Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
File:                     d8pTqKWgOwVcs_NA_L64XXrUh6g.mft (raw, json)
Hash identifier:          XfmOMguKLlG8jJnu0mGUdSdDA3A3snOpclACso+Ebx8=
Subject key identifier:   07:D4:27:FD:11:B9:89:23:42:ED:33:D8:8D:04:48:9A:8E:07:BE:B3
Authority key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
Certificate issuer:       /CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Certificate serial:       01962F3D83975EC3610575F7315D37CE2B3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
Manifest number:          0914
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: 9zwR0ItkTBE3NBrhNXLgD19Ygh0.roa (hash: 668uqZpsKXpsQP4NHjfvBq7qiMq3YrFIWJSOqGsUVvE=)
                          2: d8pTqKWgOwVcs_NA_L64XXrUh6g.crl (hash: sVC406OCXo6lm7UWs6YeWonuQWex9aERTenSk1Vw9So=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:83:97:5e:c3:61:05:75:f7:31:5d:37:ce:2b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=07d427fd11b9892342ed33d88d04489a8e07beb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:7f:87:00:83:b8:ce:74:4a:7c:05:1b:21:
                    c1:09:ba:16:eb:49:b3:bf:50:71:a3:e4:8b:7e:16:
                    6f:b5:66:6b:a8:b5:bf:bd:4d:bd:5c:e7:d1:8e:b3:
                    55:36:13:d2:f0:14:e7:cf:00:dd:70:c0:36:fa:ff:
                    72:8c:e9:d0:34:ed:d7:8b:70:28:dd:42:0f:7a:9e:
                    95:a3:c4:f4:9f:24:37:5e:06:38:44:65:10:0f:e7:
                    10:6a:0d:9a:ac:df:a9:1a:06:b6:ef:02:ff:3d:39:
                    98:76:f4:f4:33:86:8a:00:c2:53:6e:c0:93:c0:dd:
                    6a:40:ff:da:30:3c:b4:0a:d0:8d:f3:75:0d:ed:54:
                    fe:4d:0a:90:5c:a7:35:50:bd:6b:fa:60:ea:f8:76:
                    06:26:5c:00:ba:1f:08:33:82:53:ff:f1:81:e2:3e:
                    11:74:db:56:a0:29:d2:0b:c4:69:ec:6d:32:bc:2e:
                    3d:65:1d:1f:f4:1b:6c:9d:6c:17:c9:42:0e:d7:f8:
                    df:5e:9e:9e:25:4a:00:4b:10:b5:eb:e1:18:ae:2e:
                    78:da:21:44:a7:de:35:f7:24:39:71:2d:9b:be:c7:
                    80:80:a7:24:67:54:0a:42:a0:5a:b5:20:9c:28:a7:
                    52:91:c6:7e:81:01:ef:d3:fe:be:b6:98:20:b4:81:
                    a9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D4:27:FD:11:B9:89:23:42:ED:33:D8:8D:04:48:9A:8E:07:BE:B3
            X509v3 Authority Key Identifier:
                keyid:77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:74:6f:cd:67:bc:27:6e:28:34:cb:85:be:b0:1a:88:19:31:
         2c:e5:e1:df:41:3a:aa:30:91:08:bc:9e:1e:70:18:c5:7a:68:
         d4:1b:47:23:87:7b:8f:35:ef:38:31:8b:79:d4:b3:06:84:cd:
         9e:70:19:0f:bf:22:cb:37:b0:6d:c0:28:bd:6e:42:5a:ec:d8:
         ac:02:0f:bc:b8:b6:bb:42:fa:08:77:7f:ae:fa:e4:58:01:6f:
         e3:09:a7:dc:07:2d:71:35:b5:31:6a:f8:cb:35:8c:fe:49:94:
         40:9c:fc:2c:e4:c6:46:a0:5a:42:c9:68:ed:5d:11:80:ad:92:
         e7:6c:6c:a5:42:f4:c1:c0:51:1f:3a:89:c7:c8:66:8c:50:45:
         ad:39:3a:c0:1f:89:1b:74:94:9f:12:e2:ee:fa:09:a8:0e:06:
         dc:c5:3a:46:e1:2a:3e:ec:d3:34:34:51:df:eb:a1:41:af:df:
         0d:6e:b7:a7:11:f8:81:ac:f1:4c:a3:00:bb:c5:63:29:dc:8a:
         29:0e:89:51:6a:73:08:f8:d5:95:ee:3e:cf:78:c6:6c:61:e8:
         1e:10:03:35:80:ed:7c:38:f5:df:70:57:d3:d2:63:46:fe:7f:
         18:61:0c:61:04:46:1f:11:0b:ae:7c:03:50:97:24:55:ce:74:
         ff:1e:10:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----