Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File:                     dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier:          N4riWHRtIz+p257iExMBR7QQeG1pDap1amjWUqgp1AQ=
Subject key identifier:   2D:60:0B:7B:59:07:E4:D5:B4:57:7C:1E:BF:24:DE:37:F1:2E:99:ED
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer:       /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial:       01962E99009A3B468C52563B89E42F42332A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: 1-TOVnm2gd04tI-uLivEABR6Pazo.roa (hash: QVp2c0LkMSwloi3MOMCG1fyuxaPczwJ3tn0nHSxmhjE=)
                          2: HgA_tKLG5N3ASR5gcHl20EupVRE.roa (hash: DRYtmqvkH/s26hespCVF8HpGzgqR1cL88tvUFROmz9s=)
                          3: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: cyECDgx+WrxQ+FzUacgr/Is0iTB1ksI1pWNZyI+fRt8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:00:9a:3b:46:8c:52:56:3b:89:e4:2f:42:33:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=2d600b7b5907e4d5b4577c1ebf24de37f12e99ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:b2:67:62:52:d7:8d:d9:6b:41:69:58:b2:
                    2f:c7:eb:37:33:93:d6:49:39:1d:4b:13:a2:90:a4:
                    d3:41:d0:eb:5c:2c:8f:29:10:3d:da:b6:fe:56:65:
                    1c:2b:00:01:2b:0d:de:d1:f8:52:61:4c:78:5a:cf:
                    41:f7:d0:a5:e1:44:57:ae:73:16:a7:ee:56:53:77:
                    da:ea:70:97:3a:ce:c8:7b:9a:4d:0b:9e:25:b7:90:
                    64:e4:2c:a2:da:b9:23:7d:d1:d1:62:e3:82:8f:5c:
                    f4:62:ef:fa:44:64:d0:40:96:9e:79:c2:fb:7c:1a:
                    44:84:ec:a1:ef:75:f8:c2:6f:ec:49:ad:fd:e6:73:
                    88:84:05:85:56:f8:00:1b:10:9e:9e:9f:bf:3c:1c:
                    3a:76:45:84:66:bf:55:3e:a4:68:42:de:3b:9c:68:
                    ff:d5:13:ca:5b:ed:00:ca:bb:11:92:39:ab:54:50:
                    e5:81:9c:43:dc:c0:25:86:0a:b5:50:25:9d:88:14:
                    ae:a9:77:ba:0b:db:30:f2:20:fe:f3:6c:26:ca:3d:
                    56:94:7c:26:95:e3:9c:ab:e1:46:29:68:10:46:f1:
                    c8:07:be:87:e3:16:2a:78:88:4b:6c:94:1d:85:dd:
                    1e:95:af:f7:bc:b7:36:e0:c8:09:6e:fe:92:a5:70:
                    0e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:60:0B:7B:59:07:E4:D5:B4:57:7C:1E:BF:24:DE:37:F1:2E:99:ED
            X509v3 Authority Key Identifier:
                keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:7d:27:b1:d9:6c:1d:44:45:04:79:4d:30:be:ff:c9:29:b1:
         72:31:5e:3b:f4:a9:13:e6:4b:1a:87:d8:fe:40:0b:22:12:33:
         ae:7b:7f:b7:e9:6c:2d:fb:e5:3a:fb:6e:3b:67:b2:0c:bf:94:
         ed:85:25:4f:d6:bd:46:cf:ef:15:de:3a:4f:21:3f:ac:61:eb:
         23:7a:05:7e:1a:ca:4a:30:ac:a1:9d:86:84:d1:2e:13:e2:84:
         8f:66:7c:7a:5a:bb:af:b0:4f:01:be:8a:58:ef:c7:91:8f:42:
         01:75:19:ef:98:0c:fb:07:d8:e9:a6:66:1a:77:5a:37:26:75:
         4e:fb:f4:ca:f3:e5:27:cd:4c:22:40:b3:36:28:18:89:d1:15:
         39:f6:6b:32:57:a0:32:81:72:3c:3b:b7:19:54:76:b7:4e:7c:
         97:b0:f2:32:a0:98:4a:9e:4b:ce:ca:53:94:5b:b0:4c:4d:71:
         e1:58:cf:84:4a:e4:e0:c9:00:07:19:72:88:2f:91:e7:05:3a:
         bb:41:95:8f:2a:54:37:45:d8:fa:f9:36:ee:7a:7a:9d:95:3e:
         f9:4e:76:26:28:a6:ee:81:f7:c7:25:62:15:30:69:d4:ee:7e:
         c8:55:39:4b:a5:f2:9d:05:eb:4a:1c:36:42:1a:a1:cc:6d:47:
         3d:56:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----