Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
File:                     dixgr01zclhFzq8Le1hed1cGaWU.mft (raw, json)
Hash identifier:          Y9PXjFDBiqEZ4JdxKii62+e9ZS4PDxeW0EoNM9k72fs=
Subject key identifier:   94:CB:63:5E:9F:83:58:5E:28:07:44:3A:FE:53:FE:25:23:36:91:B9
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Certificate issuer:       /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial:       01962DF44B9BB00CD0D0EC0BE104D68E69FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: dixgr01zclhFzq8Le1hed1cGaWU.crl (hash: EjDbnwMVZj8vxDhZwdgepC9egZmHfXQpIk6WZ6hoXtg=)
                          2: dldB0wg3sOKFlgEWz6LNxn-RMtU.roa (hash: A/mZd0VT9lvf5tIKF1PGUACWDIq15nwU2xObWbHt5Q0=)
                          3: fGaPq4YA6maqB6noR_KA3CoM-Rc.roa (hash: INJZ5oK620NZUOOr9nOKGmnHUYB9fAHODj6emd7n2KE=)
                          4: fVcVxVJ7p62rticmypgxz96e8JQ.roa (hash: 0G0V21w8vjbyE9Yv5tuFynWy+aBCDfEtQfkWhN6p7OY=)
                          5: muQqhNcFqaAhliY1Xe6uhTF-w60.roa (hash: 5ol3Dy/oyYKpD5jnMaSN9uea7FQti15q53TRbPs48Kg=)
                          6: z1dSMhrf6i9m8VW8FnaeYoIuN2Y.roa (hash: s3koYJ0MAG3XeNvRc7EhqxMmZm+M8QlbPEJh3Wi8tyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4b:9b:b0:0c:d0:d0:ec:0b:e1:04:d6:8e:69:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=94cb635e9f83585e2807443afe53fe25233691b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:1f:3f:33:05:8b:ce:ff:6f:40:e9:d4:62:
                    b2:e6:ce:36:8c:29:ee:9b:e3:a5:00:e8:af:78:8e:
                    2d:bc:41:11:81:7c:61:e8:96:13:1c:78:56:f0:40:
                    e7:46:18:69:e7:02:e5:36:40:bc:16:c4:71:52:6d:
                    16:37:68:f0:81:02:d4:82:1e:9e:5b:5a:c4:27:82:
                    47:cf:c9:f3:3e:20:d1:58:05:d0:a4:83:d3:3a:db:
                    70:33:7a:b0:8c:62:31:e3:b2:2c:8e:59:40:c2:c4:
                    71:bb:c4:4a:8d:ec:2d:78:ca:21:35:62:bc:ac:3e:
                    8a:d3:4b:61:c1:a8:f1:4e:78:a1:0d:92:c3:84:01:
                    bd:4d:4a:ad:75:66:00:a5:b5:ce:77:c5:9e:b3:86:
                    29:96:84:ed:91:45:f7:c2:07:0f:9b:50:d8:74:7a:
                    78:38:4f:75:d5:bf:d9:3c:65:84:04:c9:ea:3b:57:
                    fc:bb:c9:cb:d9:c3:d4:46:81:3d:72:87:b5:b9:bd:
                    0f:9b:ee:5a:75:5e:8e:cb:b6:58:1a:e0:57:f1:79:
                    c9:9a:c3:f0:93:3f:52:28:61:fa:9d:d0:f5:f1:67:
                    98:e3:fd:a5:8b:78:aa:6f:73:43:7f:20:ef:a4:29:
                    08:ce:1f:82:ac:7c:fc:03:a7:15:11:27:43:85:5c:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CB:63:5E:9F:83:58:5E:28:07:44:3A:FE:53:FE:25:23:36:91:B9
            X509v3 Authority Key Identifier:
                keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:aa:f1:a0:a1:7c:94:74:d8:c8:3c:24:50:0c:a0:55:af:bd:
         61:86:ff:c0:74:8e:4d:6b:a6:2d:5b:84:60:7c:62:12:88:9e:
         5c:de:4c:46:eb:90:b6:68:26:a6:51:26:96:1a:ab:0d:0d:fd:
         49:0d:b2:de:3b:92:bf:00:08:b0:4b:13:ca:4e:97:2f:85:5b:
         a8:02:15:b7:3e:5b:70:30:2f:05:df:3b:a9:b3:3b:76:0b:0d:
         2f:50:72:f3:48:76:77:3c:37:4f:54:77:00:3c:7f:e3:d6:19:
         de:fa:9b:bf:15:da:4c:81:7e:f5:32:d6:78:fa:84:88:34:e4:
         1b:b0:7f:a5:9c:87:aa:07:04:a5:fb:5d:f0:41:fa:5a:4e:b2:
         75:a4:a0:6f:de:9c:6d:43:cd:9f:04:b5:ab:4b:44:15:29:8f:
         66:69:4d:ef:87:4b:bb:d8:f0:2b:38:12:67:83:e6:c9:67:af:
         9d:8d:92:41:87:87:ba:8d:12:b9:4a:64:35:ca:94:9e:0a:26:
         a6:bd:aa:07:db:99:78:c1:d7:5c:89:33:5a:b1:24:54:33:f2:
         c9:7d:86:5e:4b:3f:95:f0:90:df:24:f9:98:42:27:22:d3:fe:
         a4:a2:7f:8e:09:8c:45:b9:0d:d5:38:d7:85:32:de:f5:70:33:
         18:f6:c9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----