Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File:                     dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier:          /V933ZU48gVlW0J4e+54tTfNdgSD1CQiP1vRs7ZYJ8E=
Subject key identifier:   83:8B:4D:DC:77:37:80:09:51:FA:A8:C7:8F:88:E4:8B:3C:E4:78:EF
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer:       /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial:       01962F071165584E1D70849A1A4FE841FB08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: YRA/XhjTXObrBJyeELBAPR6G635BDCGCb+idDp3rj0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:11:65:58:4e:1d:70:84:9a:1a:4f:e8:41:fb:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=838b4ddc7737800951faa8c78f88e48b3ce478ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:63:f5:c6:80:00:4f:e6:69:69:10:c6:28:
                    04:8a:45:32:7b:ab:f5:94:ba:5c:7f:49:d7:ca:12:
                    a0:d4:3e:0f:1b:c9:ae:06:e1:df:d3:b5:be:0d:3c:
                    43:84:5f:a6:c6:15:c1:06:fc:00:2d:5a:bd:6c:90:
                    66:f4:3a:e4:e6:3e:85:c5:cb:92:36:40:1c:6b:c2:
                    65:d1:83:65:51:7b:f9:a7:46:a9:3d:4b:3e:02:ea:
                    61:b8:56:1c:9d:7e:7a:0c:57:50:68:71:eb:6b:e8:
                    ba:6b:54:01:f5:84:28:36:ca:27:2a:1d:f7:d1:ad:
                    97:ec:d4:07:e4:e8:a2:2e:c0:c1:e3:71:79:1f:91:
                    18:a8:c4:4f:0c:38:98:84:88:db:63:13:c2:21:04:
                    0a:dc:86:97:f0:94:7c:30:c0:e7:28:50:89:91:75:
                    29:06:16:4e:99:36:cc:14:1e:56:57:a6:4e:d9:5c:
                    42:b5:9c:0b:8e:84:24:f8:b1:d4:d8:b3:97:20:5d:
                    b6:f6:27:f0:6f:f0:56:d1:52:96:aa:81:0f:2d:63:
                    3f:ef:24:ca:db:93:b0:26:f6:97:66:c0:9a:d2:f0:
                    af:0a:ca:9e:54:86:82:6c:14:7b:fe:97:37:49:41:
                    91:ec:76:57:ca:ae:c2:a2:e7:e3:80:d6:1c:b2:d8:
                    00:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8B:4D:DC:77:37:80:09:51:FA:A8:C7:8F:88:E4:8B:3C:E4:78:EF
            X509v3 Authority Key Identifier:
                keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:dd:94:62:33:f3:04:d3:21:aa:74:f6:d5:fb:2a:f6:12:b7:
         ad:9b:89:28:54:b2:2b:b8:c3:b1:b4:a5:09:78:e7:87:b4:75:
         6b:ec:b6:3a:44:63:71:25:1e:f2:05:98:2c:d3:5c:f4:7c:47:
         f2:55:d1:b6:15:46:2e:65:b8:47:0d:f1:c1:8d:4a:39:3d:80:
         6b:81:df:fb:26:68:5d:c3:67:e7:d9:b4:4f:a0:3f:3c:d9:d9:
         cc:6b:3f:e6:40:fb:5a:45:e9:6c:07:4a:55:95:92:4c:86:b5:
         ca:db:92:43:1c:fc:e2:d9:b0:ac:e4:61:93:6c:ee:d4:2b:fc:
         79:77:51:46:d8:48:ad:84:ce:fb:92:bc:c3:8a:43:91:71:e7:
         8a:05:22:62:b8:8e:6f:37:9d:72:dd:d1:f7:ae:00:5f:b6:46:
         7e:2a:f0:34:16:85:fb:c6:26:08:2c:b2:93:f3:f0:43:b4:8d:
         59:d2:e7:fa:de:98:76:0d:06:37:7a:a5:61:46:b9:78:ef:6b:
         67:6c:d2:55:53:56:dc:aa:53:84:86:9d:2f:de:fc:45:99:5a:
         f4:f4:e7:e6:7a:68:89:04:2a:31:26:fc:58:38:da:b7:b9:98:
         56:29:bc:e1:cd:0f:ab:89:d9:5e:4c:5d:e2:56:bd:13:07:41:
         fc:f7:2e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----