Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
File:                     dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json)
Hash identifier:          f9GhalnVy0WHpFsrsFtt3Aksyveid0USUsASZCw5jN0=
Subject key identifier:   39:60:AB:28:EF:8B:D2:EB:22:25:50:4C:39:C2:B2:54:78:E0:13:26
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       01962FAB864605B3079148188709C751A0F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
Manifest number:          0D2E
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: 49__1Mb6TJOq1lBE39sK0MqptNw.roa (hash: mUbErI4yr16L9KeXw+m7dZ8Q/W3G3H5gFLIPV4hSK+w=)
                          2: 5dh_b1RBPEedGPoH5jPrifwFpjk.roa (hash: FiUlLPDPpSS4NO4ecP0itIgJ8SGlTnSQQXsonHz0nWs=)
                          3: 9JRK7EwR6Rg_h37a1uMH5kLd-FE.roa (hash: seSeyyGJGHJLolRBA5CPiq9g6rFjmIDsp1xxdhmozxQ=)
                          4: D_DMWXe-SCxub8zdYhqregtOfgc.roa (hash: YdgWjYi7meP25wOXjFPlW12dueNlMrHsgbDj5lqUC/U=)
                          5: Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa (hash: Ozf4xst6zqysHFFPHqPk6t9V4R5ZCQl3Sl9vytAN8Vc=)
                          6: LdIbymxNIXROKdCHKP82tGDACeU.roa (hash: kQyQUPIfVzFwJ1Jq+tF49xJ69eCwQR/ZkbVWbjv5vAI=)
                          7: SChPZPj9fTG0LMgBHiZShGaGesk.roa (hash: yiFf6ekegDw5R3MvDUcGOwB0KMvQ6EjjT4IN1JKBmzE=)
                          8: TBnbIzlh-BKbahkJ3E7jSuQuQaY.roa (hash: wANue+0BieEbIbGU0PO+SRCogjBRNdJwQ6IIP6xIdvM=)
                          9: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: YUMYwcJyLaauGEwTw1AH4m3qaOtcFD3fzli/t7nDJZ4=)
                          10: h1ukNoxF9DJUl37AyGab6Erc1Gg.roa (hash: ZJoHXOQXc61UY5FcS2k+Dk9a8RGGZKOXsXXbXlt54JQ=)
                          11: py6UVbnGSCFD9UnKceZ9kgRxFEA.roa (hash: bcsPoMQcphhUQSwMWLfV++Vj4Ps638fSjd2kseADRTg=)
                          12: r1KzO2xl8ICSO7mqxB698PRuZNw.roa (hash: kEobsRqs12mPpmxJMO043I+VfPOn+9gNzHlkxfMSy8w=)
                          13: sji6IRKMxoDbfzOHSYIJXQ44kMU.roa (hash: J7ZKFCKuQD4fFS/N1oH5CYaWP7urJ+aNVO6F4VGrJVY=)
                          14: t5XPQX_yMIvCtklbQrF1q82oTKI.roa (hash: 7XrFoeiXGnOydV2Y9F7H+zsIgDxk1pwJqNALV9hG41A=)
                          15: zn28wDGOw3qBz9OqZJzgWf1QCv0.roa (hash: IFT8wg4FnvyKYbJvM5hiahqsDRtzob17zeYuwyl/UlM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:86:46:05:b3:07:91:48:18:87:09:c7:51:a0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=3960ab28ef8bd2eb2225504c39c2b25478e01326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:76:49:36:26:93:67:81:61:4f:34:ff:ad:
                    a1:16:13:90:3f:95:ed:de:0c:20:71:d1:0a:50:9c:
                    b9:8f:72:61:0a:e4:bd:34:53:af:96:2a:f6:79:9d:
                    b8:da:ef:ee:d5:6a:98:50:f5:25:d2:c5:29:d1:89:
                    92:06:27:0d:f8:c2:4e:03:18:c3:35:8b:16:e5:52:
                    a6:58:5e:bf:20:a5:e0:e4:a8:3c:0e:a7:f5:e4:c7:
                    7a:91:ec:f9:84:1e:c0:4b:0d:45:82:16:2a:75:77:
                    9a:ef:83:f1:e8:09:88:0e:de:52:c2:ef:c2:d3:ac:
                    34:ec:d8:87:75:d1:89:3c:8a:b6:c5:b4:c8:5d:86:
                    b8:d2:b7:f2:2c:fb:44:13:87:d5:9d:6e:a1:8f:f2:
                    9f:a9:5c:15:06:d9:85:ed:ca:94:f9:e8:71:c7:99:
                    38:a0:41:f4:58:71:d3:08:6f:c8:ff:70:ed:4e:0e:
                    a6:da:da:fd:d7:c0:b7:97:f5:62:95:c1:11:23:08:
                    4b:03:51:38:fe:2a:d9:a2:24:27:be:10:14:d3:8e:
                    c5:51:e3:4f:95:64:80:13:80:da:68:ab:1e:80:a2:
                    90:b0:16:ef:5e:82:5e:a0:85:15:c8:29:97:f0:34:
                    c4:dc:f7:bd:ed:65:c3:7e:fb:2a:27:ba:c0:99:48:
                    f2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:60:AB:28:EF:8B:D2:EB:22:25:50:4C:39:C2:B2:54:78:E0:13:26
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:80:bc:ab:9c:90:8a:fe:f5:b4:4b:83:c8:20:63:5e:d3:72:
         cd:95:e8:22:e5:45:12:3b:5d:eb:27:cd:b6:3d:9c:b3:29:7a:
         5f:03:a6:ab:b1:b4:7a:b6:2d:00:f1:09:98:27:a7:db:9c:dd:
         12:42:b6:a7:79:25:6c:d8:58:b2:b5:27:36:de:21:15:c2:20:
         e1:e8:40:2f:eb:bc:01:ca:83:7c:14:29:7f:ca:22:df:fc:9a:
         79:63:d5:9d:fb:c6:1c:34:c9:9d:35:95:e5:dc:1f:bb:c8:f5:
         94:70:6a:da:37:be:55:21:da:d1:2d:8d:72:cd:ae:fa:80:44:
         7d:b4:65:55:13:02:e5:98:f2:66:1e:6e:68:0e:c7:e6:ee:c2:
         e1:29:6b:1c:ed:98:5f:b9:4a:f2:f8:a4:14:c2:1f:87:ef:12:
         3e:fe:e5:8b:12:52:c9:42:f9:60:f2:eb:50:89:ab:1b:0f:49:
         1d:17:97:e1:2e:27:9a:8c:71:eb:22:8f:06:6b:9d:0f:93:f2:
         a6:27:77:00:bf:6d:13:b2:32:77:46:91:04:dc:d5:6c:7f:6d:
         c6:65:d2:d0:d1:43:c6:6b:d9:0b:b6:55:53:b8:11:80:00:74:
         1d:f6:64:d6:92:06:55:f3:92:53:20:eb:36:34:14:ee:38:04:
         01:03:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----