Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File:                     1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier:          xtYxMQbihYm9tqj5WTtH3YGHhaCpCM+7OrW1i9f2Shs=
Subject key identifier:   05:A0:9B:47:FD:3C:2D:28:EA:FC:7A:77:A2:7B:34:BA:58:A8:4E:20
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer:       /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial:       01962E2AEB0FE882EB23637DB3369D8F9667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number:          1237
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: ysPHf0vdqHVJIBtLUJkbkwCU/ZYiLct7K20ZKbyF9DI=)
                          2: HtyuFwumqnKPMziahbUKFS0HWi4.roa (hash: +Ry2R7+vd5notaRsVNHJudJevoZS3UrzytB191N2Lxg=)
                          3: J_BkHOkhHT0AEp-6tEsjYFw6hs0.roa (hash: JAS00/5XA38hVRagh+vY9Urvk5gt+2KkIUuPK6DqVFc=)
                          4: nPGwQCzaguMv6zj3Fc1otRQL65Y.roa (hash: 8JiUrMWy4jhS7VoztMhcDmEoQ8qVt8FQ/VbezbbM4z4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:eb:0f:e8:82:eb:23:63:7d:b3:36:9d:8f:96:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=05a09b47fd3c2d28eafc7a77a27b34ba58a84e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:61:3c:87:cc:ab:03:e9:97:c5:3f:8d:31:ec:
                    72:cb:6b:b6:35:f8:61:49:71:99:f9:80:ee:12:cf:
                    87:69:87:40:71:af:8c:a1:19:a1:09:41:a1:fb:b5:
                    aa:67:70:34:36:00:72:da:0b:69:3d:35:01:a8:db:
                    fe:ac:45:15:fe:f7:f7:24:24:f4:6e:06:34:f7:29:
                    63:9f:f3:a2:92:e7:de:82:d5:23:2b:19:62:69:a8:
                    3b:99:8a:86:e1:53:6a:ab:a3:47:eb:c2:d8:14:24:
                    a7:19:0d:b8:b7:97:c3:40:b8:6c:a2:1d:2c:e4:db:
                    d5:50:ad:8d:0a:1a:62:d2:27:03:d4:ad:cd:bc:28:
                    b0:a2:52:5c:81:2b:5f:ba:7d:f4:de:e9:c2:51:e3:
                    cd:b5:97:12:5d:fc:11:12:8b:40:13:95:76:e7:93:
                    41:f1:69:c0:0e:b8:fc:b6:d3:57:d3:47:ee:11:39:
                    a1:62:13:c8:c6:2a:db:97:ef:32:38:37:76:87:35:
                    8a:54:09:d1:23:50:0c:fc:4e:59:97:0b:27:57:45:
                    f5:67:e6:0f:2f:a0:d4:da:24:19:20:a2:79:46:ab:
                    16:67:7d:0e:42:07:aa:7c:87:2b:76:5e:b9:07:98:
                    62:01:1d:49:d3:bd:d0:5a:3c:ea:a5:a2:51:d2:8c:
                    6a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A0:9B:47:FD:3C:2D:28:EA:FC:7A:77:A2:7B:34:BA:58:A8:4E:20
            X509v3 Authority Key Identifier:
                keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:e2:92:51:e6:30:21:22:38:a6:0a:4d:93:27:72:5c:83:
         e5:2d:54:ae:6f:e5:52:34:60:80:56:d2:7f:9c:1d:1e:03:c5:
         bf:db:27:b2:07:f7:10:77:a4:53:8d:9b:55:63:fa:b2:f4:4d:
         f1:86:89:2b:2f:fb:03:ae:a0:78:10:d1:5c:08:f1:88:b9:0d:
         92:25:d4:c1:e0:43:75:91:0c:a5:ac:d1:d8:42:77:6d:a5:ae:
         6f:c1:74:60:0a:90:b5:13:af:6c:5b:16:b3:62:7e:b1:e6:c2:
         28:ec:ca:4f:f4:78:8e:b0:e7:e2:10:44:df:72:f5:25:0c:f3:
         b3:d0:24:38:44:1d:95:b6:18:11:49:d2:44:86:21:a8:c0:e9:
         38:b9:e3:72:bb:c3:fa:7f:21:ef:73:b5:fe:93:29:ad:22:f4:
         1d:56:d0:7e:fe:7f:23:17:7e:37:3a:75:97:3c:00:fb:f3:45:
         77:f1:27:54:a8:c6:cb:55:1d:5a:cc:99:82:de:02:3e:5b:e9:
         44:c5:28:3b:5d:e2:40:4c:f4:72:92:db:13:5f:8e:15:a0:8b:
         9f:2a:00:23:d4:e0:c9:89:92:b7:bd:ae:a5:2c:3c:95:77:36:
         95:fa:ab:ad:bd:32:d7:76:af:a6:3a:ad:c7:b0:cd:3e:be:7d:
         38:35:20:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----