Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
File:                     ddl3qipMEMe0evKt2WgESH4idKk.mft (raw, json)
Hash identifier:          vwus3iXaf2E7aNseJkLeor+T+Y1rRpEH5aF27SPsoyg=
Subject key identifier:   5D:B2:7B:F8:74:79:58:C3:CD:6F:13:50:59:86:03:2F:97:DE:FD:7B
Authority key identifier: 75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
Certificate issuer:       /CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Certificate serial:       01962F06B67EC43066A971AD9C0440300CCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: d1djO8IkOk-DAQF-B5CVMX1fEOA.roa (hash: ObQ/agHgncZ7LWNprlr11FO8JEBhRFid61XXKnLc8Hc=)
                          2: ddl3qipMEMe0evKt2WgESH4idKk.crl (hash: 56CUdqxBpVMYYBxlQtL5FvcnPZWgVoZUHYAYh3Ni89E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b6:7e:c4:30:66:a9:71:ad:9c:04:40:30:0c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d977aa2a4c10c7b47af2add96804487e2274a9
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=5db27bf8747958c3cd6f13505986032f97defd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a6:60:da:1b:37:67:1b:6e:be:3b:0a:70:4f:
                    9a:7b:86:2e:c5:f7:46:fe:31:fe:ec:1c:28:6a:ac:
                    6e:e7:09:4d:07:c3:54:6a:1f:60:5d:a6:a6:f8:02:
                    7a:46:5b:69:f7:4e:5f:3a:61:f4:29:05:1b:7a:3b:
                    72:6a:97:77:3e:2b:24:d5:6f:bc:10:d5:a9:7f:3e:
                    9f:20:11:81:5d:60:a7:28:a0:c8:62:98:92:5b:42:
                    fc:69:a7:68:6e:b1:45:fb:61:57:b9:89:47:5a:e6:
                    53:9f:f5:23:62:22:3b:25:ba:ce:d0:3b:fd:0e:76:
                    dd:eb:21:f3:00:a8:88:24:ea:44:76:52:0c:64:9b:
                    9e:2c:4c:7d:51:6e:12:5f:b5:75:89:a7:c0:0d:60:
                    0c:b2:f9:56:80:5b:51:e2:f1:3b:07:d5:b3:8f:8d:
                    4e:c3:db:0f:fe:36:bc:29:69:e9:ed:17:b7:cd:10:
                    63:fc:fe:65:96:ae:4a:2d:1c:48:21:26:75:c4:cd:
                    d9:a3:27:1f:fa:cf:f8:af:39:5b:3f:95:47:30:90:
                    40:8f:fd:c1:35:06:15:f1:3b:70:e2:17:a9:0e:15:
                    c9:4f:db:ae:30:60:4a:86:f0:b3:3f:de:38:39:22:
                    63:b2:9d:11:12:50:43:e7:bc:5c:d4:0f:ec:ca:7e:
                    a8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B2:7B:F8:74:79:58:C3:CD:6F:13:50:59:86:03:2F:97:DE:FD:7B
            X509v3 Authority Key Identifier:
                keyid:75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a8:5c:e2:df:82:da:47:64:90:dc:3c:09:f7:a4:48:d5:42:
         8e:14:15:f9:a1:87:7c:e3:01:c2:0c:94:a5:0c:2a:80:63:d0:
         f9:81:2e:5b:58:72:cf:21:6c:b5:2b:3c:e1:c6:eb:8a:91:83:
         11:5b:16:22:cd:55:08:f9:3e:26:83:58:e4:0d:a9:5d:ac:31:
         28:e1:e8:e2:d4:f1:3f:47:54:d2:01:b9:a8:37:af:4e:7c:34:
         3e:ce:81:b8:d9:6e:a8:97:be:65:25:4d:3d:a0:33:1b:66:a4:
         44:15:8c:30:4a:23:d1:ea:6d:0d:e1:cf:28:d7:ce:f5:16:c9:
         31:7d:7d:5f:c2:4d:0d:eb:7c:cf:97:2d:68:2e:4e:a8:eb:0a:
         69:99:80:06:95:b1:8b:8e:ca:78:e5:14:d2:00:90:eb:14:25:
         97:3f:03:dd:63:1a:2e:b8:4b:dc:3e:fe:b0:82:af:b7:59:9d:
         c5:2c:a5:77:9d:ff:27:40:c5:92:7b:1d:f4:67:0f:e7:4b:c9:
         88:91:34:0e:45:3b:b1:cb:15:a8:6b:10:8d:42:18:ef:bc:87:
         6b:f4:31:f5:fa:59:d9:15:96:ee:1d:15:5a:f8:d9:1c:cb:61:
         61:a3:65:84:7d:87:0e:65:95:45:09:06:ed:56:37:dd:08:65:
         40:ad:64:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----