Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
File:                     dpduc3A5pphnL-lSSt0zfR_1LP0.mft (raw, json)
Hash identifier:          qMyAoIe8jLZSVa+aZh6RpLQC0sbWYvRUuuo4fGVFhWY=
Subject key identifier:   A2:F8:7C:61:9B:97:03:30:53:11:58:58:05:1B:82:1F:44:AF:C6:B9
Authority key identifier: 76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
Certificate issuer:       /CN=76976e737039a698672fe9524add337d1ff52cfd
Certificate serial:       01962ECFB164D8D87B6F79F18C16EDDFBFEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: Rw3BYoyXYSEo6V5vN0qo3508qkM.roa (hash: sKlzeUwowKBMHyUl3VaDBvqX0srdSepcxCjN2qsXkZI=)
                          2: dpduc3A5pphnL-lSSt0zfR_1LP0.crl (hash: bQTB3Sl4zxISw03GvdeVO0Cvx039QGEvu0Bf07qkWjc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b1:64:d8:d8:7b:6f:79:f1:8c:16:ed:df:bf:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76976e737039a698672fe9524add337d1ff52cfd
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=a2f87c619b97033053115858051b821f44afc6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:79:66:c3:c7:70:05:99:b2:cf:03:7b:b7:5b:
                    fb:a1:29:28:d2:67:7e:37:91:d7:a9:0c:f7:32:c4:
                    a3:87:31:b2:40:f7:04:12:9f:be:c2:c4:ce:d2:e5:
                    1e:d3:c0:f2:be:93:cb:d4:65:a7:fb:94:20:4f:be:
                    9a:25:67:96:e2:f6:12:d7:17:52:27:57:1c:c5:f7:
                    68:19:75:cd:c3:6d:a9:ab:d0:89:5e:8c:af:04:31:
                    a1:53:db:34:0b:0f:0c:53:5d:4a:a8:86:85:61:eb:
                    e8:2d:03:48:50:e3:60:0d:bb:29:ee:15:dc:0a:89:
                    e9:43:15:b3:ee:1a:a0:23:83:e4:b2:c0:eb:c3:81:
                    dd:a2:1e:37:b6:4b:e5:ef:fc:51:b8:b3:41:b5:86:
                    5f:59:77:5c:3d:17:4d:de:eb:30:16:73:af:68:00:
                    66:d0:2f:17:08:eb:61:24:36:59:ba:81:71:e9:57:
                    84:e5:9a:3b:5f:92:4c:bb:71:85:91:aa:21:f1:1a:
                    19:ea:ef:b3:64:de:81:d4:d1:f8:79:55:21:9e:7e:
                    cb:93:e6:35:97:4e:b2:37:2d:4e:21:14:a0:43:9b:
                    02:f8:be:78:f6:b6:ec:40:c7:b0:80:be:74:2c:df:
                    dd:90:43:4a:62:45:39:a5:7a:80:a6:bd:6e:33:14:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F8:7C:61:9B:97:03:30:53:11:58:58:05:1B:82:1F:44:AF:C6:B9
            X509v3 Authority Key Identifier:
                keyid:76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:c3:7c:f9:bb:dc:e0:9e:78:e3:70:c3:07:8f:fb:61:11:
         09:48:41:6f:66:7d:9a:fb:e2:83:f6:e3:bb:b2:4d:36:fb:9c:
         e5:97:b0:02:f8:49:a4:82:60:f1:a8:9e:1e:79:a0:5e:81:e4:
         c6:71:d9:25:e0:11:13:fc:9d:a2:c5:7d:15:36:03:b1:9a:a1:
         56:23:60:3d:4a:60:2c:b5:99:f7:99:d7:ec:d0:30:02:89:a8:
         8d:ab:a9:9f:4d:9e:37:2b:c6:46:83:bd:6f:dc:3b:b4:ce:e7:
         57:e6:22:a5:5a:7a:d8:83:0b:a3:8d:86:f8:95:fd:cd:bf:fa:
         5a:c5:80:98:85:3a:dd:4d:ac:5a:ed:52:a3:08:db:73:97:5d:
         f1:a7:64:a2:c2:06:0a:e3:7d:69:c4:12:9a:6a:50:87:22:0a:
         b9:78:1b:20:df:be:f5:e4:f7:cd:92:5c:43:17:5b:16:ee:1e:
         f8:17:0f:7d:f1:3a:0e:ec:af:3a:b9:8c:d3:b9:40:7a:ee:95:
         2f:d0:f1:14:00:95:58:d0:0a:d6:06:7b:15:ee:72:d7:4d:b4:
         fb:b4:0a:ff:ec:01:7b:3a:5b:f0:e1:2d:67:64:ac:5e:e1:a0:
         70:87:88:a7:d3:d9:99:2b:2e:f1:2a:cd:05:90:1c:06:ba:62:
         f4:74:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----