Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File:                     dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier:          GsSyeBhbXa2hxvKfqUawhJcK3DXN8yilVyfYFEmrgD4=
Subject key identifier:   66:64:12:83:66:41:F9:42:03:83:53:FB:DE:CF:33:E4:1C:31:DC:05
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer:       /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial:       01962E2B0C2A8F809DC84671AECA2841D9DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: 2NiHn34JPgLn7c-RHwoRuPR6WeY.roa (hash: WEVKN3PxbC0bS7JDTvFGcGPR4DkenMAV10t+2kflVIE=)
                          2: PVmSZDGrn03CmC3ystxrDr3TZfo.roa (hash: Pjr4/1MqbKXy/FJJPo44XPup/Kfr50sF5z3bYT1o0SU=)
                          3: XU_IzR1XNktTavIx_nI3l6sD7WI.roa (hash: QAWYFwQ7d4DDdntznflGhPwEdw+c4lyHMRKRE5reGnk=)
                          4: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: kXqmOK0WWTgcs5gt524tsr6XS13PxSuBYK1GI50TsKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0c:2a:8f:80:9d:c8:46:71:ae:ca:28:41:d9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=666412836641f942038353fbdecf33e41c31dc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c9:81:8f:08:8c:ae:7d:f7:2d:10:91:a6:46:
                    8b:27:7e:76:c8:34:4c:63:25:a5:95:77:f5:86:55:
                    c4:5d:d6:05:b2:f9:0c:08:ed:74:7b:81:29:25:9b:
                    8c:ab:1c:0c:10:05:47:b0:ab:96:b3:42:5b:38:13:
                    a0:bb:f8:29:dc:bf:a1:71:03:ac:2b:43:88:0e:87:
                    de:e5:3d:b0:aa:d8:42:2c:96:f6:9e:6e:9b:ee:3f:
                    73:60:9c:b9:a4:98:b5:57:aa:60:88:72:db:12:d3:
                    ee:12:5c:4f:ad:5f:e3:8e:7c:8b:e4:4a:41:46:31:
                    da:ed:68:a5:f8:c4:b4:1e:f9:bb:60:29:50:70:60:
                    7e:2f:7e:35:90:d9:ef:28:d1:f4:62:3d:ea:57:49:
                    ed:fd:d2:d3:8d:9f:ae:63:b4:38:5c:ea:a3:e5:0b:
                    6d:54:aa:54:20:64:3b:96:ba:bc:df:10:d6:4d:07:
                    39:f5:2a:cc:d7:ee:f2:a8:0b:0f:0f:f5:de:cd:cb:
                    d7:d4:38:4a:5a:27:95:af:c5:b4:2d:cf:56:f3:3f:
                    8d:0d:ce:bd:59:5d:ea:4e:e6:94:a9:09:1f:d8:03:
                    e3:9a:44:f1:69:02:77:d7:55:fc:b3:cd:24:7c:99:
                    92:c0:bd:6f:6a:84:60:40:60:0d:45:85:06:35:62:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:64:12:83:66:41:F9:42:03:83:53:FB:DE:CF:33:E4:1C:31:DC:05
            X509v3 Authority Key Identifier:
                keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2f:e5:b1:63:70:56:83:57:9a:45:a4:75:c7:fd:59:ca:0a:
         d8:35:d6:ae:ee:d5:53:64:9a:b8:27:5d:ae:a9:ec:b5:5c:9f:
         02:d5:24:6c:fe:49:ed:16:ea:b8:e8:68:0a:0d:eb:84:27:f3:
         ef:4d:79:f3:8d:a1:23:61:6b:cf:28:24:ee:a0:21:81:f8:64:
         ac:b9:3f:10:fc:a6:b6:7b:97:02:67:2c:b4:57:19:29:2d:83:
         43:16:60:63:e1:8b:3f:81:06:a1:60:07:93:c7:06:fc:02:bf:
         b3:47:7c:47:0a:ef:b1:be:e7:e4:5e:a8:4e:3a:4a:93:74:eb:
         d9:0f:6f:57:9a:bb:02:65:b9:9a:3a:50:bf:c8:ad:aa:50:fe:
         e1:6f:c5:8f:87:c0:1a:06:5f:a2:f3:9b:e2:58:d7:f3:e9:d2:
         cb:9b:02:47:dd:96:65:a9:d0:f0:69:15:4a:14:bb:70:3c:7e:
         e1:f0:e2:44:24:de:de:94:2f:a3:aa:96:7a:61:83:1b:f7:68:
         0f:bc:d5:79:67:5e:d3:ac:e7:c0:71:b1:36:bf:d2:53:7d:04:
         8e:7a:ff:6e:20:27:75:48:ba:b3:4f:78:95:e3:11:70:67:29:
         da:a2:40:da:9e:76:f2:e4:c0:4c:d6:d5:0c:63:b9:ec:f0:9b:
         f4:c9:ef:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----