Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
File:                     rdbXV2zSgkXGefmvNXXANbiiLJ4.mft (raw, json)
Hash identifier:          x/1usJUA1Jp4kXLRGoagHFV1+G5zVfpoOgU/ZWbRB8k=
Subject key identifier:   73:B9:2E:E3:EB:6E:A1:D0:8B:04:6B:3B:03:B9:95:82:BD:97:70:07
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Certificate issuer:       /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial:       01962E6184AD2933426C7CC77364CCCBE58A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: l7t2iScMgw_Vqqdey3zojLvCFAo.roa (hash: GElb5qawLmwlWjlnnhanimj+W7edI5MOyhH1UzXbSog=)
                          2: rdbXV2zSgkXGefmvNXXANbiiLJ4.crl (hash: Gyj5/nEkDMp9NytI9bZ12C6u51HHjX8VyeAr/UHSQxA=)
                          3: svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa (hash: hDRuttNUPmkUswD/PN5v7bjO2pBa9L/1t8q5gG/jwI0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:84:ad:29:33:42:6c:7c:c7:73:64:cc:cb:e5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=73b92ee3eb6ea1d08b046b3b03b99582bd977007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:25:07:74:7a:fd:70:52:6a:79:33:9f:b9:
                    2a:13:a1:eb:07:ec:a6:88:ac:07:1c:6d:58:38:a1:
                    5e:25:0a:06:21:6d:42:a2:3f:58:96:e1:84:ff:c5:
                    dd:20:cb:a5:53:f9:e0:be:f8:9f:99:ae:16:2d:e6:
                    22:3f:ae:fd:f2:19:6d:d6:75:60:f1:35:79:7a:d4:
                    6d:ef:10:10:ab:28:d3:ec:17:77:89:02:41:59:00:
                    cb:5d:b3:33:49:82:6d:62:ef:80:07:62:89:0c:d7:
                    1d:70:10:6a:ce:92:8b:5d:16:76:76:2a:07:72:0a:
                    95:58:94:61:d4:9c:43:4c:68:4d:05:4e:5b:97:77:
                    21:57:0f:36:42:68:cf:b9:d6:94:15:f5:0f:9d:3c:
                    6d:84:57:49:3e:45:83:a2:87:99:7e:bb:e3:1f:4e:
                    a0:9b:fc:e6:16:95:05:b0:6c:fa:f2:66:f3:d9:3f:
                    a4:cd:78:92:ec:c3:9a:8a:66:bd:dc:f0:4e:c2:fd:
                    13:d3:59:fe:50:4c:1b:23:e3:85:25:8d:5b:0a:b5:
                    d8:7b:16:c5:72:a3:e0:ce:1d:33:a0:ea:03:27:6c:
                    95:b5:0d:54:6d:40:d5:7b:c9:da:ea:48:65:22:e9:
                    cc:33:ec:86:9d:31:ec:4a:11:ec:d0:9b:52:59:68:
                    ff:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B9:2E:E3:EB:6E:A1:D0:8B:04:6B:3B:03:B9:95:82:BD:97:70:07
            X509v3 Authority Key Identifier:
                keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:36:63:8c:61:92:10:34:30:98:fe:b7:c0:42:92:ca:78:d6:
         c6:20:8d:3f:d0:9c:34:b9:ee:b7:f4:91:f8:56:be:5b:4d:38:
         82:42:6f:60:fd:33:4d:ce:96:c6:43:a6:f7:65:7b:4a:03:04:
         12:af:58:34:f3:ed:61:d0:61:a7:21:57:bd:c6:e7:c5:99:0e:
         d1:72:bc:96:ed:a2:0e:12:72:45:94:59:9f:bf:54:cc:3b:5d:
         21:7f:ad:c8:33:fa:14:66:c1:b9:b8:db:ee:0d:a4:28:0a:ec:
         0b:8c:80:e8:75:0c:74:68:3b:73:04:e3:6b:dd:ec:2c:52:a6:
         82:22:ce:d7:72:0c:d0:56:b3:44:89:18:2b:72:eb:08:f0:af:
         88:2c:45:a9:4f:e6:15:7f:ea:17:41:9c:8c:aa:2b:e5:d6:59:
         24:01:c4:37:6f:2f:3f:60:c2:3e:8d:4f:87:4e:a7:d2:d3:ce:
         01:32:05:f1:a9:36:fa:e3:c5:4a:02:84:27:94:1d:7b:d1:4a:
         f9:e6:ac:50:01:59:20:98:9e:a2:e4:89:85:18:83:db:83:07:
         e3:59:a5:66:fb:07:75:d2:5d:4f:c1:e3:97:ef:55:c0:6d:ce:
         c1:46:c3:97:94:2c:d2:d2:a1:10:de:68:a7:a4:29:be:93:b3:
         c4:7a:86:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----