Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
File:                     0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json)
Hash identifier:          dRZU6Nf/gKN9pdv74cvrRpI23BItjJI9gduSpSAwsqA=
Subject key identifier:   B6:7E:5D:99:C8:4E:19:40:16:97:07:33:52:25:7B:CA:C8:1F:88:A8
Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
Certificate issuer:       /CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Certificate serial:       01962F06A6120CFBC97ACBB3C544F20033DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
Manifest number:          074D
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: kTzyht2qQnY7oWDTdPsn+KB5v7krLmm9IgvlArTOcLQ=)
                          2: tkNgBbUczBhXw3Q7nsd4bFDL5Ko.roa (hash: 2ZBjCKDVEUumVBdfZIcGHq5+w377C2/RlriHj7O796c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a6:12:0c:fb:c9:7a:cb:b3:c5:44:f2:00:33:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=b67e5d99c84e19401697073352257bcac81f88a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:12:49:b9:43:e5:76:ff:53:a9:fd:03:86:2a:
                    6e:9a:b7:51:d6:c1:a6:95:d3:66:00:1c:dc:5a:d7:
                    0a:8e:c0:43:00:07:d5:7f:32:18:3c:b4:b6:50:fe:
                    8e:07:c8:9a:73:60:e8:25:ef:72:b5:01:92:50:7c:
                    c0:07:a2:be:fd:f6:8a:5d:f7:1c:f2:43:ae:7e:96:
                    2c:89:8d:e9:9b:01:05:de:42:14:db:cb:51:0f:6f:
                    20:a5:6b:22:9d:e3:46:5d:8d:be:06:79:d0:e2:2e:
                    5f:f5:88:61:6e:26:3a:fe:f6:f0:94:38:da:ba:53:
                    7e:49:65:0e:ea:de:d3:61:5d:37:64:63:fa:37:55:
                    86:e9:6c:df:3c:23:8e:2a:b8:ee:e1:32:57:b9:c7:
                    7f:2b:7e:a5:df:f0:b5:a9:f6:d0:04:8a:83:e0:19:
                    fb:cd:9b:9f:14:a5:76:e4:99:19:a0:f5:1a:ad:89:
                    ed:0e:c7:ec:50:cf:c1:4f:b7:55:9f:23:e4:1c:41:
                    1e:49:0f:0c:4c:24:db:da:63:04:4e:8f:40:3d:e7:
                    f5:4d:a7:a7:23:cf:24:a3:50:c8:ab:1a:e1:17:21:
                    69:67:ef:97:3b:03:3f:78:2c:68:71:17:e0:8a:00:
                    b8:c6:18:d2:43:86:75:3b:38:75:b3:75:56:80:f8:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7E:5D:99:C8:4E:19:40:16:97:07:33:52:25:7B:CA:C8:1F:88:A8
            X509v3 Authority Key Identifier:
                keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1b:58:df:56:fb:2b:fe:4d:80:60:16:38:80:5a:fb:d3:d3:
         b1:53:35:6b:0b:e2:47:2e:0b:85:2a:04:80:46:bb:95:0f:e3:
         d1:b5:f5:b7:a1:6a:72:95:3b:44:d7:04:86:5e:7e:7f:98:27:
         0c:82:f7:ce:38:e2:d4:c6:e0:d4:d7:a4:8a:b5:f6:ae:93:82:
         e1:a1:27:32:1a:70:50:26:90:b5:c0:17:c3:50:d2:e9:c0:1a:
         23:95:87:fe:37:76:90:1c:24:92:d5:e5:12:cd:94:02:a1:03:
         b4:fb:88:d4:d2:b0:91:63:6c:7d:f3:2e:99:d4:15:28:f7:32:
         04:ce:9d:8f:74:b7:1c:bc:bc:6c:12:e5:0e:e1:be:5c:5c:4f:
         f3:1f:1a:85:1e:61:53:ed:61:db:4f:bd:27:24:a7:2e:b6:79:
         48:02:02:77:3e:1e:b1:6e:f0:d8:2e:64:a1:83:d0:f2:69:3a:
         3c:2d:cb:c4:64:75:f4:72:35:23:f8:40:8d:91:0a:6f:1d:f2:
         c5:4a:5a:56:6f:bc:ac:d3:c3:4b:43:16:da:3d:cb:74:26:26:
         2e:f2:32:0c:28:a2:f8:86:3b:c6:e0:ba:b8:78:f6:18:0a:9c:
         9a:65:c3:fb:34:9a:18:b8:b0:fa:fb:2f:a0:a4:73:38:a1:ed:
         20:ea:e9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----