Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
File:                     dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft (raw, json)
Hash identifier:          B3rFqdREHuDz9KL6PxsvM0mW7VxMcHDqcNZlCqgSXmA=
Subject key identifier:   69:9C:20:B2:E8:7E:E0:72:6E:33:61:B7:61:B5:EB:60:E4:14:15:0B
Authority key identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
Certificate issuer:       /CN=769a0ed13591d4b84ca79a8eb577226076651a14
Certificate serial:       01962E9986E2B23C12A0C63E9C67A08A0647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl (hash: uF+G7WPdChC0NTMO7+v1lchvfajzJk7/kaWgDsUA9qU=)
                          2: r2xenfWR41SW-pcJkK2n6k9oW9c.roa (hash: 9h5yss6Wot3H0ZXysamwxUCIRFlANswYmfwPee5G6HI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:86:e2:b2:3c:12:a0:c6:3e:9c:67:a0:8a:06:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769a0ed13591d4b84ca79a8eb577226076651a14
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=699c20b2e87ee0726e3361b761b5eb60e414150b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e3:51:2e:c2:b3:01:a5:8c:30:c7:7e:7e:f8:
                    20:5c:36:c6:26:03:56:d3:2c:b9:54:5c:91:a4:03:
                    6b:43:55:20:8f:e9:ed:30:f8:3d:9f:f8:e2:8c:97:
                    db:7b:71:24:bd:78:0f:4d:63:c3:f2:97:64:82:a6:
                    6b:a5:3a:f1:fe:3f:a6:65:3d:45:51:bc:69:32:65:
                    6d:07:7d:79:78:04:35:56:fa:cf:2d:99:38:96:ed:
                    95:ba:3d:dd:34:bb:e0:70:71:ec:90:ec:ad:b8:49:
                    6f:67:86:97:df:cd:6d:a8:0f:a8:b0:4c:ef:7e:18:
                    55:07:4a:ed:9b:03:0c:43:68:06:ca:64:b1:9e:f0:
                    73:11:3f:e3:39:fe:f3:29:2d:b0:a3:cc:a6:a9:5f:
                    75:bb:0c:3a:c6:70:58:9d:2c:33:ec:5a:d1:50:d0:
                    e2:b0:63:15:08:8f:c5:23:a6:b6:16:42:a0:df:ac:
                    d7:b2:02:77:6c:e4:e2:44:eb:55:b6:43:5e:6e:e6:
                    94:13:3f:37:4f:a4:92:3c:b9:d1:10:8d:ec:57:6f:
                    dd:b6:40:a8:57:6f:c6:b9:f9:1d:cd:f9:98:f0:9c:
                    16:ea:2e:4e:25:30:cd:69:40:f8:01:84:2d:cd:a2:
                    0c:4b:f8:a9:6f:50:1f:ed:78:99:2d:6d:90:6b:78:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9C:20:B2:E8:7E:E0:72:6E:33:61:B7:61:B5:EB:60:E4:14:15:0B
            X509v3 Authority Key Identifier:
                keyid:76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:65:fc:54:0f:ce:56:51:f2:e9:a5:52:2e:ba:b5:1d:3f:0c:
         e3:e9:77:7f:59:01:b8:d3:a6:3d:56:00:b6:23:48:9c:fa:98:
         90:fd:04:0e:b4:24:e0:28:14:62:66:dc:d4:41:14:6a:a5:63:
         ae:f7:b4:f6:fd:02:a7:06:24:ae:ea:9e:dd:ab:aa:59:c6:62:
         17:4d:f1:b8:4b:f0:7f:27:9f:db:df:b1:ca:b4:32:c6:24:8f:
         49:26:6a:d4:b7:07:34:f2:39:b0:47:49:f7:f5:0c:0b:50:12:
         ee:24:29:4a:70:ba:c3:92:3a:9a:be:b8:7f:91:12:4f:81:ae:
         86:67:e5:6f:b5:71:aa:1d:a0:c6:c9:c9:11:31:75:b7:1e:30:
         b7:fb:3b:32:f8:27:e4:7c:4d:e0:f4:57:cb:5a:a3:89:d0:4b:
         96:d1:4e:38:00:ac:d1:59:ae:b9:82:1a:b7:cd:bf:76:05:1e:
         3d:40:7e:01:ce:d4:fb:9a:af:24:60:19:d5:bc:71:25:57:85:
         f2:58:e8:d2:ed:10:62:c9:e1:a5:cb:81:73:00:ff:c0:d4:ac:
         07:f8:eb:bf:f7:e1:93:d4:92:9a:0f:d8:d6:0f:cf:f3:9c:64:
         6e:4d:eb:ea:51:18:6e:e0:b4:64:7d:25:66:5d:d6:b5:4a:13:
         0e:78:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----