Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
File:                     dggs9uV3xDJnGZEkoogbNzLO9AQ.mft (raw, json)
Hash identifier:          Znqi/PXoXGTKUHR8Gx4s+ifIF4kdULrN068oxehzfDo=
Subject key identifier:   2C:E6:C2:E8:E5:66:7F:B7:D6:A1:96:17:01:3A:C0:C6:60:C7:94:4E
Authority key identifier: 76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
Certificate issuer:       /CN=76082cf6e577c43267199124a2881b3732cef404
Certificate serial:       01962F071590CF8D42A40A96020DFC1969BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: dggs9uV3xDJnGZEkoogbNzLO9AQ.crl (hash: cZCU1yODKSgQCFPUcqTeyarTfl7sBMBveVjPCmNdAcE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:15:90:cf:8d:42:a4:0a:96:02:0d:fc:19:69:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76082cf6e577c43267199124a2881b3732cef404
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=2ce6c2e8e5667fb7d6a19617013ac0c660c7944e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:95:a7:65:04:11:4e:4e:bb:99:5b:a8:8a:
                    83:de:4e:3b:cc:1c:bb:7e:93:23:51:61:8c:67:2d:
                    21:25:b7:a5:e2:ec:80:7d:6c:c7:fa:d5:6c:3f:65:
                    a1:2c:bd:c8:bc:c4:29:d3:64:43:43:97:41:b0:07:
                    8c:f2:06:b7:72:0c:90:e7:99:99:60:4a:e9:64:0e:
                    62:43:93:44:5d:43:1f:9c:7d:dd:99:4c:43:1a:21:
                    e2:ef:b0:cf:cb:ad:42:19:dc:32:ae:59:7b:31:92:
                    e3:52:66:d8:f8:68:be:8e:a0:c3:f6:c9:b2:a0:4e:
                    9d:5b:af:87:91:48:39:52:98:11:62:48:87:bc:dd:
                    15:f4:e3:02:d1:03:8c:07:26:79:ec:79:3e:4f:2b:
                    f2:03:47:b2:fe:6f:1a:ed:58:fe:23:2d:49:34:b0:
                    0f:4b:4d:25:3b:ed:f4:f0:e1:a6:62:74:94:d3:2c:
                    38:ea:76:e2:34:84:5f:47:ee:75:5f:1b:52:6b:f6:
                    30:e1:ef:6f:6d:b9:8c:9b:d6:36:e8:53:ba:21:df:
                    e2:a7:02:be:72:ac:73:c4:d2:81:fb:ae:49:9f:66:
                    64:10:a5:75:76:39:74:9e:18:d7:f6:78:ae:34:02:
                    09:88:7a:54:4b:f8:74:0f:c1:e6:8b:32:46:df:66:
                    56:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E6:C2:E8:E5:66:7F:B7:D6:A1:96:17:01:3A:C0:C6:60:C7:94:4E
            X509v3 Authority Key Identifier:
                keyid:76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:33:5e:4c:75:4e:1f:93:f0:85:0c:11:fc:71:1c:70:70:eb:
         be:ed:0a:33:f8:9d:86:af:ba:45:a9:30:ef:f0:cd:73:df:56:
         12:9e:69:e5:71:b2:c1:ab:bd:09:4f:1e:a0:0b:a4:46:6c:2f:
         5e:30:1b:2f:d4:72:17:4c:ea:6e:e3:15:db:5a:07:fd:4c:16:
         ee:56:b0:15:44:d7:00:e2:1e:48:81:3b:bf:1b:de:ea:da:57:
         2b:0c:be:f0:7b:ef:59:32:14:49:70:17:a7:d9:ab:fd:6e:df:
         28:e8:6d:13:b9:e9:c6:0a:17:16:0b:6f:0f:66:b3:6c:82:77:
         8f:0f:a9:a6:f1:e9:51:28:0e:b9:b2:87:d5:31:12:7b:c3:9b:
         b6:76:df:6c:61:9f:16:ec:77:bb:e5:1d:af:bd:c5:0a:b6:c7:
         25:4c:a5:34:a1:e8:0f:18:db:5a:17:e4:25:35:22:b8:e3:bd:
         09:dd:4c:be:78:70:e0:0b:76:62:b3:c7:b3:38:4a:ff:01:93:
         65:d1:a0:20:d2:21:d6:dc:1b:9b:ac:96:c7:af:c8:fc:a4:a6:
         31:e3:ab:13:cb:18:e8:5a:50:d5:4a:b4:7a:f6:ca:19:c5:ec:
         c2:56:ac:fa:35:ac:b1:25:a0:14:c2:9c:77:76:38:87:36:a8:
         58:06:e7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----