Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
File:                     drTT6JcTIsZNegRYurdFqJreTeU.mft (raw, json)
Hash identifier:          jojxHEgJi+n6bp+guCg83RpWEA9huWRjvR49BNS2BLA=
Subject key identifier:   23:4E:70:73:9C:05:E9:4F:BD:F2:CB:3F:91:0B:C6:7E:1F:FE:28:DE
Authority key identifier: 76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
Certificate issuer:       /CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Certificate serial:       01962E988F6745A9521250C73E8D7320DEB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
Manifest number:          016D
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: ZYX1Qhws2vdCl-u2QXbSsdG6zUs.roa (hash: 1Yas72g5IvT1A6G5CoyKopOr6adZNC8arOgG6BPNF2I=)
                          2: drTT6JcTIsZNegRYurdFqJreTeU.crl (hash: Fm0+8W2Rl0U0NnViiGtO15a7prPUMSGQPAXuUjv7S28=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8f:67:45:a9:52:12:50:c7:3e:8d:73:20:de:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=234e70739c05e94fbdf2cb3f910bc67e1ffe28de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:4a:88:26:d2:ed:a4:6a:e0:b1:14:5f:58:
                    9a:a7:88:19:d3:fa:be:80:f0:e6:8b:45:7b:e0:a5:
                    4b:e1:1b:b8:24:3e:3c:3b:3d:08:7e:e8:0a:87:21:
                    72:d5:02:1e:0c:e8:35:66:3a:c4:ae:89:b0:be:ac:
                    7c:82:ab:fa:fb:e0:1d:f9:72:ad:86:93:0c:b6:3d:
                    a4:90:2c:6f:63:5a:1a:70:00:99:98:68:e8:08:09:
                    6e:86:4f:9c:f8:0e:ac:c1:15:b0:e7:2a:03:67:16:
                    2b:40:e6:d0:61:86:8a:5e:15:ee:db:df:4e:87:1e:
                    9b:74:a6:b3:b4:89:39:c7:38:20:0c:65:de:1b:0c:
                    8a:24:d7:81:4a:52:57:e2:92:d6:59:4e:dc:3e:ce:
                    9a:74:cc:97:9e:a3:ff:12:66:fe:5b:15:7e:a1:91:
                    3b:be:80:1f:5d:73:b7:b2:82:f4:37:cd:f9:2e:7f:
                    2c:9d:b2:ae:56:44:d8:a2:ee:8d:84:7c:2c:72:61:
                    2b:44:08:0f:da:1d:c0:fb:0b:44:81:4c:52:f2:94:
                    4a:3e:50:d5:53:83:7a:e3:09:83:30:e8:67:2b:ac:
                    71:5a:dc:7d:0f:33:05:0c:96:3b:df:16:96:86:13:
                    56:b6:43:29:e2:6a:05:9b:30:23:7d:ac:05:84:ba:
                    56:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4E:70:73:9C:05:E9:4F:BD:F2:CB:3F:91:0B:C6:7E:1F:FE:28:DE
            X509v3 Authority Key Identifier:
                keyid:76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e1:cb:89:ef:4f:02:d0:21:05:cb:a8:09:26:b3:5b:e9:67:
         1d:56:f7:b0:39:ea:c0:11:4e:b4:9d:41:d9:30:75:49:9a:89:
         3d:eb:fa:2d:0e:72:74:56:de:4f:41:9c:90:50:f6:d3:b3:ff:
         8a:dc:c1:ee:8b:12:60:69:dd:46:85:c1:1c:da:2c:92:bd:24:
         ff:87:26:c7:2d:db:68:dc:4a:bd:d1:2a:26:72:d4:40:91:26:
         7c:9d:40:61:07:b7:f7:2d:f7:da:29:06:8f:d1:c7:3c:bc:fd:
         ee:89:b3:d6:46:78:3d:5b:d3:f5:ea:ce:aa:2d:65:55:3e:4e:
         cf:e1:1c:53:3b:d3:12:78:e1:32:66:a8:e8:a2:c2:43:2d:71:
         a5:6f:7b:d8:3b:72:b3:c5:04:09:5f:3a:72:fe:7e:b7:45:0e:
         0f:37:51:60:d3:9c:96:02:51:5d:06:aa:29:73:ba:b9:ec:13:
         a0:1c:db:e8:c8:4b:d3:33:dd:b3:b3:30:7a:6b:66:69:e7:b7:
         d8:7e:0d:c5:a5:b7:6d:76:e4:9e:41:42:7b:12:6a:04:82:eb:
         39:64:d8:85:e3:5d:14:d9:36:b9:fa:6b:89:a5:4c:b4:e6:56:
         40:19:8e:3e:6b:dd:35:a3:dd:cf:4c:29:12:52:1a:72:5b:4f:
         87:14:92:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----