Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
File:                     d6U9LpdwTb6oMaZEAHKQTukacbA.mft (raw, json)
Hash identifier:          mhDUKc1uA8UtLbv391h49FbUS8t2OgS8h8nbZGaikag=
Subject key identifier:   E7:63:BA:87:A0:6C:31:86:66:D4:53:E8:A0:D8:42:83:58:E2:D4:D6
Authority key identifier: 77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
Certificate issuer:       /CN=77a53d2e97704dbea831a6440072904ee91a71b0
Certificate serial:       01962F070108F2B82BF6AEF7BF587701A9B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
Manifest number:          11C7
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: 8YLxHIrqEOpYdEsGGRi0e0TkaqY.roa (hash: ZSlp7CySsW2GetrGVI9UQkRD/3974H3lwSYsXYBiMcM=)
                          2: d6U9LpdwTb6oMaZEAHKQTukacbA.crl (hash: QkdtdWXiSclI/FsJtYpvi0Ac/xtEx83wPvuybaz9qbU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:01:08:f2:b8:2b:f6:ae:f7:bf:58:77:01:a9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a53d2e97704dbea831a6440072904ee91a71b0
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=e763ba87a06c318666d453e8a0d8428358e2d4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:06:ec:99:d5:85:86:d8:c7:b6:c6:14:bf:cf:
                    ff:7d:be:58:3a:cd:e1:b8:a9:31:7d:86:ba:30:81:
                    79:ec:98:48:01:ed:91:1e:21:68:69:03:28:43:dd:
                    6f:30:f6:98:01:65:c9:0e:d7:68:a2:25:7a:cc:f4:
                    ee:1c:0a:62:b4:49:8c:60:1f:39:de:bf:01:1d:b9:
                    dc:89:57:71:23:7f:05:42:47:1f:82:d7:08:be:b6:
                    42:a5:1b:6e:32:47:ba:64:56:1c:d2:d8:e4:ae:48:
                    de:0f:bf:07:46:d1:a8:07:4d:5a:f9:61:2b:99:fe:
                    d4:44:e7:0a:9e:1b:22:1e:ea:c6:1a:36:f6:3f:99:
                    67:c1:b6:d5:7e:cf:19:af:03:23:c5:b9:d4:17:69:
                    e9:90:1c:b9:ad:1b:0e:a7:37:03:a0:79:0e:f1:c0:
                    ea:4c:a2:85:94:7f:1c:ed:65:10:65:0d:a8:35:fa:
                    e6:cb:10:62:f9:9c:e3:0c:3b:05:c0:6d:1b:5d:89:
                    f7:08:d1:66:7d:49:70:09:ca:5d:e9:e1:23:d8:3f:
                    63:ff:7f:14:9e:00:27:20:40:f8:5b:3d:f5:6b:a9:
                    9a:4a:37:42:e0:47:35:f4:5a:b4:eb:41:e8:8c:8f:
                    9d:1a:f4:f8:9e:1d:e9:3b:a9:39:99:24:19:05:29:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:63:BA:87:A0:6C:31:86:66:D4:53:E8:A0:D8:42:83:58:E2:D4:D6
            X509v3 Authority Key Identifier:
                keyid:77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:04:e9:92:bd:cc:25:ed:4f:2d:0b:b2:ed:94:fd:a3:6f:07:
         ad:7b:08:67:3e:1b:a0:88:11:dd:53:c4:e1:28:e0:96:c1:aa:
         5b:80:be:71:0c:d8:23:2e:7a:43:c3:e0:8a:bc:c8:46:22:42:
         26:a2:5d:58:9f:4a:23:be:f7:be:4d:95:f6:53:ab:f3:a7:fa:
         d0:6e:88:76:91:e5:f7:ab:d4:c7:34:a0:d5:2c:c4:54:be:92:
         c8:3d:7f:c9:b9:f5:d9:c6:9e:a3:79:a6:5e:78:28:e9:c3:78:
         e7:b6:41:ff:c6:2c:2d:25:c6:3d:0c:51:c0:7a:c2:9f:9f:37:
         9c:7d:83:50:c9:01:5f:0a:8e:d5:d9:de:c4:bb:67:18:64:59:
         0c:d3:68:0b:c8:53:0a:b1:9d:ed:d6:b2:5a:47:af:20:f2:9f:
         48:c3:76:c2:f2:2b:0e:3f:8f:46:ef:68:4f:18:23:91:de:a5:
         44:e4:6a:e5:19:96:2d:8a:de:f0:e6:00:92:4b:e6:5f:58:36:
         9d:ca:76:06:8a:d9:b1:f3:a0:da:da:5f:d0:a2:d5:99:5d:00:
         6b:47:9e:56:ef:e9:82:28:25:ed:41:e0:42:ae:1c:52:d8:49:
         3a:85:25:99:9d:68:be:94:31:31:cc:b9:ab:81:6e:2d:d2:67:
         a6:82:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----