Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
File:                     dvkMwSPQ0gRp05xsNFXzHqYSP04.mft (raw, json)
Hash identifier:          HpMVHNyqTxj91kuCNc5HPKxGzr7aWYV7m7mTFenzaLA=
Subject key identifier:   1B:22:6E:7C:2A:33:40:7C:75:ED:AE:3B:C6:50:CF:D6:BC:33:2D:7A
Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
Certificate issuer:       /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Certificate serial:       01962E98DD4A8F160B0901B488656FE9A94A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: dvkMwSPQ0gRp05xsNFXzHqYSP04.crl (hash: eRZuPzDMkOGRKaHSnLOAqgftyGCtW3aNjZvb2atL9HE=)
                          2: u3lxxc1lkavM0xc30bqZfpWxvHo.roa (hash: UHLRAbtjmSCDadx2fBrU+RDEoeooREQATwB2er11mzE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:dd:4a:8f:16:0b:09:01:b4:88:65:6f:e9:a9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=1b226e7c2a33407c75edae3bc650cfd6bc332d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:e4:9a:df:14:78:80:9b:72:50:3f:e4:d2:
                    e6:b0:bc:a4:7c:08:12:a9:45:ba:a8:7d:f8:2e:b8:
                    6f:6a:23:5b:ac:02:5f:c7:bf:8d:3e:53:bd:60:ef:
                    f1:1b:a6:aa:e3:7e:f5:73:70:67:a7:92:69:bb:dd:
                    3d:19:4d:b1:3d:8b:98:97:28:e3:16:65:91:dd:46:
                    92:6e:25:09:77:b4:c5:49:64:77:5c:43:4c:3f:01:
                    dd:69:01:3c:6c:22:c9:de:db:fb:30:31:84:cc:f1:
                    05:73:62:45:5c:a1:6e:d7:e1:b8:79:ef:5e:13:3c:
                    da:1c:10:4a:f6:01:a5:87:30:11:b3:5d:39:37:ae:
                    0d:1f:28:89:b0:80:4a:46:d8:82:f4:45:e7:c7:59:
                    e7:ad:aa:ca:ec:a5:63:e3:17:f2:05:44:a3:1b:b5:
                    a2:b9:2d:a7:da:41:af:54:98:ab:cc:2e:47:f5:5c:
                    4e:bf:40:7f:33:51:36:72:b5:6c:35:71:10:c1:ed:
                    a6:f6:0d:4c:a3:1b:42:08:eb:9b:a4:7e:b7:29:13:
                    b5:fb:f2:62:68:22:bd:8d:fa:0a:79:ff:22:04:cf:
                    c3:a5:a6:d4:63:e0:69:72:cf:78:aa:86:2f:96:b2:
                    c4:fb:62:7a:fe:c1:07:1d:0a:ee:40:18:20:d6:00:
                    83:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:22:6E:7C:2A:33:40:7C:75:ED:AE:3B:C6:50:CF:D6:BC:33:2D:7A
            X509v3 Authority Key Identifier:
                keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ff:01:a6:9c:fe:fb:c5:98:86:80:f5:12:8c:bd:8a:ac:c5:
         23:36:d0:90:e1:3a:8f:c1:94:e9:b0:e0:f1:69:a9:2b:8f:68:
         10:14:d5:99:03:d5:4b:5b:0f:2f:42:2b:51:07:ec:d6:0e:41:
         87:d2:3f:2b:4e:91:5f:50:12:e8:4b:03:01:f7:6f:24:08:41:
         ab:ba:5f:23:07:12:5f:58:2d:1b:5f:80:20:ae:ce:ed:6b:4b:
         23:04:7a:38:36:d4:4c:a4:e6:2b:ed:d1:6d:09:49:fd:72:56:
         ed:1e:6b:a3:08:2d:2b:4a:85:c5:37:c2:47:38:ec:13:70:18:
         57:a5:ac:4c:97:d4:2f:5d:22:17:7b:9e:60:d3:9d:6c:80:98:
         d2:d0:be:89:d1:1e:dc:ca:1f:d2:9e:4b:1c:a5:f3:e0:54:e1:
         0b:7a:17:71:80:6e:4b:e2:73:d8:c0:ed:94:59:ce:6d:8e:2d:
         26:08:e3:12:f7:76:b1:b7:28:a7:e1:47:07:92:f9:04:99:f6:
         c0:76:bb:7b:f3:48:ea:b0:15:81:bf:53:f3:87:a2:c2:78:a6:
         f7:a7:1c:75:fb:19:ab:c4:66:04:77:30:c8:f1:1c:cb:83:f3:
         03:2a:fd:59:35:f4:53:b2:b9:29:9f:c6:27:07:30:2d:82:33:
         6b:fc:93:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----