Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File:                     dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier:          UCALg2G1Q5lkRW5YNR2pM9jgYmt+XmtRY+yK7yZfmKE=
Subject key identifier:   D9:A9:4E:3A:DB:E7:91:C0:94:37:70:30:AC:01:7A:91:CF:A4:1C:C1
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer:       /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial:       01962E6184DD3ABE78EE549801EB2E1A80B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: 1-xjgsfI902jNFD0m8-DZHtSyyIE.roa (hash: CsZOcJgPTxy7xIAOVt8lWaYqRyYDTFNbLjFpLqFoAHY=)
                          2: 8znWg7qZ9bI9AKat_qhyP26JqfY.roa (hash: Y2YmIOv3jVMh1xIJmeIZI13RLm2nx7Gd9VO4KN+O0Z4=)
                          3: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: L0rxihumtzqyAM58G3LKexykoZO739LycfvWQGovxpE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:84:dd:3a:be:78:ee:54:98:01:eb:2e:1a:80:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=d9a94e3adbe791c094377030ac017a91cfa41cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:7d:c5:40:f6:bd:01:df:84:fd:74:b5:82:
                    c5:18:09:73:d1:71:93:f7:bc:d8:87:19:9f:9e:85:
                    a9:3b:88:f1:04:67:7c:17:ba:97:3f:96:44:c7:76:
                    3a:a2:65:72:d1:6a:36:31:fa:81:c4:17:69:b6:68:
                    40:66:d9:21:22:96:c8:de:34:3c:f7:0f:03:0c:32:
                    40:b9:59:ed:02:4a:e1:fb:d7:48:a9:5d:eb:ce:c1:
                    6a:12:a1:4c:57:a3:05:f3:06:96:69:29:e3:2a:12:
                    22:ab:24:57:0b:23:0b:17:4f:01:c2:ac:40:1e:b6:
                    50:bc:2b:30:10:93:54:b2:97:6d:9d:43:31:e6:75:
                    fc:d6:0b:5d:3d:d6:84:a6:e5:f9:f5:f6:49:a8:9a:
                    36:fe:a4:55:ab:10:5c:97:a6:8a:5a:e0:c3:8e:e2:
                    02:c5:f5:c3:d4:6d:16:f8:49:72:e2:22:01:88:92:
                    ad:01:3b:44:be:08:8b:89:30:0f:9d:58:0a:0f:f5:
                    58:55:06:47:e1:07:ff:15:c8:0b:68:1e:22:ac:06:
                    aa:13:98:cc:04:14:f1:88:fd:d8:d5:91:f4:90:2f:
                    a4:93:0e:f8:49:43:03:95:1d:2a:33:d4:9c:e9:8f:
                    0c:da:72:19:03:b6:cd:96:52:a4:14:ee:b6:13:61:
                    9e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A9:4E:3A:DB:E7:91:C0:94:37:70:30:AC:01:7A:91:CF:A4:1C:C1
            X509v3 Authority Key Identifier:
                keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:d9:08:d0:7e:59:bd:48:52:2e:2f:48:92:57:67:ce:75:
         22:72:c4:cc:c9:62:35:52:3a:cc:68:c4:2e:c7:57:8e:75:5c:
         d4:f6:c3:e8:09:d6:80:9b:4c:dc:0c:ae:a3:5a:74:8f:65:f0:
         c2:cd:cf:99:95:90:9d:91:48:5f:e5:88:c1:df:6c:48:e4:47:
         e0:8b:5f:f2:ab:9d:5c:d9:bc:a8:39:e8:10:13:f6:ac:f1:29:
         84:f3:c6:2e:34:25:56:c9:a1:64:a5:6a:ba:e8:33:db:38:68:
         40:75:4a:95:2a:5f:7b:74:38:c5:57:f8:4d:9c:c4:78:e1:13:
         44:7e:32:d0:f6:4e:e0:5f:a3:9e:5c:3d:75:46:58:aa:b8:d6:
         4c:05:e7:9c:5d:1d:b3:3d:cc:78:1f:b1:5d:95:e7:13:2d:5d:
         41:eb:4e:19:c4:0c:0d:6c:ca:31:81:a4:53:ba:4c:5f:38:87:
         16:1b:3c:31:b7:78:cd:72:9e:f8:07:49:d3:a3:22:bb:6f:43:
         94:75:ad:ac:f9:45:41:d3:36:fc:8a:0a:37:12:b6:5f:52:8e:
         7f:96:b3:f4:96:2c:2e:1d:a2:3d:0d:5a:47:c6:9e:67:43:ae:
         f1:ca:b3:dc:bb:ef:43:d6:7a:29:d6:e6:7b:c2:f4:83:16:74:
         fa:c6:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----