Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
File:                     dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json)
Hash identifier:          I/NSYwGE2YygjCZRhijvGt/KtYm2XCJ8AnSF+KDl/P4=
Subject key identifier:   80:FA:59:4F:E7:63:07:55:A0:72:B4:1A:68:B2:C5:4B:3F:5D:AF:58
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Certificate issuer:       /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial:       01962F747211D37FEF56A7011F55C6614D77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
Manifest number:          0FCA
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: QxFnTb/7JC42ms581J2aHDjh5Oy+G0RN2aBR8dxojeE=)
                          2: xzA5d-E1vgeb4mwlvmzNBazR01w.roa (hash: ajfP28ApDq4Q5y/sbVJlhsT7w2HrFwDNTtJP+3l1w9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:72:11:d3:7f:ef:56:a7:01:1f:55:c6:61:4d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=80fa594fe7630755a072b41a68b2c54b3f5daf58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:d6:87:87:f7:bb:33:76:5d:58:32:02:24:
                    b4:16:72:66:01:dd:31:91:e7:68:03:2c:19:3f:28:
                    0f:4a:f1:dd:be:c5:87:fe:3e:7d:b4:4c:98:8d:60:
                    51:43:ca:ff:36:3c:d7:6f:71:e2:2d:29:d5:e1:cf:
                    1a:7b:0f:0b:70:e1:d1:79:63:49:08:05:31:5b:9a:
                    fb:14:b2:37:5d:84:a3:25:0e:30:38:d0:74:bf:e2:
                    3d:31:8b:3d:08:03:4e:21:d4:ee:8e:af:1f:16:b3:
                    1c:c5:7a:8c:45:d6:af:f3:6f:f8:89:4f:c6:9a:7f:
                    26:a8:2c:7c:d7:15:36:d8:42:f0:89:15:a1:15:ad:
                    a8:50:34:31:bd:1d:be:85:ab:1d:69:98:41:dd:c0:
                    83:ca:8d:3b:9b:61:1f:69:3b:fc:9d:90:23:7a:e4:
                    70:15:4b:8d:6d:75:f3:3c:63:d6:28:1e:ba:3f:05:
                    67:7e:de:87:8f:cd:3f:68:98:6e:b2:ca:94:0d:3c:
                    23:59:50:7b:0b:6e:2f:ff:5a:9b:3f:0f:f7:61:e0:
                    14:16:d0:84:50:cd:01:c6:4e:ca:da:d0:30:de:63:
                    28:f9:70:9f:f8:9d:ca:31:ad:34:37:9f:7d:d0:db:
                    dd:fb:ea:8f:e7:56:f1:13:3c:2d:ef:c2:24:ce:d7:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FA:59:4F:E7:63:07:55:A0:72:B4:1A:68:B2:C5:4B:3F:5D:AF:58
            X509v3 Authority Key Identifier:
                keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:df:8e:45:c2:32:d8:7f:67:93:13:e7:e3:2c:51:1f:16:13:
         82:16:31:66:e4:a6:fc:8d:ef:2a:1c:22:8c:76:d8:14:89:67:
         1f:86:3f:c5:ee:92:63:c2:a4:f7:df:df:11:06:09:8e:ba:30:
         f1:7c:67:84:3f:af:8c:5d:2a:31:71:ae:8f:a8:e6:6f:78:c7:
         b9:78:17:c1:ef:26:74:75:47:cc:d1:0e:46:ef:f9:58:60:d1:
         af:6f:fa:74:83:d4:30:d1:e3:78:2b:51:d5:04:e6:32:18:bc:
         9d:52:a4:40:37:67:b5:f1:a2:73:87:14:3c:a2:a1:26:d5:3d:
         6e:e0:24:5b:aa:e5:b9:55:8f:16:a7:e3:fa:f2:2c:40:35:f7:
         46:86:78:31:4a:86:ca:82:45:b2:02:c5:65:9c:aa:cc:1b:15:
         bb:f9:cb:d3:4f:5f:f5:07:64:0b:c9:ea:25:de:45:9b:33:f6:
         7d:a2:16:57:48:3e:a3:85:5f:d5:b7:d2:e1:ad:44:33:8e:d4:
         5b:f8:a2:32:85:e8:6a:bd:70:eb:4b:18:7c:30:ef:53:48:97:
         1b:50:69:a8:31:38:ce:0c:1a:b3:22:cc:ad:ef:2b:2c:25:d4:
         69:2c:0b:f1:4e:e9:f5:56:c5:81:69:85:17:d1:e2:41:cc:53:
         fe:ab:7f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----