Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
File:                     rdJhytDf8tm7L4x60Nsm7Vcw090.mft (raw, json)
Hash identifier:          jv7GQORG73Ubd5sJzbEepfxCdX91ndV89XhUMEtFGIo=
Subject key identifier:   B4:FD:10:FB:85:C1:F4:4A:B6:90:E3:42:D8:8C:7F:01:04:0A:C4:DD
Authority key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Certificate issuer:       /CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Certificate serial:       01962FAB4ADD337B398C3A1A0F8323162E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
Manifest number:          0BBC
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: rdJhytDf8tm7L4x60Nsm7Vcw090.crl (hash: tgw+Qk59tnA/kV9rhaMz5FewG+toUOt4oAAF9U/21kE=)
                          2: tNraF_vYfkVNYT3rk3dbIhzsa14.roa (hash: Cyq1XU96xKn0Vjeuoq5f1b6ik1hGAwtTzIf0Tu199FY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4a:dd:33:7b:39:8c:3a:1a:0f:83:23:16:2e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=b4fd10fb85c1f44ab690e342d88c7f01040ac4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:7e:09:14:23:63:37:f8:ec:c8:5a:46:80:
                    af:c0:66:e8:2c:86:76:71:1d:40:40:93:40:0c:ca:
                    48:1e:00:6c:23:14:6a:a0:dc:ec:7f:3c:1d:bd:b7:
                    8c:be:56:c4:59:b9:c3:fa:59:51:f2:7c:46:1e:7e:
                    b9:c4:17:37:c0:4e:97:88:ff:f5:fd:34:c8:3d:aa:
                    18:7e:15:91:ef:87:ca:9a:7d:0d:6f:fd:8b:43:10:
                    43:02:88:ec:91:cb:25:58:e5:16:11:ea:b0:a2:c8:
                    35:65:35:5e:1f:fa:8c:33:57:7f:7c:c6:eb:d4:3e:
                    74:7b:06:35:e4:b6:d8:fd:6c:fa:46:9c:4c:39:ca:
                    66:64:5d:85:6c:1a:03:62:e9:84:94:74:d1:64:83:
                    69:c0:89:f0:6d:88:3c:36:d2:6f:20:31:75:c1:e3:
                    99:62:8b:cf:17:1d:a2:f0:56:c4:0d:39:b1:a8:76:
                    04:a6:b1:7e:10:7d:c8:c1:07:20:94:48:aa:70:3e:
                    c0:91:e7:68:c5:05:66:85:68:bf:87:60:8d:ee:83:
                    ab:af:3e:70:e0:51:c6:c5:6c:40:84:d1:15:db:8e:
                    8a:6c:14:aa:e0:1d:ae:b3:8e:ef:25:d3:b2:7b:de:
                    9e:e7:de:46:59:40:52:2f:09:a2:6a:fd:90:ba:61:
                    5a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FD:10:FB:85:C1:F4:4A:B6:90:E3:42:D8:8C:7F:01:04:0A:C4:DD
            X509v3 Authority Key Identifier:
                keyid:AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:72:8f:59:42:7f:13:5f:5b:1e:f1:fe:6b:c2:d2:6e:11:68:
         a6:ef:87:ed:2b:6a:9f:ae:76:be:4c:19:5c:a2:10:79:1e:42:
         05:6a:a0:38:0e:fe:df:e6:b6:c3:17:6e:a5:18:05:5e:fc:36:
         e5:70:22:fa:8d:be:1c:5e:26:fb:e3:ba:6d:fa:da:0c:7e:b8:
         04:c6:b3:22:17:b3:49:22:fd:95:1d:07:43:47:12:51:da:41:
         c2:d1:75:9d:7b:1b:5c:be:43:53:2c:6b:55:6a:f3:22:ad:be:
         5c:08:4f:6b:c3:fd:a6:00:80:24:f8:3c:5c:66:57:0b:02:aa:
         1b:93:3f:bd:2a:0b:e5:12:43:04:df:e4:5e:e8:d7:18:7e:15:
         5f:18:98:c3:47:0f:1b:b9:36:b2:41:48:6c:13:3e:f3:0c:cb:
         ed:28:b5:d9:ac:74:f5:d9:f0:51:9b:bc:01:be:5c:c9:35:9e:
         f2:b0:d9:36:26:77:b7:61:32:bb:af:07:97:b6:3b:db:86:7c:
         39:c2:00:6a:e3:de:6c:96:82:dd:b0:23:24:7f:18:84:18:7b:
         d3:e9:1d:89:09:2b:81:bf:34:ea:f6:52:9e:06:3c:f0:ab:84:
         fd:a8:8e:ad:21:53:3d:1f:81:ed:69:d4:71:64:bc:d3:ce:20:
         06:ac:af:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----