Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File:                     Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier:          CxE3PiKbSUHkWAZu7IW8WNw1/Ici8K4BflbUIMREWB4=
Subject key identifier:   C9:72:DC:53:98:52:65:B2:0B:AE:E8:B3:72:BD:FB:C8:8F:27:E0:C2
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer:       /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial:       01962DF4004F68D7C962F466996D46D2082F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: 1MeALgxnqUd6O1XwK+T2X0A7EFWi/6A0SL0BKnm/s5Q=)
                          2: v4JI5sgw_p3rivCunMet_POOF2w.roa (hash: HrxRsSTft3bYHQ8KkRnRYehAe6cSQ1K0zkkE09H7dNQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:00:4f:68:d7:c9:62:f4:66:99:6d:46:d2:08:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=c972dc53985265b20baee8b372bdfbc88f27e0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bf:24:5c:4a:02:38:5d:17:8d:85:a0:54:1c:
                    a9:71:d2:e5:2b:a2:bf:10:0c:78:81:7c:e6:df:98:
                    92:99:43:d5:02:3f:bc:80:22:92:9d:22:64:2c:5b:
                    9e:45:e6:20:1a:9f:29:74:63:0f:72:d4:68:ea:db:
                    e6:6b:40:24:d2:c5:65:b4:0e:85:89:fe:f3:d8:f9:
                    9c:23:be:fd:6e:2c:3c:83:b2:3f:20:2a:02:a4:83:
                    18:44:ec:e2:f5:f8:37:7b:f4:6a:e4:35:84:f2:cf:
                    ce:88:56:76:82:7d:bd:67:86:1f:fd:9b:bf:bf:40:
                    9a:61:e4:2b:86:7e:e6:79:6b:08:2f:55:02:84:dd:
                    7d:27:94:dc:d4:4f:72:a9:43:77:74:33:81:23:05:
                    78:ff:d4:78:ff:49:64:05:07:12:08:f2:00:0f:f7:
                    12:28:af:38:e7:d2:76:8e:2a:2b:08:e2:c1:74:77:
                    49:b2:cb:d3:2a:7c:01:6c:e2:73:43:46:21:6f:cf:
                    78:c0:20:d5:b6:d3:10:e2:48:ba:34:ec:75:75:c2:
                    92:88:44:23:cd:7c:1d:46:32:99:60:16:c6:ec:a2:
                    0b:f1:f9:ba:06:67:6b:d4:fb:76:e5:b2:f6:e0:c6:
                    a0:da:28:ba:3a:25:4e:5c:4d:2a:e2:08:f9:4a:a8:
                    01:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:72:DC:53:98:52:65:B2:0B:AE:E8:B3:72:BD:FB:C8:8F:27:E0:C2
            X509v3 Authority Key Identifier:
                keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:96:51:a8:c2:7b:f5:63:ad:49:69:d9:87:a6:2e:d2:cd:4d:
         1f:1b:27:87:7f:c9:fc:55:e7:f4:bc:8d:01:5f:c9:bc:eb:0a:
         2e:27:48:4b:f3:04:27:81:2a:aa:29:65:6a:80:ac:c2:49:80:
         e3:03:6f:85:85:8d:fb:df:09:7f:0e:b8:97:e2:dd:18:43:41:
         a3:4b:3f:7d:69:58:c2:05:f7:97:db:ce:e8:6f:b7:ec:17:64:
         00:15:04:e6:0d:c1:ed:13:eb:cb:bf:f2:63:27:12:fc:7a:b2:
         3b:75:f1:d1:1a:c9:04:7c:d1:3d:62:1d:0b:5b:ef:d4:56:e0:
         94:31:b0:02:94:27:c3:16:ec:93:17:fc:61:19:9a:91:05:df:
         65:16:c8:96:a4:9a:c8:71:38:a5:73:9c:64:b0:31:3a:a2:27:
         5f:60:71:e9:60:ec:c3:10:6a:93:d1:46:24:bb:36:c6:17:49:
         30:11:20:46:97:3f:bd:ff:31:c6:7b:71:8c:02:c4:eb:1d:ab:
         13:a6:55:3f:e2:48:cb:5f:b5:30:51:5e:df:a9:94:7c:50:22:
         30:62:c9:2e:56:43:52:2c:10:06:e2:ff:02:27:c2:bc:29:27:
         fe:35:f7:df:8f:d3:07:cb:c8:06:e0:69:0f:fc:c4:82:fb:ef:
         57:f8:d0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----