Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
File:                     dEXd7t-9ctMT6e6MzuroQDzDQUY.mft (raw, json)
Hash identifier:          Pk/PMAZi8Mtt/D5jW66sS3GZMX6RHxMXWwp0Hi4dJI4=
Subject key identifier:   D0:D1:4D:F4:6A:BB:DF:CA:39:64:C2:12:D3:7D:B3:30:61:D2:F6:D9
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Certificate issuer:       /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial:       01962F06A584C63C2F3E4CBD8819A345C56E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: 0oXrffU-rSHDpr6TX7IphO7-POk.roa (hash: WbRM1hyDPFlmbx1lM12Y7DHbqSzxb6BFvKIPhKhJrRs=)
                          2: J9QY7yh1pdc4gxwkKHvbRdbJ5Hc.roa (hash: FqRH6xGeGokOrR3y4N/PmTYLTqphdEbs3zKWJDOiox8=)
                          3: RL1wLq44Bf2ikyDTpOd16y5e10g.roa (hash: X39FqUvCzgp1Twm8EXglBTxwVJ18DwP2RWSMPjQDYfw=)
                          4: dEXd7t-9ctMT6e6MzuroQDzDQUY.crl (hash: nP1p9PBifsCfwvzY8QtQifjktoWyEFi2cn5LA87qinA=)
                          5: nb_SgNToJhQlWuIX7tsN5k_y4pE.roa (hash: 4kJjY6lHt/g87dKdPa2zMnovZO8sWINioQls7x+X7vU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a5:84:c6:3c:2f:3e:4c:bd:88:19:a3:45:c5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=d0d14df46abbdfca3964c212d37db33061d2f6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:17:10:47:1e:f5:85:72:12:89:79:73:54:4a:
                    b7:cf:ec:65:ae:ae:d4:80:0a:94:53:ad:7b:13:19:
                    f9:51:d6:d5:7e:08:f2:f7:b6:89:a2:e8:57:c8:05:
                    01:52:36:23:17:d5:6f:9d:a1:f6:28:c0:4d:1a:a6:
                    33:d7:79:fd:6a:2c:ee:04:2b:ec:1c:82:a0:47:6b:
                    6c:6a:e4:34:6b:10:c5:ee:57:ae:f4:c6:a5:e3:29:
                    34:ca:45:44:d2:6c:0f:a9:03:7f:31:12:aa:b3:e3:
                    05:6a:4f:76:30:87:78:b8:96:69:fd:1e:b0:2e:54:
                    5d:0c:4f:7a:92:6c:81:4b:c6:17:77:3f:d1:e9:4c:
                    96:2a:ea:64:8a:5a:d2:37:6a:01:95:e2:f2:b0:ba:
                    e2:3e:9c:ce:14:99:52:a2:88:19:a4:e8:57:01:18:
                    49:c7:4a:41:8e:73:27:1e:9c:e7:c3:f6:c9:05:f2:
                    7d:7b:b1:0b:4d:3e:ef:73:f5:7a:96:e0:15:c4:90:
                    75:22:3d:1d:df:45:bc:ef:99:de:4f:09:f2:9e:7c:
                    ac:69:41:b6:9c:7b:19:c3:55:98:94:76:4a:16:8f:
                    6b:15:2a:5e:1f:75:52:92:ac:f8:dc:e2:fe:b0:90:
                    bf:1e:66:3c:db:63:85:3b:a7:39:9d:20:e1:2c:ae:
                    d7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D1:4D:F4:6A:BB:DF:CA:39:64:C2:12:D3:7D:B3:30:61:D2:F6:D9
            X509v3 Authority Key Identifier:
                keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9f:a6:6f:ef:28:ff:f1:b5:06:96:fa:3e:e9:9c:4d:88:33:
         e7:57:04:93:8a:45:61:f7:ff:87:b9:07:9f:17:24:6a:5b:dd:
         4a:3b:72:b8:ab:59:62:c6:98:44:1b:57:b6:9d:04:4b:90:14:
         aa:9e:9f:c9:2e:41:27:79:6a:9e:ec:96:39:85:d9:c0:87:93:
         b2:e9:6a:5d:4a:4e:41:0a:0d:79:3f:c0:ee:95:83:31:09:59:
         4e:77:9a:c1:ac:a0:0b:bf:65:7c:7c:ba:08:d6:d0:f7:03:d2:
         87:e7:34:72:4c:7c:5b:ea:71:4f:ee:8e:f2:1a:6e:dc:56:7d:
         d7:90:54:80:3a:5d:fc:a6:53:21:6b:20:90:d7:a4:7c:86:df:
         09:66:d8:5e:4c:55:d1:44:27:a9:71:59:23:9d:8e:23:9a:bf:
         ac:4a:a7:32:86:6e:8e:1a:20:ae:65:56:f0:38:14:4c:3b:48:
         92:22:f1:fb:17:c7:de:bb:51:fc:03:6c:44:b1:8e:c0:90:ef:
         de:3d:b2:29:fd:77:51:44:7b:5d:c6:d7:45:a3:91:8d:95:47:
         35:1e:f3:21:10:f4:b9:44:de:bd:58:09:94:34:66:8a:4a:5b:
         ec:46:72:ce:b8:06:8e:43:f8:2f:a5:8a:2f:6c:09:59:95:2a:
         aa:98:1b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----