Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
File:                     d0HROhWph91gAZwCZdLs7EhAlEo.mft (raw, json)
Hash identifier:          DI9xs1CcYNOZqaoztaQW5wxi3c2DiPBS5jXi8z7x7Ag=
Subject key identifier:   4F:2C:B9:72:1A:A6:62:D1:1C:4B:E6:B1:41:27:73:CF:42:27:46:58
Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
Certificate issuer:       /CN=7741d13a15a987dd60019c0265d2ecec4840944a
Certificate serial:       01962F3D6D95FFE5A40520423D4931386C9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
Manifest number:          05FD
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: EKdJIayRjGqpNjC_sXcLD4LpFxg.roa (hash: Q7XyDf/+ZYlwIoQHzzpWgBVzZ1z6oDECbrHcCzM9GG4=)
                          2: _-z4nvaTTyccKXJFwod66iKewX0.roa (hash: B/6vrb0o2kiLAGPMrkOgglOkupcsHoxdqdIe49F5XFQ=)
                          3: d0HROhWph91gAZwCZdLs7EhAlEo.crl (hash: zjrYBu4MNTESBtIbnBGU/cUk7w4xSkX8J2H2NvrYYrc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6d:95:ff:e5:a4:05:20:42:3d:49:31:38:6c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=4f2cb9721aa662d11c4be6b1412773cf42274658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:4f:62:a5:9c:a7:0d:43:66:93:46:ad:fa:
                    03:26:94:10:68:5b:ca:ec:b5:b5:8a:3f:d8:13:58:
                    65:40:93:59:23:02:e3:6a:97:ce:26:f5:45:bb:a2:
                    be:c6:1c:c2:33:8a:e4:f4:ea:21:9d:f3:8e:23:20:
                    4b:6a:b1:5e:04:be:f0:a9:68:f5:00:56:27:5f:67:
                    2a:34:5b:4a:12:86:ca:2f:ba:81:eb:d1:04:a7:e3:
                    5d:04:8a:62:b8:48:47:61:d1:88:a4:3b:a2:7a:e5:
                    f0:b6:fb:62:cd:30:5d:78:7d:4b:a6:79:33:4e:00:
                    84:1d:88:fc:85:b0:8a:0f:c0:ef:3b:5c:23:38:bf:
                    7f:c6:70:cf:a4:2a:79:32:dd:b8:af:5e:b4:b6:94:
                    7e:47:1a:12:1e:ca:e9:9e:ab:61:c6:5d:c5:fd:f8:
                    4d:59:a0:a3:00:9b:c4:0f:9d:4f:10:9e:35:cd:69:
                    9e:a9:72:76:1a:6a:3c:1f:fd:9b:ee:a8:f8:dd:79:
                    cb:50:c2:95:5f:e8:3d:35:57:df:92:53:c9:dc:28:
                    91:87:a8:38:44:3c:b9:6f:a0:1d:21:5f:97:e7:f6:
                    b9:54:11:63:87:10:5f:9a:6e:05:1b:2c:3d:53:19:
                    1c:d3:2b:90:0b:c4:35:5e:c0:11:28:e1:05:80:e5:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2C:B9:72:1A:A6:62:D1:1C:4B:E6:B1:41:27:73:CF:42:27:46:58
            X509v3 Authority Key Identifier:
                keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1c:fa:c2:7e:4b:88:48:07:b9:58:f7:78:9e:fd:ad:8c:51:
         fd:d2:47:ea:1d:5d:de:76:e1:44:67:92:84:89:1c:fe:74:11:
         91:ef:37:a0:83:51:55:99:10:92:5c:45:5c:3e:29:9b:73:76:
         bc:29:c9:19:6c:0f:7d:46:72:c7:95:44:f0:5a:d9:8f:f0:93:
         f5:e2:aa:08:9d:03:be:7b:6e:66:54:4a:be:7c:c3:a9:c7:f1:
         69:2d:67:05:a3:1e:7b:f7:c8:27:09:c8:50:2b:56:88:94:12:
         ee:35:34:3c:7f:45:84:03:65:f7:86:a4:fc:f3:1c:b9:5e:1c:
         d7:61:11:3d:c5:3f:49:78:6a:6d:1b:12:94:cb:41:6d:52:8e:
         c1:fd:a4:fe:c5:6e:df:6f:1a:0c:3e:bf:02:74:52:b1:b2:8c:
         56:88:25:d2:3f:4f:1b:9d:c6:f3:57:79:8e:82:32:c2:87:24:
         64:4b:21:0d:82:32:fb:df:3c:4c:15:85:48:c1:a6:ef:5b:15:
         d5:3c:2f:28:c2:71:13:4d:ea:1f:c3:c2:5b:a1:b5:8f:14:12:
         cf:fd:b5:4c:ca:97:e0:e8:77:f8:8e:98:57:85:b0:53:c9:c1:
         f9:8c:c2:1a:c1:46:e9:08:d5:87:ac:85:1a:83:50:07:04:00:
         f1:71:06:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----