Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
File:                     dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json)
Hash identifier:          z4M6drNLXgADRYhdgN5w2E9Tmfa7lftGKSpx5rrq/8I=
Subject key identifier:   31:0B:D9:75:6F:C5:96:0F:27:2D:79:61:AA:D5:89:6B:E6:0E:51:D6
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Certificate issuer:       /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial:       01962ECF82E51AE03373F5F8E4837CF5FA6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
Manifest number:          0DBB
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: wStcVTTtv43CT8KLIfAi5zLJ6VOU8ndUmoyp+ZJCDKI=)
                          2: j_zwA3lMJMAwX3hbOGDvv36TWxI.roa (hash: jFs+ea1KgMM5z88rmof87A9yhp5WnGLZNGkzRM11ISg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:82:e5:1a:e0:33:73:f5:f8:e4:83:7c:f5:fa:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=310bd9756fc5960f272d7961aad5896be60e51d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e8:26:22:40:71:b3:c9:10:45:ad:4e:6b:a1:
                    ee:04:e3:73:05:15:30:d9:82:0d:dd:15:76:f5:8e:
                    96:41:fa:0c:c1:e9:f9:a3:ba:e3:a8:18:aa:52:4f:
                    9c:17:ae:59:e1:bc:8f:46:f1:25:2e:d0:ce:fe:98:
                    64:97:84:1e:a3:e2:5a:f8:85:04:81:35:ee:a7:1a:
                    60:8a:93:50:76:16:26:e4:4f:38:60:b4:3c:70:4b:
                    b5:99:8d:55:d9:bb:39:c0:a7:ef:c7:ab:2b:6e:cf:
                    2a:f9:e5:e5:0f:4e:1a:ba:dd:e8:0e:96:97:72:af:
                    a1:3c:c1:1b:ca:43:bc:59:21:98:c5:ea:71:12:49:
                    6e:ef:99:99:c5:33:76:28:e8:3c:43:60:f8:96:a9:
                    f7:ea:d6:47:8b:6b:37:f2:d1:4f:3e:60:c1:cd:4a:
                    82:cb:77:7e:5c:ad:8d:40:2d:57:85:9f:a9:83:46:
                    37:ca:bc:40:94:3a:39:46:cf:3f:6f:e2:24:eb:43:
                    92:4c:77:58:0d:31:ea:85:c9:14:9d:b2:58:4e:e7:
                    33:66:6b:9a:0d:31:3b:53:2d:0c:bf:17:78:74:ba:
                    fb:a3:6c:3e:47:0f:44:08:a7:a6:6e:d3:e6:90:ae:
                    66:0c:85:c2:99:1f:12:c5:77:4d:ff:24:fd:3e:a7:
                    60:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0B:D9:75:6F:C5:96:0F:27:2D:79:61:AA:D5:89:6B:E6:0E:51:D6
            X509v3 Authority Key Identifier:
                keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:c8:76:e8:ae:26:db:e1:98:ad:81:63:92:07:8a:53:a2:1d:
         ae:da:d8:2b:e0:6b:7e:d5:c1:a9:44:9c:a2:b1:e1:aa:3e:f2:
         9f:46:37:2f:2f:39:8f:15:51:c0:d7:03:2a:3c:e9:1c:8b:e3:
         90:f7:1d:96:90:83:0f:76:c4:0d:bf:58:58:8c:65:4b:e5:b4:
         8e:2a:5e:17:e5:39:e8:a8:89:55:02:fc:77:11:45:d2:2f:06:
         c1:b5:ec:92:2b:04:43:e8:91:06:80:21:02:8f:92:58:c8:34:
         77:4e:01:3b:4c:da:f0:ef:64:02:6b:bf:bb:f4:30:a2:27:c4:
         b9:88:09:b7:83:30:f5:84:0a:b6:33:7c:d6:6f:5a:f6:43:83:
         ec:ec:3c:95:5c:50:4a:5a:aa:3b:d7:bf:3c:7c:e1:47:bb:a5:
         e3:d1:12:9c:18:20:d7:ba:45:5e:e8:40:5f:16:cc:9f:bc:7d:
         22:8d:6f:04:de:6e:c0:7d:54:ef:80:c3:02:1d:9d:9d:b4:1c:
         23:a3:f7:74:a8:47:43:98:cb:97:a4:d1:06:a5:c2:5b:0d:9f:
         6d:30:66:07:f6:00:f2:d0:05:ab:e2:00:4d:d7:35:63:a2:a5:
         b5:28:06:a7:d8:5c:7a:c4:a4:60:01:71:83:62:f0:c4:5f:47:
         00:de:f7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----