Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
File:                     dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json)
Hash identifier:          kKtq3Krrmrk3IfIYPpQEQppso4OxnIGzqKmiFXMArII=
Subject key identifier:   F3:FE:F0:F2:23:ED:6F:EC:6E:DE:F2:C9:D9:20:07:0A:30:D1:38:44
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Certificate issuer:       /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial:       01962E2AC7B21C6F2AB911171C9B171E3408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
Manifest number:          0FC5
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: FcY_QKqq9c1xfH6rECvdKY1Kcu8.roa (hash: Ju8mYMjl2LUkVKbzqtiMt1rTH2nwPvl1R7kMAYH3RPc=)
                          2: IeAOnvbZbd0JxF7ran2IKsJXZmY.roa (hash: a22ZpV1PraD9QyqLIF4t6hPyMcIcLe+GxaE9NUf90hg=)
                          3: LS7cmX4hkxBo29n9xBMkazlGUQA.roa (hash: LcZigv6OQHpGmVW5BHzHMIZtI+TTJsjlraR4mOoxOrA=)
                          4: bHETVGvggsNe0a6WvXBELNSVwc4.roa (hash: ghxBEvOC//7xSO8+ytfjs+nd2Bn+dpSbYc1UKClOMyw=)
                          5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: M/ri7FICs3lZj+RlONcuia1Vr1mKItKbccnxFLX/R/0=)
                          6: qJx6x_1Si80i7zgxLEJabwqPPdM.roa (hash: VSNbxo3HViYCFTqzC6xV6bqWlabz9RKcmoeLCtu/aVM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c7:b2:1c:6f:2a:b9:11:17:1c:9b:17:1e:34:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764928a97be955377013d382c62940e950dd212b
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=f3fef0f223ed6fec6edef2c9d920070a30d13844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:dc:60:92:fe:25:2f:13:a6:77:83:ef:c0:
                    7b:3d:f2:fb:f4:2f:2e:33:db:a7:0d:e2:07:19:24:
                    fe:89:dc:1f:86:cb:36:cb:e6:97:fa:a8:2e:41:b6:
                    07:ca:8f:d9:ec:3c:d8:90:76:80:c6:33:11:67:1b:
                    56:ec:f1:ad:1f:86:91:be:45:c1:b2:87:02:19:8f:
                    ca:aa:5e:ae:71:ac:a4:91:c3:2c:70:0c:e2:ef:74:
                    fe:fe:cb:af:c6:fc:fb:5a:26:7e:3a:52:6e:b2:0a:
                    6c:42:13:f3:7a:5d:19:d5:6b:da:1c:04:d2:c1:53:
                    ba:f4:29:01:07:ae:bf:3d:fc:26:bb:c3:5c:6f:76:
                    0d:83:08:47:b9:e9:ae:8e:1b:33:2c:a4:9f:5e:3c:
                    e5:c4:a2:9f:42:e3:0c:22:d3:c5:bb:3a:03:ea:26:
                    77:97:be:2c:e7:d8:17:e3:6e:67:0c:33:14:3e:b4:
                    69:bb:a4:4e:b5:8d:d5:ec:a9:f7:c3:bf:27:a7:c1:
                    77:94:4f:fd:c6:2b:6c:4f:8d:ca:03:88:49:94:88:
                    c8:c7:8c:e2:57:ce:11:23:ba:71:a3:91:c2:91:31:
                    ff:c2:16:dd:89:f8:cf:f9:a1:c3:1f:b7:a4:38:80:
                    f4:65:f5:4c:97:f3:d7:b9:7b:9e:3d:6d:70:c8:4b:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FE:F0:F2:23:ED:6F:EC:6E:DE:F2:C9:D9:20:07:0A:30:D1:38:44
            X509v3 Authority Key Identifier:
                keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:da:d7:b8:99:11:80:4e:5f:cb:09:63:45:a5:47:c1:93:4a:
         af:42:7d:0f:63:de:0b:97:54:9a:e6:50:d1:3e:f4:f3:c8:95:
         2f:ac:b7:66:f9:1a:b5:f3:e6:23:ee:0e:34:8c:de:5a:5c:ef:
         4d:0e:c3:3a:5f:9a:f8:dc:f0:57:01:f0:98:49:e5:8f:ef:63:
         23:39:16:fd:f6:08:7a:38:d7:5a:78:ce:0f:80:2c:35:71:a9:
         82:19:2b:c7:8e:5a:9f:fa:c7:fe:13:37:13:48:09:32:09:44:
         eb:01:97:90:17:13:5a:9a:b9:d9:ab:73:24:78:df:66:0a:d5:
         3b:f9:e0:2b:55:ed:b7:95:bc:e3:fb:d9:cd:30:57:bc:42:e4:
         b7:04:bb:9a:ee:b6:1e:11:ae:dd:bf:f2:8e:e3:80:c4:99:64:
         4b:92:9c:aa:1d:8b:c2:7f:f0:47:dd:8d:09:9a:94:2d:df:3f:
         10:d1:ed:41:f8:92:79:cb:1c:87:6d:b3:f5:fe:93:bd:c9:a4:
         6e:9a:e8:17:4b:9e:1a:f5:f5:95:99:43:19:12:ab:54:b6:5e:
         74:f5:b9:f9:fe:ee:f4:b4:f1:34:0a:80:4e:c8:6a:b0:d2:4c:
         1c:ee:6b:58:67:26:65:cb:4d:34:5e:e7:c1:db:fa:1c:2c:e9:
         36:2a:f6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----