Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File:                     dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier:          lQ40qirgeAo/ZY+gmvBEsZHUwvuwlXfSJNIoVIg6ll0=
Subject key identifier:   4C:7D:AC:FF:FF:C2:1C:21:CF:AA:67:14:E3:7F:23:D7:D5:E2:9A:9F
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer:       /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial:       01962E2ADC19A181887F56F055B9F5DD385F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number:          1221
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: 40QNfW5uxL4jypZTwjAvEPXJ-ss.roa (hash: scLT9GShE++kyEVNQ4Xr6VT4pmzB0wfzNMHjViw3ltA=)
                          2: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: eTMV/6yvgRrYjXB5d6lku3ZOqQ5AaFWxmCv9RpRuFQA=)
                          3: to-C9o8M7rUM05HxGikjjRHVAbw.roa (hash: JaaGI9qnzexOYc7maJGwDizpvZfHfNfRXKpM/h4aHAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:dc:19:a1:81:88:7f:56:f0:55:b9:f5:dd:38:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=4c7dacffffc21c21cfaa6714e37f23d7d5e29a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:fb:23:75:e6:dd:23:de:cf:0d:1f:b9:17:
                    e2:64:ec:b7:54:7f:6a:26:0e:09:38:e1:2f:1a:8b:
                    32:6f:82:dd:da:2c:61:16:aa:28:86:f9:30:b8:07:
                    e6:27:15:8c:89:44:c3:ce:f6:4c:1b:da:99:fe:83:
                    b5:1a:63:33:29:fe:48:f4:f9:a8:bd:c9:cc:92:38:
                    f6:45:c2:01:34:97:be:9b:08:0e:82:92:0c:75:9a:
                    39:ce:78:41:b6:c3:ae:90:0b:e7:d0:0d:56:a4:e8:
                    0c:60:93:0f:f2:ba:dd:3e:2f:d3:b5:84:74:be:af:
                    61:53:d2:52:c7:15:20:1c:2e:45:4b:2e:fb:77:e1:
                    14:4d:95:23:d4:da:92:87:21:8a:cc:d1:1c:1d:af:
                    5f:9b:54:75:48:72:5e:83:1a:f5:ec:55:18:6e:57:
                    15:62:14:f8:c2:56:0c:2b:c6:9a:59:ce:f9:29:29:
                    dc:79:f0:23:d4:5f:7e:48:d9:cf:07:43:cf:69:5f:
                    22:46:12:bb:58:a8:ff:7a:00:56:44:03:d0:96:f6:
                    80:7b:e9:55:4f:f8:99:a1:f9:ed:50:a2:37:de:46:
                    4a:ca:37:55:ed:03:b1:87:ce:e9:da:f3:61:58:f5:
                    5c:9c:ec:3b:ce:01:84:b1:d6:db:37:60:7b:d9:d6:
                    02:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7D:AC:FF:FF:C2:1C:21:CF:AA:67:14:E3:7F:23:D7:D5:E2:9A:9F
            X509v3 Authority Key Identifier:
                keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a6:b4:53:08:66:49:0f:1a:31:7e:2e:4a:35:35:ae:c1:49:
         06:2f:5f:b6:b4:26:15:c9:05:f0:bc:4d:e6:60:c3:1e:c2:36:
         a0:b8:ca:52:44:bf:a9:05:14:70:1b:dc:6e:8c:f1:52:d9:11:
         f9:3a:d0:e1:72:42:63:94:96:a3:57:8b:93:49:f0:5a:a5:2e:
         13:14:0c:ca:45:5a:39:b4:fa:d3:d9:d0:d6:c9:91:18:60:f7:
         dd:95:62:7d:d8:f2:71:ff:74:6e:e9:6f:ee:8c:23:8f:07:70:
         51:bb:1d:29:4a:65:01:20:64:00:d7:64:c8:15:00:cb:cd:ba:
         60:6a:b7:82:ff:79:97:69:1a:86:fe:55:d5:1e:74:9d:cc:98:
         3e:fd:ba:bd:72:9a:6e:a1:a3:b1:8d:cb:79:78:aa:42:dc:99:
         ce:b9:32:73:94:04:16:f9:95:93:dc:be:d9:84:9f:4d:b4:50:
         aa:26:ef:3a:a0:3e:4b:eb:79:bb:fa:41:c0:9d:9c:70:f2:d2:
         41:51:d4:b2:29:93:cd:d5:7d:14:a3:a3:d6:1f:2d:8d:7e:1c:
         cd:b3:5e:14:83:71:10:18:45:26:15:04:7a:55:e6:70:31:ca:
         5d:d6:44:ea:d2:04:ef:28:0d:ff:37:71:40:4e:ba:d9:de:09:
         17:60:52:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----