          4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=)
                          5: a6q6SMppTrXBxB1ybsHve0I84N0.roa (hash: zWAoSAHCDkJxMs7sBHL6WOI4Hvocxl0YCPnrC6K64Fc=)
                          6: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=)
                          7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: LgVoKJBYBgWs3+7+Q7tPyLfBJf+On6RQ7cSrZCDmq7M=)
                          8: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=)
                          9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=)
                          10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:24:fa:56:61:be:6d:df:56:2c:b2:fe:a8:8b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=392fab23419fd3db5ab2d0a96b0384d095ba2ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:ce:a1:1e:7b:1e:e1:c9:cf:f3:63:31:1e:
                    53:ea:8b:58:65:cf:3e:fa:54:51:e7:f8:44:41:59:
                    ae:f4:79:d5:24:dc:e4:40:f3:bd:47:f0:20:f3:ca:
                    41:8f:bc:ba:1a:4c:e0:e6:23:b2:d3:ed:f3:fd:85:
                    bf:fa:58:12:c3:fe:81:50:ad:26:78:d7:c7:cb:7d:
                    72:78:b5:ef:a1:c0:dc:f6:f0:52:5f:22:f5:a3:ee:
                    f0:98:c7:55:36:a7:59:80:98:59:35:bc:b4:93:61:
                    45:3a:c7:a3:5f:ba:34:b4:81:40:89:39:aa:8d:d3:
                    4a:3c:15:63:8a:f8:22:9f:22:ff:d0:ae:2a:f8:0c:
                    23:57:17:d6:2a:59:bb:db:f7:84:6d:9f:f1:35:5e:
                    ca:78:49:57:6f:8e:02:38:31:58:31:99:7c:41:27:
                    0a:e6:ad:d9:e5:a8:49:92:03:b8:77:c8:b5:42:71:
                    90:8f:3a:5a:72:a8:02:70:c3:22:29:e5:d8:7c:c0:
                    bf:22:1b:6a:2f:1f:36:1f:a3:1b:68:af:83:67:04:
                    26:17:6a:34:96:7b:65:6f:ea:73:4f:a6:f3:60:82:
                    c9:fe:b9:aa:73:f5:2a:22:79:a4:8c:d8:dc:33:26:
                    16:ff:b9:7c:bc:a2:03:c5:70:ff:ab:47:f1:c3:bc:
                    c6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2F:AB:23:41:9F:D3:DB:5A:B2:D0:A9:6B:03:84:D0:95:BA:2E:E6
            X509v3 Authority Key Identifier:
                keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:cd:a9:d9:a0:b5:55:b0:31:09:64:c8:d0:37:47:4f:b9:b2:
         cd:65:82:2c:04:1c:a7:4d:1b:1f:3f:2b:ee:e4:ad:f2:bd:67:
         a0:fd:fd:19:60:4c:02:1a:c0:7b:32:08:70:80:b9:5a:2c:84:
         b2:47:d3:1c:2f:b1:36:3a:e4:b6:80:46:3b:e5:87:4b:15:65:
         ff:08:0d:8b:bf:a7:e2:c7:cc:e2:d6:f9:0e:af:6f:db:14:d4:
         d6:d8:e1:0b:c2:8d:aa:d3:1a:ef:5e:cf:89:b9:94:ee:c4:cf:
         0b:e5:cf:76:90:14:67:3b:29:f4:89:c7:39:78:0a:58:f0:43:
         ad:53:3b:a2:25:8a:26:b8:8b:e3:9c:00:6d:c2:09:65:fa:ff:
         92:61:11:22:2e:07:20:e2:df:4d:d4:f6:1c:d0:2b:f4:58:b6:
         62:9b:74:6e:fb:d6:41:35:6e:dc:6e:b5:7b:05:84:9c:3c:cf:
         ed:e5:da:21:ad:ea:7b:f7:00:34:ef:48:6d:36:5f:33:b8:51:
         4e:28:39:c7:ab:e6:4f:06:8d:a7:8b:b3:4d:58:56:61:f1:62:
         b3:5a:29:6a:cb:06:e3:a5:19:26:23:93:82:84:4f:2a:e8:53:
         3d:6e:47:1b:aa:be:bd:bc:e1:c1:1d:4d:b2:6f:43:7e:43:56:
         6a:dd:c9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----