Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File:                     RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier:          ketjx+jriqtLElGEbTRYytK5jVKRjm05gVCiuMdURNk=
Subject key identifier:   CA:66:02:57:69:EB:BE:3A:D3:E6:7B:2D:83:50:9D:9C:27:FB:89:62
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer:       /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial:       01962DF3F038CBBF789F68FAB54AF54FEBC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number:          1001
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: A8fXWSeNOGLpZBq5n912XqwunjQ.roa (hash: AcIcq2rjaaC1zEYSslp0dwr1gScXP+xKrcPZfoqgVE0=)
                          2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: zVKhrVjG8QJYfnK890Z1RMl/FniYhTq7B/4Uxdk3G9Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f0:38:cb:bf:78:9f:68:fa:b5:4a:f5:4f:eb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=ca66025769ebbe3ad3e67b2d83509d9c27fb8962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:b4:53:52:74:7e:eb:d4:3c:fc:11:51:f8:
                    29:50:fc:d5:85:33:7b:a9:11:8e:c2:65:86:69:ec:
                    62:87:49:62:9f:60:da:9a:b5:22:4b:2b:57:96:8c:
                    dc:d7:0b:72:7c:70:6b:93:c5:e8:8f:37:a6:e1:1d:
                    34:05:4d:df:8a:bf:c1:e5:9c:39:3f:cc:52:65:dd:
                    59:2f:4e:be:77:9a:3d:20:ff:50:e6:a6:a1:1b:fa:
                    9e:52:e8:32:91:c6:2f:63:6d:f4:44:07:dc:0d:14:
                    2e:5f:87:68:ac:d1:9e:98:53:79:75:24:54:89:55:
                    67:c0:ce:1b:d1:70:bf:cd:be:98:ad:79:a1:84:fd:
                    f4:96:6c:04:11:20:52:2e:ab:de:47:74:4d:4d:0b:
                    5e:d1:73:ce:9c:ff:5a:45:1e:3c:8f:da:70:f3:bb:
                    17:9a:74:25:f6:42:51:c3:a0:29:e3:49:c1:98:22:
                    01:16:39:d3:c3:2c:08:3b:3c:1b:93:f8:cb:e8:fa:
                    b0:b1:4c:3c:70:cb:6a:37:f6:0a:44:5a:df:8c:5f:
                    ed:e1:c8:54:c8:12:87:2a:d5:17:03:e9:f2:0b:65:
                    c4:bc:44:6c:c9:c4:4b:01:ab:87:aa:f8:2a:fd:1d:
                    be:4e:ab:e4:8b:8b:6a:96:ea:ad:d0:ca:3b:58:0b:
                    5f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:66:02:57:69:EB:BE:3A:D3:E6:7B:2D:83:50:9D:9C:27:FB:89:62
            X509v3 Authority Key Identifier:
                keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ef:df:6a:43:15:58:ed:3d:2e:be:1a:9b:a2:b2:a5:bb:cd:
         c9:94:38:26:ea:4b:91:42:d8:b7:97:a7:22:ba:65:83:b9:90:
         19:2d:8f:c0:eb:b9:37:11:9e:53:ab:79:c6:68:7e:74:70:81:
         27:af:e6:eb:70:05:d9:26:96:13:1b:22:62:cb:33:1f:c2:06:
         ab:43:de:45:64:36:11:fd:5d:0e:30:14:32:08:88:b9:9d:1d:
         8f:ea:74:bd:e9:6b:b5:63:4d:41:6b:97:fa:3d:cc:ed:e1:6d:
         d7:6c:a1:ac:17:06:8f:3f:71:18:54:bf:94:e8:8f:e2:57:4a:
         6b:c2:09:e7:ea:ae:f6:09:58:01:a0:da:65:ce:28:9f:75:d6:
         b2:c7:17:d7:ce:cb:a6:a6:33:70:29:0a:80:80:ff:f7:81:dd:
         29:f5:0c:4d:5a:3f:c3:ba:94:0e:a7:d7:69:93:04:9d:9e:55:
         e9:f9:e8:9c:d8:6b:8c:dc:11:07:26:b2:5b:ed:60:97:98:ee:
         3f:70:d6:13:96:37:b2:93:eb:b9:d3:05:97:af:fd:62:3e:61:
         c3:d7:d7:c7:9b:b4:e4:95:39:12:1e:07:88:01:6f:7c:05:e9:
         00:9c:2a:ad:bd:65:eb:3d:4c:d3:c8:99:4c:02:a1:82:05:b5:
         5b:26:6a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----