Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
File:                     MryjKc1OJWX_DRPoNVpuxMwXlOE.mft (raw, json)
Hash identifier:          btq7YlyYaU+f0FsOmrU1sz+TD1P1ppjoIPGWXySWiA8=
Subject key identifier:   F2:DD:3D:E0:2F:66:A1:1F:05:99:2C:E0:36:E5:8A:CD:F9:5D:8C:36
Authority key identifier: 32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
Certificate issuer:       /CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Certificate serial:       01962E9910D7C14F3D645258DA714F0A07CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
Manifest number:          0B9D
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: EY9B7xHMl-Tku1EaPiHTMSJd4UY.roa (hash: fngf8eQs7Bwu0pM4j6i0WPj4gj/7hDrn6NltGJxnSqw=)
                          2: MryjKc1OJWX_DRPoNVpuxMwXlOE.crl (hash: n4Eoo5/oimChgHKfoRHWxqXIkggJwFVWztPV/dVbAg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:10:d7:c1:4f:3d:64:52:58:da:71:4f:0a:07:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=f2dd3de02f66a11f05992ce036e58acdf95d8c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:5d:e1:d4:6b:cd:00:98:c8:cc:6e:0d:86:
                    0d:a0:8d:60:8d:e0:15:2f:d6:63:3d:82:2c:ea:15:
                    fc:de:4e:d2:78:e4:78:02:c2:59:2d:b9:b6:17:c6:
                    88:40:e5:80:66:58:e6:fb:e5:76:ca:47:58:b0:22:
                    b7:19:21:0a:26:d9:10:20:ed:b7:df:15:7b:46:6c:
                    26:9e:ee:b7:1d:7e:1c:17:dd:ed:1b:ca:3a:90:f5:
                    e7:9b:e2:36:c7:77:37:a9:1d:b1:fd:c8:68:99:eb:
                    24:f2:14:fe:3e:79:61:cb:9d:10:d7:a2:ee:4e:f1:
                    59:fe:9e:99:a1:cf:40:11:1d:92:f0:a1:f6:05:d6:
                    69:6f:7e:5e:ba:28:40:bc:91:5d:e4:25:79:cf:18:
                    6b:eb:ff:8e:08:4e:2e:aa:ac:16:f8:d5:5e:3b:ae:
                    07:39:11:e7:51:17:89:49:88:41:e8:da:77:a0:bb:
                    2d:95:4f:12:6a:ec:35:24:e1:08:ab:bc:6c:48:f7:
                    ee:37:94:8e:43:83:dc:bf:71:2f:a0:ec:a7:61:de:
                    54:72:b2:f2:c5:a7:76:67:9c:ad:62:a4:9f:67:bf:
                    76:bb:b6:0e:28:34:61:fd:29:01:33:22:4f:06:9e:
                    a7:b9:92:a3:bb:f3:15:2d:f5:ed:d8:62:00:8a:eb:
                    59:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DD:3D:E0:2F:66:A1:1F:05:99:2C:E0:36:E5:8A:CD:F9:5D:8C:36
            X509v3 Authority Key Identifier:
                keyid:32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:81:65:89:c2:74:2f:20:ec:9b:21:ae:39:06:d3:18:08:6b:
         ee:cd:8e:ca:4a:0d:91:d9:9c:e5:e1:73:7b:34:85:7c:84:97:
         49:a4:89:73:57:47:e6:67:3c:f3:85:9c:24:d9:96:31:10:53:
         99:3b:82:59:40:43:2b:59:48:4a:04:76:4e:65:79:c6:50:90:
         b7:3c:18:99:61:f5:b7:84:e3:98:f6:7e:28:46:6f:c5:4f:52:
         89:1a:bd:00:fa:68:b7:c6:26:b4:f0:b5:52:2d:a2:f1:77:be:
         f4:b3:5b:26:cc:20:c5:c3:53:7f:e7:a7:5a:66:7e:75:0a:ab:
         67:28:f8:76:c8:11:f6:e1:7f:9b:1f:6a:75:c9:95:1a:86:cb:
         14:07:30:4f:f1:41:13:4c:20:1b:e2:11:47:c0:dc:3a:4a:4a:
         d4:d6:00:b0:eb:dd:b8:73:9a:ff:67:bd:3d:87:9c:db:d5:a2:
         87:0b:d8:9f:f6:6c:9f:05:f1:c2:48:25:91:bc:9f:0e:d9:c9:
         d3:46:22:88:02:fe:62:83:f2:b8:f3:0a:c3:4a:12:43:e4:b9:
         6b:85:f7:8e:91:69:de:bd:f7:cb:26:a8:ea:a6:40:58:eb:fc:
         b7:b1:1a:d9:eb:b7:ea:8b:a1:15:65:ab:89:9c:15:3b:5b:4b:
         d2:09:52:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----