Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
File:                     dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json)
Hash identifier:          +epkZOJ1uLIEvymSljHcneT4f+zL/JaJVKweAwYOTug=
Subject key identifier:   45:44:BA:2C:4E:FE:9C:BA:AA:65:AB:B4:95:CB:34:2C:D8:C1:1E:9B
Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
Certificate issuer:       /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Certificate serial:       01962F06F379DFD87F86276ED240AB6AAF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
Manifest number:          113D
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: 6S1fN0Slf3Y95btQEfpy__y_tiw.roa (hash: 5FWi2gr8yiM3yt2DtW3oiI0p1G9KyA1KVfzD3/JWlJI=)
                          2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: R0AEXM6/Wyt6zMByiyAR7SviG0k766rQWhEdXe+XZco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f3:79:df:d8:7f:86:27:6e:d2:40:ab:6a:af:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=4544ba2c4efe9cbaaa65abb495cb342cd8c11e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:36:e1:89:88:9c:16:10:06:da:2e:c6:3f:
                    5c:c9:88:d7:1c:ff:2d:c6:3d:08:be:a2:03:b2:3f:
                    81:16:f4:cd:f9:2c:fb:b1:25:b2:27:79:0d:4a:fb:
                    91:b8:2e:a9:f8:10:27:00:53:21:39:0c:95:a5:c3:
                    84:26:24:b4:54:09:fb:2d:9b:ec:fe:74:34:8a:21:
                    b3:7b:1b:90:23:6c:09:a3:68:c2:15:f8:79:3e:bd:
                    90:df:59:4c:75:96:80:c1:f1:d1:61:ce:fd:2a:c6:
                    22:d5:1d:ff:0f:07:1f:53:80:87:1e:4f:c9:d7:4b:
                    9d:fb:90:13:40:7e:7d:36:a4:a4:1c:c4:b4:75:f3:
                    6b:61:24:dd:09:e1:d0:53:60:2a:d1:64:cb:0e:79:
                    80:f2:04:0f:ac:a1:d7:6a:23:46:b5:80:f5:5c:04:
                    04:ca:7f:f3:bc:2e:d7:a4:9f:50:c1:fc:45:d1:61:
                    a3:28:3b:cc:73:25:2e:f7:01:f5:8e:1f:4a:de:83:
                    92:a0:06:98:e9:f7:b6:86:cc:f5:e5:e8:a8:08:99:
                    e7:f5:aa:6c:e4:98:6b:44:c9:a8:27:1b:83:de:f5:
                    c0:0a:ef:b4:a7:4c:80:d7:38:32:87:33:f0:ca:7e:
                    d1:c3:58:3f:a3:99:05:43:74:ab:9b:49:1b:f8:98:
                    28:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:44:BA:2C:4E:FE:9C:BA:AA:65:AB:B4:95:CB:34:2C:D8:C1:1E:9B
            X509v3 Authority Key Identifier:
                keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:fe:7e:9f:1c:d1:8d:52:10:1a:17:44:02:fb:71:e8:85:14:
         e8:9c:c5:5f:2c:a4:5d:fe:e0:94:0c:a1:52:b0:e0:14:1f:51:
         c4:21:95:34:2f:22:d9:ff:b8:93:d5:f9:30:4a:87:4f:20:3c:
         12:9f:98:ee:c3:db:a8:5d:22:ae:2a:95:48:ee:88:6c:a3:c2:
         c0:87:f2:4e:18:95:96:9a:bc:eb:23:35:7c:3d:28:fb:02:fa:
         91:da:d0:bd:77:0d:d0:55:ea:ae:fa:3a:70:a0:4a:5e:28:5f:
         de:a3:53:1c:3f:a3:00:0c:79:ae:d7:fa:07:80:2c:fd:46:05:
         e5:12:f6:69:f4:c8:71:4d:1a:65:d9:e0:06:27:6a:72:ee:fa:
         82:32:e3:d8:29:0a:ab:e8:e5:84:52:e1:17:05:5c:17:5f:fe:
         74:62:0a:be:24:46:b6:61:71:46:4b:8e:fa:de:f7:5c:80:4c:
         b6:86:5e:a5:4a:82:98:12:6f:64:ec:4c:3c:a4:ae:45:40:c0:
         c6:c8:ee:21:39:75:62:d8:62:c1:77:71:fa:41:1d:f7:1f:42:
         89:2f:6c:7f:cc:61:26:a3:3a:b4:1b:a2:2d:d3:4f:45:d7:d0:
         57:8e:1e:44:c5:72:c8:1b:6d:7a:52:ae:69:a7:82:f7:1b:f3:
         66:a7:2d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----