Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File:                     dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier:          EhuvdoRTYGRCEcLTV/j1UhBRQH23AkZECI8Uoe4J3Dk=
Subject key identifier:   D1:2C:41:6A:5C:22:3B:00:EC:E9:1D:94:FE:78:AF:40:71:86:FE:0B
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer:       /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial:       01962DF3D3CE66A062959B1A3BB1BBDA9D84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number:          106D
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: JmRIXqWgLbHOS_DUn9tYXP3VwvE.roa (hash: 07OywnLuhNnV2ffg9k1J1SDz7HRBDcbP+ENwBGJ8ZCU=)
                          2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: Zhq1KsbdQm5skki6WV/8oJdLxNuraOpa15L+b1MDtFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d3:ce:66:a0:62:95:9b:1a:3b:b1:bb:da:9d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=d12c416a5c223b00ece91d94fe78af407186fe0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:d8:6d:4f:4d:7e:15:dd:3f:af:b2:38:18:
                    99:a0:99:2f:16:95:c7:bc:6c:cf:04:93:0f:93:7e:
                    0c:4f:c8:09:9b:48:65:35:24:02:34:d7:d7:2a:28:
                    15:37:46:d6:c5:32:c3:67:f1:08:4b:06:5a:45:c9:
                    ad:67:9f:31:da:9f:36:45:c1:32:2e:43:80:63:0a:
                    92:92:8e:75:ed:23:b3:4e:be:e8:42:23:1c:40:9d:
                    c4:32:e0:ca:d5:34:2b:64:c3:55:0b:e4:10:b3:8a:
                    8d:6f:63:f9:a6:d5:d7:14:5f:13:90:48:8a:89:1f:
                    fb:7e:ee:95:2b:65:91:61:f5:df:18:10:c8:65:26:
                    97:1f:31:b0:c8:ff:97:ce:2a:d1:d1:ab:df:3a:c0:
                    d8:38:9e:6e:3f:43:28:de:da:ca:84:6e:af:9f:71:
                    19:7e:f5:82:ee:58:27:ca:5c:11:c9:11:f8:d2:4e:
                    9c:83:4d:fc:cb:31:68:d9:cb:67:3d:c6:ee:15:f7:
                    86:f6:16:b7:f3:e2:04:ee:55:60:96:37:a2:a6:df:
                    7c:fb:06:ca:ea:be:a3:32:00:fd:c7:66:0b:df:cd:
                    2c:f2:a8:ff:24:fa:f6:1e:75:f2:83:52:1f:7f:aa:
                    9c:71:9a:35:26:5e:07:94:09:3f:e5:d1:d7:ed:86:
                    79:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2C:41:6A:5C:22:3B:00:EC:E9:1D:94:FE:78:AF:40:71:86:FE:0B
            X509v3 Authority Key Identifier:
                keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e8:de:f3:49:13:a4:8b:fa:cb:da:e7:89:75:0e:62:3b:40:
         24:49:a6:b6:5d:ca:e2:d7:12:9c:43:f2:da:ff:3e:1f:19:65:
         9c:7d:29:39:1f:9a:40:6b:45:ba:c8:8e:06:34:1c:11:70:40:
         d0:a5:ab:2e:fb:81:03:55:09:0c:a3:5b:b8:e2:40:a0:f8:dd:
         1e:ff:a4:21:89:9e:53:71:59:fb:6d:c5:db:d5:ec:43:6c:5d:
         63:66:77:17:09:96:7f:10:38:d5:f2:f3:a4:be:71:52:79:ac:
         8d:65:f8:3f:13:3b:71:fd:53:b8:68:0f:92:e5:f7:03:36:a7:
         8e:9f:5a:e9:35:9d:0c:2b:8c:13:20:70:79:9a:ba:20:5d:a7:
         a0:35:71:1a:83:cb:80:df:f9:bb:18:c5:3c:92:a8:d3:24:e9:
         08:80:83:59:b3:27:67:a4:c9:49:16:8e:34:f3:5c:a0:fd:0f:
         46:61:93:d1:a0:a9:aa:f3:ea:d0:d2:c1:e1:d3:03:93:a8:3c:
         cc:79:e9:49:44:92:25:b2:cb:e9:79:ae:ec:77:c9:1b:fd:ea:
         c9:ee:fd:91:5a:61:9e:40:8d:61:20:91:09:9c:81:81:8e:9b:
         c6:41:5c:76:d6:10:c5:9c:1f:3f:70:6a:43:62:40:0f:b1:8d:
         96:c6:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----