Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
File:                     V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json)
Hash identifier:          P2NQwGTXqGJaB9OeVW92nikkqIIelEtPpWqe+BVccR8=
Subject key identifier:   DD:EB:DA:7A:4F:93:F1:DE:6A:A0:FE:69:80:81:75:DD:5C:C2:B1:C9
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Certificate issuer:       /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial:       01962E620053626CCACC71E42422A909AC50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
Manifest number:          0F6F
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: D3QeUsU8Q-1bY74EwK2MA0No9Ew.roa (hash: N97kcfMNA4uFpsheDLzM7+Nl7AAF28L1BPIs41yYMZY=)
                          2: Q07EucI5XyAYo9s-A9qqwpcEGlA.roa (hash: VFWYrVVM3MpoRzNbOjii1yFOv4OAEiNvOV4MAp0ri4Y=)
                          3: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: 9H64EUxehR7GI3ls0em5/DmDzI+kOtQgXwVVUaySRjk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:00:53:62:6c:ca:cc:71:e4:24:22:a9:09:ac:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=ddebda7a4f93f1de6aa0fe69808175dd5cc2b1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:6a:76:22:8e:f8:25:9c:3c:d0:9e:c5:c1:
                    e1:89:ce:a7:69:22:0d:e0:99:8f:1a:30:96:f0:ce:
                    c5:45:c8:46:32:c0:cf:c4:44:7d:5f:f1:a9:7c:b5:
                    d0:23:cd:55:cf:ed:2e:57:7a:76:23:6a:25:9a:11:
                    fd:16:f8:05:b1:c7:63:40:35:1a:e8:17:12:c4:bf:
                    9f:9a:73:ce:1a:86:5c:d6:19:10:d7:80:c7:e8:a4:
                    d9:88:0b:a5:b0:f1:ea:89:f3:a4:60:8c:f6:7d:55:
                    73:83:de:5a:71:aa:c7:b5:bb:c5:40:b2:ff:ff:b1:
                    e4:02:4f:a5:3a:e9:8f:78:27:b4:a5:21:92:30:8f:
                    cb:ea:ff:ee:34:c3:2b:0a:e8:d9:f9:7e:9e:ce:f6:
                    8c:b0:b7:ce:5c:c3:d3:d7:f8:0e:a0:99:10:16:5c:
                    a4:5f:dc:2c:ed:4c:ab:34:f9:cf:41:b6:40:f1:4e:
                    f8:50:ed:29:d5:d9:19:05:ce:79:ca:b3:4b:7c:e7:
                    25:53:d9:57:97:e3:cc:ec:01:4b:8d:9a:0b:5a:12:
                    0c:52:69:88:4a:13:e1:59:bc:69:a9:10:91:a6:e4:
                    9d:94:d0:0b:48:9d:f4:ef:66:d3:88:ac:68:dc:c0:
                    2d:db:c5:a5:24:fe:86:0d:7b:b9:9f:df:41:81:14:
                    1e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EB:DA:7A:4F:93:F1:DE:6A:A0:FE:69:80:81:75:DD:5C:C2:B1:C9
            X509v3 Authority Key Identifier:
                keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:07:ea:8b:de:0b:4b:de:e9:5a:0a:18:e5:fa:24:a4:76:b0:
         da:c6:43:e1:b2:24:ae:3d:b7:83:ff:fc:d3:d1:c4:c9:75:a8:
         0c:43:1d:27:a4:3b:5c:6c:e2:6c:c2:a1:fe:c3:0f:27:ba:60:
         76:ed:30:cf:4c:00:35:ff:62:a9:c2:68:24:b0:ba:a2:6d:f6:
         b6:74:dc:83:b1:53:9c:39:99:96:87:2a:69:33:1e:92:1f:64:
         8b:fc:48:95:8a:d4:40:cb:ff:64:28:a9:3e:76:4b:9c:03:f1:
         d6:16:70:4c:4d:30:b7:72:e8:66:29:8d:8d:17:cd:69:f2:43:
         a7:4c:74:6b:13:26:7c:20:b3:ac:72:77:94:d0:59:54:0f:e7:
         a9:07:30:0b:c5:b0:4e:62:45:e5:27:e6:61:5c:2d:e9:d1:32:
         d0:8a:02:ef:69:40:65:7d:32:e5:94:3b:68:07:43:a3:fc:c2:
         bc:b8:4b:2a:06:12:b4:71:62:04:31:89:8a:2e:db:5c:d9:6c:
         a1:71:c9:4a:22:17:d0:46:25:f4:51:70:af:4c:88:5f:a1:67:
         1c:1a:7b:29:6b:42:d8:70:11:bb:ec:7f:70:10:59:65:ef:7f:
         81:fa:09:86:0c:0a:6f:d4:5b:27:78:ed:eb:bb:23:f0:ae:a4:
         84:7a:6c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----