Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
File:                     dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json)
Hash identifier:          BFT7Z636BT3trl/e1z188T7FCawsechKVSp0esh+Wpg=
Subject key identifier:   D3:DB:E9:44:DA:C2:D4:87:6E:C3:70:96:13:B2:F7:7B:21:3E:5A:46
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Certificate issuer:       /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial:       01962F3DBC2FF7EFF4F21353A89B3C219029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
Manifest number:          122D
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: C50_a2SW4YnUYMJrr5Afw8I0HgI.roa (hash: TNrluYp0TFqbJMcRBRuC5FqOVY7++iFyEZ5HrscnKfo=)
                          2: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: 7UrsSRsRzHXgM/FdmV6OeR2LH/SaLQGortCx0qz9wGk=)
                          3: fP9KcS2nAtlzdr_4yXDxYjDynAI.roa (hash: FSiW33FPGzpnEA+aiBD/xZClQVX484dW+n0rQsuAQfU=)
                          4: w_7-SYv5bHiwdydNGFlWuXsDXgg.roa (hash: KW5l2Z272khkMu93M3YIBl32KtQLTDgrGalDxIjvjZI=)
                          5: xeFduT4t99IjfBUoqwRGqNnzCHM.roa (hash: uYSi4FkXJVOzlTHJNA+ypbvTrMlqYVky1pdQYnRIfBw=)
                          6: yIqAKJ9ffBRI_JVyvb32ZGXo-Dk.roa (hash: Ncm1UuYwpN7GicMBHimmdKJ9awoqjLXc5cMuP8gJQm4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bc:2f:f7:ef:f4:f2:13:53:a8:9b:3c:21:90:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=d3dbe944dac2d4876ec3709613b2f77b213e5a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:dc:1b:66:0b:51:03:48:66:b1:8d:41:af:
                    fc:51:7e:36:97:c8:11:1b:7a:f9:77:5c:30:57:2f:
                    57:27:44:38:cd:6f:2e:86:41:a3:9d:d0:9a:6e:1e:
                    d3:2f:c3:28:9c:d9:d8:02:eb:c2:e9:6f:18:fb:72:
                    f8:23:c2:21:26:cc:ce:a0:7f:74:26:3e:d4:72:63:
                    61:ca:7d:1c:57:1f:dc:e6:ea:1b:7e:7f:5a:24:03:
                    ba:44:84:58:84:39:7c:b8:65:56:7f:70:2a:51:21:
                    a3:51:dc:3d:ac:eb:62:de:06:a2:19:a4:34:66:f6:
                    f4:01:55:34:aa:9c:f4:23:69:a8:03:75:71:0c:44:
                    fa:a5:29:95:50:81:f4:c0:37:b4:7c:55:56:91:8b:
                    d3:7a:b6:ff:72:c9:a4:f7:f1:1f:08:ae:39:16:30:
                    80:e2:78:d6:e4:ba:3f:37:8d:b2:54:53:4b:1e:32:
                    2e:f0:44:be:39:3c:9a:84:d5:3b:ba:37:e9:3a:05:
                    d0:03:8e:01:9e:bd:76:33:cb:2c:f7:2e:6e:7e:6e:
                    6d:86:24:50:4b:38:dc:67:f9:00:48:c2:84:a9:73:
                    a9:59:7f:9c:9b:ea:06:2a:e1:21:fa:a4:77:f1:ee:
                    d4:c8:4a:b4:f8:61:d7:e3:6b:07:da:bf:bd:97:30:
                    10:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DB:E9:44:DA:C2:D4:87:6E:C3:70:96:13:B2:F7:7B:21:3E:5A:46
            X509v3 Authority Key Identifier:
                keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7c:46:61:cb:46:bd:e7:83:f9:3f:04:dc:c8:d2:0b:43:75:
         ec:e5:22:fc:a3:2a:6c:c3:e1:41:27:2a:49:8f:33:dc:e7:62:
         91:f6:b8:5a:f8:8e:bd:6e:f2:35:f6:92:51:7f:d4:02:fb:eb:
         8c:3a:20:d9:64:c7:c2:08:d7:29:a8:17:03:ac:2a:72:fa:9d:
         b2:08:1c:41:7a:f5:b5:96:bc:e8:96:4e:92:99:c2:5e:96:a9:
         15:be:e4:55:9a:fd:ac:47:cb:76:e5:c1:b9:92:42:3e:aa:24:
         b0:4a:69:94:9a:2e:f6:55:33:b8:92:d5:70:6b:91:bb:5d:19:
         d4:c8:56:95:29:10:e5:93:bd:f2:9d:eb:6b:c7:c6:b2:7a:47:
         8f:56:f7:c4:99:63:83:a1:0c:f4:7d:85:a4:83:9f:5b:c6:76:
         ce:50:80:4f:7e:2a:bd:a6:6b:e1:d1:8d:bb:5f:92:7d:77:8e:
         0f:5f:24:cc:80:24:a2:0b:41:23:02:65:8f:ce:83:dc:6f:05:
         e5:7c:ca:16:ce:9c:26:7a:9a:64:07:eb:d5:dd:aa:a2:16:7e:
         fa:ca:bc:5a:b2:11:ad:e6:bc:a6:e7:7b:a4:b7:79:c1:60:37:
         f0:62:d5:ab:19:e3:d7:45:c9:c1:6f:8c:5a:da:89:7d:ce:c8:
         c2:1f:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----