Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File:                     d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier:          8sALP8Ub2rLZ0yAOvdGDJmZRZ3XuDfBPjP7LB3+ypwA=
Subject key identifier:   E6:D2:50:19:0D:FC:B3:97:A7:3D:63:2F:79:70:6E:7F:C0:F2:38:60
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer:       /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial:       01962F74687E9A90E9088ACCCE89A13F3CE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: 1-Q1JJEM-283CkQsyWnWZizkRRH0.roa (hash: pMkrNzbMgj6JidKdCAH0olpZAepxai3+rIJ34FZ4TEQ=)
                          2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: jMIzVxrElqSUorqLr4DCBYbxVQr6hG1AjMErV0DQKV4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:68:7e:9a:90:e9:08:8a:cc:ce:89:a1:3f:3c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=e6d250190dfcb397a73d632f79706e7fc0f23860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:4f:ea:26:87:72:e7:8f:ad:98:d3:9c:14:
                    2f:bc:8b:a5:1f:3d:96:f3:ed:a7:a3:20:df:2e:5d:
                    32:cb:24:d1:9c:eb:86:74:fc:a9:b9:66:ff:50:81:
                    a4:db:2e:56:fa:ea:5e:67:b0:ff:d6:86:60:0d:13:
                    7b:9c:7f:9e:29:e3:ab:8f:f2:b2:79:47:2c:e7:20:
                    71:76:dd:49:1e:05:c3:56:b8:d9:90:91:77:00:b1:
                    d1:7b:cc:27:ef:67:c0:f9:7e:02:8c:92:79:e1:2e:
                    1f:1d:c1:0b:a6:31:e2:b3:c3:75:67:4c:f5:b6:aa:
                    f7:3a:25:d4:f3:73:a7:71:31:58:df:f8:59:c9:63:
                    fd:e5:01:51:b1:75:9f:5a:be:73:3a:8d:55:ae:7c:
                    fb:2d:a9:61:e0:32:9b:57:76:42:c1:ec:72:08:2f:
                    92:a3:6b:56:35:21:de:9d:ca:77:29:b0:8e:fa:be:
                    d8:73:56:8f:e7:33:c8:a1:c5:36:92:ca:8e:13:ce:
                    6b:43:16:b3:e9:4c:50:e3:fc:c7:15:61:0e:25:17:
                    4f:14:d9:6e:c5:57:be:bd:82:61:33:74:33:8f:f8:
                    5a:8d:c2:67:8a:8a:47:fa:c8:67:4a:6e:ec:ac:9d:
                    ee:f9:36:2a:29:1a:3d:dc:bc:b7:0c:f7:28:22:e8:
                    e5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D2:50:19:0D:FC:B3:97:A7:3D:63:2F:79:70:6E:7F:C0:F2:38:60
            X509v3 Authority Key Identifier:
                keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:cf:00:aa:d7:40:00:39:1a:f0:b0:ae:45:13:d2:18:60:6a:
         99:ac:8e:39:fd:c6:28:10:63:28:3a:40:bf:77:c7:fb:86:68:
         84:3e:9a:ec:d0:7c:54:d5:67:ed:33:d7:3f:70:95:b5:91:7f:
         ce:d8:d7:79:fe:96:1b:ae:3c:23:4a:47:2e:5c:2f:27:b8:aa:
         9a:36:cb:0d:59:76:05:d4:1f:8e:cc:d4:df:d7:7c:26:c4:e8:
         cb:8a:57:95:3a:f2:2d:e1:19:c5:f8:da:67:3e:0c:12:ea:22:
         88:dd:d5:62:78:04:e7:ad:44:13:a7:b2:f8:c2:5d:24:3b:19:
         91:98:d8:d3:b5:3e:67:29:85:cc:c1:0e:73:9f:68:12:8d:70:
         ac:84:75:b6:08:2b:c5:4a:c8:46:2b:9a:88:b0:cc:51:7d:33:
         dd:12:6b:6a:12:d3:8f:40:09:9f:6a:96:1f:70:0f:35:ac:c5:
         bf:a7:75:f3:76:ea:1a:36:48:2b:22:60:1e:53:55:28:60:73:
         aa:4d:23:fc:8f:ca:55:6d:b1:79:57:df:a0:e6:b2:13:84:ce:
         14:35:ad:b4:f8:e0:12:22:17:f8:81:11:d9:65:df:5c:a7:9c:
         41:e0:7c:97:66:86:2a:e0:93:ff:74:bf:2a:dd:a6:f0:9d:04:
         68:3b:3d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----