Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
File:                     Dri8RONvrhbTcQL9DVGfKE1mPZA.mft (raw, json)
Hash identifier:          3SeiZvX7X9/tANS/b2B7w8Vgi7RizCtkBxon8lVQFbM=
Subject key identifier:   7D:7B:4F:31:A6:A6:AA:C2:9D:D4:77:04:7F:07:DE:55:4B:D9:92:43
Authority key identifier: 0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90
Certificate issuer:       /CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
Certificate serial:       01962F746D2CEECF9F264C8957536889D474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
Manifest number:          1435
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: Dri8RONvrhbTcQL9DVGfKE1mPZA.crl (hash: YVQ07Sl6Ow4UOmHBBkneq42V+u4Z9U17rKCjLAZYTZo=)
                          2: EnQM4_whnPJeaxWRQxPEz7dH7rY.roa (hash: anAGsxZMEMPM7WeK+BVeddK3oakg7+TLd3wIh7D05ik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6d:2c:ee:cf:9f:26:4c:89:57:53:68:89:d4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=7d7b4f31a6a6aac29dd477047f07de554bd99243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:b8:5c:40:bb:bb:98:72:99:71:da:9c:83:
                    1c:08:32:c6:e0:a8:11:7c:bf:68:a1:bd:bf:bc:d0:
                    32:87:b1:c8:21:d9:c0:90:c2:51:e8:15:88:c9:c8:
                    2f:19:80:9c:d4:51:1f:e0:67:67:4b:89:fa:d2:c7:
                    2a:a5:87:30:fc:54:e6:78:cb:af:2a:2c:32:9d:8f:
                    b7:2c:3a:6a:72:f3:af:ce:9c:da:df:a1:2d:c1:d6:
                    86:73:97:02:45:b2:66:ce:b7:73:e1:bb:34:39:2f:
                    f6:f6:3c:a0:4a:fc:1b:b3:58:02:5f:6d:a5:56:0b:
                    03:0b:36:3f:66:a5:f3:3d:84:5d:87:d6:73:d0:9c:
                    03:79:52:d1:2a:02:3b:42:9e:49:82:58:ac:67:42:
                    76:5c:5e:1d:1a:fc:86:ea:f4:3e:bd:ff:c8:c6:8a:
                    6f:83:c5:0c:e5:56:93:4c:80:b4:c7:5f:d4:56:ee:
                    a8:d3:9b:2c:c6:8a:3e:ec:0c:9d:88:92:4f:38:34:
                    82:c1:41:9b:c5:17:6f:19:02:62:28:40:64:4c:3b:
                    85:73:0e:5c:2e:7b:29:85:89:b8:30:49:81:63:90:
                    92:4c:56:41:ff:f8:e7:d7:3a:bb:d7:db:ea:e7:09:
                    1e:47:56:f3:b8:de:92:ec:2c:e2:d8:05:4a:98:0b:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7B:4F:31:A6:A6:AA:C2:9D:D4:77:04:7F:07:DE:55:4B:D9:92:43
            X509v3 Authority Key Identifier:
                keyid:0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:91:81:d2:ba:bd:53:2b:48:b5:f4:b1:14:a6:45:5a:93:24:
         82:1f:43:dd:d4:00:d6:2b:e8:d8:10:cf:40:99:c4:25:df:b5:
         1d:d6:a1:8b:a4:e7:f8:72:88:f0:ef:18:25:ac:1d:9c:d9:c8:
         60:9b:c0:b5:dc:84:30:ff:b5:7c:66:26:99:4a:8b:fc:3d:a7:
         95:0c:8d:ff:93:8b:8f:37:35:e6:fc:e0:eb:08:ae:ec:00:65:
         4d:ea:31:af:23:07:88:94:62:3f:aa:33:d4:b0:a4:85:ab:67:
         26:9c:fc:c0:93:3f:34:ff:0f:f8:8e:24:c2:92:12:e6:d9:a3:
         50:6a:b9:7c:0a:9c:8c:50:5d:53:53:b2:b8:2d:17:35:f2:20:
         6e:66:2b:3d:9c:a4:4b:ee:a9:48:95:30:93:65:4c:a2:d8:dc:
         ad:8d:38:52:0b:fd:2a:9c:9e:60:ed:77:73:da:ed:78:e0:b8:
         76:2e:cd:14:56:84:d7:cf:ab:11:a2:5c:ed:ad:69:82:60:51:
         70:02:d3:01:c8:e2:75:ad:e3:fc:fc:e0:c0:e3:e0:fa:06:63:
         90:19:06:71:ba:88:61:00:bc:ff:28:fd:8a:c7:8c:72:02:e2:
         61:d1:c8:53:5d:13:1d:81:bf:17:a2:d2:1d:91:32:9b:dd:89:
         15:0b:08:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----