Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
File:                     dgynIUsW9YyV1i3vAFkVhtvSPKo.mft (raw, json)
Hash identifier:          HgpR/efGJtyd9tBHM7c8Gn//Z3HbMbPEpPB99HmA0E0=
Subject key identifier:   8B:BA:6B:CB:30:1E:19:FA:5E:48:01:83:BC:9B:38:B3:0D:0A:40:13
Authority key identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
Certificate issuer:       /CN=760ca7214b16f58c95d62def00591586dbd23caa
Certificate serial:       01962E98801B538CA3280094FFDB370CAB88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
Manifest number:          075C
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: dgynIUsW9YyV1i3vAFkVhtvSPKo.crl (hash: J8hGinn5sImQIniCXGl8R7bHwghzIhbbERaEFxmhKAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:80:1b:53:8c:a3:28:00:94:ff:db:37:0c:ab:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=760ca7214b16f58c95d62def00591586dbd23caa
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=8bba6bcb301e19fa5e480183bc9b38b30d0a4013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:4f:ac:d4:37:90:8c:ed:07:3d:0d:6f:00:
                    b3:80:b6:b4:60:f8:c8:50:ad:92:be:f0:f7:51:c9:
                    44:9e:95:d6:2b:ba:ae:1b:c6:ec:74:fd:4f:47:a9:
                    4a:80:7a:19:d6:63:64:a9:fd:54:d8:15:5a:de:14:
                    d2:f9:2a:39:cb:c7:7b:cf:43:bb:dc:1d:dc:8c:f2:
                    95:b2:45:62:9e:83:89:d7:6e:42:89:53:65:1e:1b:
                    57:bb:62:93:6c:cc:3f:ca:4e:a0:29:f6:81:26:2d:
                    0a:71:52:28:d2:d0:d0:ea:3a:f3:e6:fa:76:46:27:
                    ec:78:9d:1e:b1:8c:04:98:dc:4b:8d:96:c1:cf:1c:
                    56:c5:28:3e:ba:72:b2:0a:5a:15:80:2d:c7:34:30:
                    e8:af:65:96:6f:ac:b3:67:50:72:1a:be:82:e8:f9:
                    b6:71:8f:5a:92:c5:cd:01:82:82:e6:62:ba:5e:4b:
                    66:f6:a9:a1:1f:00:9f:0d:70:0d:38:0a:97:02:ad:
                    f5:d5:be:34:06:58:28:57:ff:5b:28:0a:0f:2b:03:
                    e2:9d:5d:0f:78:fd:52:e2:bf:7f:74:41:52:28:14:
                    76:96:1d:40:d8:32:03:96:7d:0b:43:67:95:12:b3:
                    8b:0a:77:ba:6b:90:db:19:9e:29:34:94:5a:4a:d4:
                    18:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BA:6B:CB:30:1E:19:FA:5E:48:01:83:BC:9B:38:B3:0D:0A:40:13
            X509v3 Authority Key Identifier:
                keyid:76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fe:7d:3c:49:c3:d9:56:9e:cc:16:f7:bc:2b:e6:5f:26:95:
         f3:c4:7c:7e:b5:c4:35:00:ca:81:af:20:a4:b0:ef:d2:5d:dc:
         69:1d:4b:30:70:84:6a:08:77:39:54:b8:23:c0:fe:84:09:ac:
         d5:1e:fb:d0:94:7d:de:69:62:1f:34:aa:f5:47:6d:b4:4d:f4:
         64:1a:90:ce:fc:73:fe:8e:5c:84:e5:d6:4a:0e:10:8d:a4:f3:
         8d:f6:d1:38:7d:5f:7f:c4:13:31:df:37:4c:0a:a8:20:25:73:
         b1:55:51:e8:f9:92:a4:c2:55:16:49:e7:18:64:f7:52:d2:ce:
         4d:2a:90:42:8e:12:fb:50:c6:32:3d:b4:c7:4d:d4:25:88:40:
         38:88:73:82:8f:01:13:3f:ca:65:0a:79:02:06:25:51:eb:12:
         14:1d:46:06:fb:cb:62:b1:6a:d1:ca:84:ae:eb:8a:1d:b6:46:
         b0:a9:9f:ca:42:09:da:54:b5:27:18:2b:1a:b2:2d:37:4f:92:
         4f:04:4d:a9:eb:6b:41:c7:f4:cc:3b:ef:d7:41:97:61:f9:f3:
         8e:02:23:44:c8:55:79:21:dd:0b:b0:13:0b:f9:ff:c5:ed:f7:
         14:3d:56:a3:4f:7e:e9:61:5b:70:e1:3a:02:8c:8a:c8:27:66:
         d6:4c:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----