Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/b57892-cd3d-4f06-91f7-55387bfb5e66/1/dotOLq79y-wVupnop6IcieSyzL0.mft
File:                     dotOLq79y-wVupnop6IcieSyzL0.mft (raw, json)
Hash identifier:          kKWK3JqM6frl30UWTTPCGlk7QmlWmOf6SeqUqLLC230=
Subject key identifier:   6C:1D:40:19:1A:FC:08:85:C3:2D:20:B0:A6:D2:7A:94:33:64:A6:D2
Authority key identifier: 76:8B:4E:2E:AE:FD:CB:EC:15:BA:99:E8:A7:A2:1C:89:E4:B2:CC:BD
Certificate issuer:       /CN=768b4e2eaefdcbec15ba99e8a7a21c89e4b2ccbd
Certificate serial:       01962E99882B204FA0FA5A995F683042C7EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dotOLq79y-wVupnop6IcieSyzL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/b57892-cd3d-4f06-91f7-55387bfb5e66/1/dotOLq79y-wVupnop6IcieSyzL0.mft
Manifest number:          55
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: 2d_NXZtW0ODYRMQ4wdJe7FkxoW0.roa (hash: PhAe9DgdWLVDbJJiZelbxMyByKXlfBNEMtHqWSG1jZ8=)
                          2: dotOLq79y-wVupnop6IcieSyzL0.crl (hash: LoI979ldrHe2HSbDwWASoqHI7z9h9GIpr2s92qaSIyw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:88:2b:20:4f:a0:fa:5a:99:5f:68:30:42:c7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768b4e2eaefdcbec15ba99e8a7a21c89e4b2ccbd
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=6c1d40191afc0885c32d20b0a6d27a943364a6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:10:e3:f0:13:c1:5e:36:c6:81:3d:d8:fe:5a:
                    2f:53:bf:93:b2:93:3a:a1:f4:5f:3d:c9:91:b3:cc:
                    68:3a:fb:12:26:a9:a1:03:fe:36:a7:7d:07:d9:41:
                    56:e8:11:50:e0:0b:c3:05:e8:5d:85:96:5e:41:b8:
                    d3:d1:ea:23:e2:c4:50:13:9e:2f:c4:fd:1c:e5:b1:
                    96:47:df:29:e9:df:37:32:fc:49:e9:76:db:50:e1:
                    86:c6:26:a7:d7:5c:4a:6d:fd:3a:71:fa:95:67:93:
                    65:5a:8d:fe:6a:48:43:f2:77:a2:76:c7:b0:3c:f8:
                    eb:a3:db:79:41:c8:c1:df:2a:15:b2:29:cd:b2:08:
                    2d:01:fe:7e:53:d0:a3:e7:8f:4e:70:e9:4c:3d:8d:
                    30:42:f0:fc:57:5d:2a:d9:69:32:c0:ed:f1:50:72:
                    16:d5:0f:de:b8:9c:e3:93:f0:e4:d2:08:01:6b:92:
                    d6:3b:9d:92:b8:7c:02:2c:e2:93:61:0e:e4:7e:d7:
                    c2:e5:f9:2c:3c:42:bd:f8:4b:88:61:cf:54:bb:2a:
                    e2:61:a2:c5:b7:41:2e:b6:4a:06:de:3e:51:02:7f:
                    54:0e:b7:88:43:d8:5a:dd:29:d3:2f:a1:80:0c:98:
                    b4:2c:8b:0e:50:f9:0d:e7:da:31:f5:3a:2c:cb:b1:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1D:40:19:1A:FC:08:85:C3:2D:20:B0:A6:D2:7A:94:33:64:A6:D2
            X509v3 Authority Key Identifier:
                keyid:76:8B:4E:2E:AE:FD:CB:EC:15:BA:99:E8:A7:A2:1C:89:E4:B2:CC:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dotOLq79y-wVupnop6IcieSyzL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b57892-cd3d-4f06-91f7-55387bfb5e66/1/dotOLq79y-wVupnop6IcieSyzL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b57892-cd3d-4f06-91f7-55387bfb5e66/1/dotOLq79y-wVupnop6IcieSyzL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d2:90:2f:56:6a:82:8d:4b:6d:0b:ca:f0:39:c0:f1:e6:5f:
         75:94:0f:88:7a:7c:22:5e:cd:37:88:c5:69:87:92:7c:80:13:
         3b:09:75:8c:bd:9a:e5:d9:3b:8c:9e:ca:9c:b9:ee:8e:1f:19:
         7d:ff:7c:50:04:5b:76:6e:22:11:1e:61:bd:3b:ff:32:7b:4a:
         d7:c5:6e:9e:b7:9b:39:14:4f:6e:f7:06:a2:3d:b0:90:cb:8d:
         f1:7b:80:f1:01:85:c0:5f:79:5d:9c:89:8d:8c:28:ae:b6:b4:
         ed:11:a3:37:aa:3c:90:04:af:df:54:ad:92:d7:83:53:f4:ff:
         15:b1:94:6c:21:e8:d8:60:c5:da:8f:49:d2:4c:76:75:e5:eb:
         13:1f:57:1b:44:1f:87:ab:5d:75:05:27:eb:c2:51:69:41:e2:
         1b:00:6a:42:92:7f:91:8e:3c:de:91:bc:ca:1c:1a:11:3b:88:
         e4:a3:1c:8c:fc:0d:e8:d1:59:e8:cd:4d:75:e0:dc:2b:e7:00:
         09:37:1d:62:1b:23:79:09:87:e3:26:69:f1:12:1c:a4:7f:03:
         78:cb:1b:17:ac:5d:6d:dd:b4:a6:b1:47:fa:bc:4d:ca:92:f3:
         8a:c2:35:3d:69:4a:74:65:68:23:c0:6d:95:0a:2e:80:cf:97:
         9c:39:29:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----