Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
File:                     _cHyXKV_M_2E0mZg6CMFhW1P9U4.mft (raw, json)
Hash identifier:          lnNJz7mjPT4pk1juZv2eheph2lGIhYm7pazsH1Ej5Bo=
Subject key identifier:   DD:67:FA:28:FE:49:CF:61:82:A5:AF:C1:E0:46:45:3D:8D:79:02:DB
Authority key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
Certificate issuer:       /CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Certificate serial:       01962ECF63C5E777C125FEA73D5504A53B97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
Manifest number:          08D2
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: _cHyXKV_M_2E0mZg6CMFhW1P9U4.crl (hash: 9O1Hsty4gaLxwTs7G0yPz6gBZBoqeIU2qrrE4pug7aI=)
                          2: wnJRh-4CUXkPHnOwTdcWOQViBQs.roa (hash: +Cv+ZEGLAnj74mF/vlyspj0D6dG5P9lPHFBp/dI5sxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:63:c5:e7:77:c1:25:fe:a7:3d:55:04:a5:3b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=dd67fa28fe49cf6182a5afc1e046453d8d7902db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:85:94:01:f5:92:d1:3a:0b:da:33:b8:c0:
                    d9:3b:c7:17:7a:c8:b7:b2:aa:26:90:f0:73:8b:10:
                    0c:ca:ef:f9:38:e7:00:e6:ce:35:ee:ac:7e:eb:86:
                    a3:1a:3d:e8:52:39:3c:1e:c8:24:fd:56:ad:f7:0d:
                    15:f4:53:43:51:f4:85:3a:f3:a3:33:78:75:95:e7:
                    9f:a0:fc:93:14:40:d7:a2:95:45:ba:42:ca:55:88:
                    56:ba:3c:0d:9c:64:58:bc:0b:84:e6:ff:8a:5d:66:
                    8f:3c:c9:ae:b9:a5:0e:d9:c8:db:ae:e3:6f:be:e2:
                    65:17:ac:79:8a:b4:2e:70:0a:83:75:f2:c5:65:34:
                    f0:34:6e:a8:c2:94:80:79:0f:ac:f7:f4:af:26:66:
                    86:44:88:fc:26:62:f8:c1:48:24:19:a4:6d:d2:43:
                    b9:8d:52:9b:e8:27:d8:b6:f7:0a:28:be:55:59:28:
                    26:c2:de:d3:b4:41:bb:9d:97:e2:a1:c8:55:79:ed:
                    76:ce:7f:d8:7d:8f:ec:5a:51:7d:16:12:f4:0e:89:
                    1c:03:4f:c9:0a:36:4c:d8:34:d1:9a:d2:db:a6:63:
                    3d:18:b7:22:68:73:ca:aa:eb:8b:95:56:f0:14:46:
                    1d:18:43:f8:06:95:de:fe:92:d4:e6:5c:17:16:31:
                    33:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:67:FA:28:FE:49:CF:61:82:A5:AF:C1:E0:46:45:3D:8D:79:02:DB
            X509v3 Authority Key Identifier:
                keyid:FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:06:c2:cb:91:57:a4:51:37:04:7d:97:17:62:88:89:98:8d:
         df:05:7d:98:a3:66:63:57:f4:e9:6f:71:45:02:6f:37:a4:58:
         16:72:d0:85:90:32:c9:d9:ce:60:f8:c3:97:11:b3:38:27:a8:
         19:e6:8b:bf:e4:88:a0:e8:e8:24:ab:58:ea:98:a4:aa:50:10:
         29:a3:e9:51:15:4e:2a:df:ed:f1:a2:f8:87:48:ef:14:4d:1c:
         2a:f9:95:20:ce:49:71:65:77:3b:09:0e:e5:ef:b0:eb:82:ea:
         28:63:e6:c2:7f:64:e7:1b:24:38:54:97:7d:f9:d5:ff:0b:62:
         b7:83:0a:07:77:5f:9c:b0:eb:16:e3:3c:2e:98:c4:09:b0:3b:
         bb:19:72:ca:2d:07:e9:3c:b9:06:fe:e1:67:d4:bb:77:1a:f6:
         c2:7f:ba:4f:71:71:6d:01:20:b8:00:af:bf:38:71:80:90:b4:
         27:e2:40:bd:da:93:d7:30:c7:7b:40:f1:db:f3:af:38:25:9a:
         2c:a8:ae:b6:03:2d:24:25:14:eb:27:86:26:bc:a7:a7:8a:1b:
         cb:b7:b2:85:a8:4e:27:3c:de:c4:a8:ae:ec:e2:55:11:61:4f:
         c9:63:3b:75:57:79:51:5c:7e:39:27:f2:04:36:56:fb:a7:dd:
         c5:d3:a2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----