Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File:                     ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier:          f6dbtkreGkc6gdKxIltDnPCuYclIMTXUHI7Qj+EBE94=
Subject key identifier:   D5:35:B9:AD:D7:55:05:CF:7F:DC:C5:0D:DB:8A:A8:BA:55:50:0F:1C
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer:       /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial:       01962F06682BE572FFB7E22BDDA0A6EADDEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number:          01BD
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: FCawacJ8CusN4bsJHn302UN7Juu/Mg0i2kn7HqwdmWs=)
                          2: zto4NeQB1_I3QORAJXQ-oNO5db0.roa (hash: 4X/MAtxcgqfp8hiwe6Iai+qfAWiiXuU0LC7+GPHFtZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:68:2b:e5:72:ff:b7:e2:2b:dd:a0:a6:ea:dd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=d535b9add75505cf7fdcc50ddb8aa8ba55500f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:f6:c4:62:61:23:1a:19:e2:fb:0a:bb:9f:
                    c3:1a:02:4f:5e:a1:23:db:98:65:1e:82:09:22:4e:
                    34:04:71:4b:35:c6:34:8a:03:29:a7:83:90:c8:f7:
                    ad:5e:74:12:ed:3e:77:54:0b:e7:0f:24:1e:a9:f9:
                    d9:58:0e:9b:c7:66:0f:33:f3:cd:9f:fc:5d:45:48:
                    67:a2:cc:ec:fd:87:58:c0:0a:cd:cf:b8:5b:88:24:
                    dd:7e:5a:47:f5:22:21:4a:da:82:c6:34:42:8b:e5:
                    8f:2d:db:92:66:83:17:32:3c:36:ca:32:69:93:b9:
                    2f:73:95:bc:96:57:4f:0f:8d:51:73:ac:57:d4:f5:
                    48:9c:67:ab:df:84:56:71:f8:d4:0a:21:0b:65:65:
                    d6:a6:9d:78:9e:2a:91:0c:e7:81:df:55:0c:84:1c:
                    c5:99:da:46:d9:22:e0:84:32:d0:6e:9d:cc:3a:66:
                    61:2b:a8:c8:b3:53:ea:74:c9:06:71:cc:76:66:bd:
                    14:c7:41:d5:6d:c3:27:28:39:02:3b:79:e6:c2:a2:
                    f2:6b:a8:c3:cd:b1:03:bf:6e:b0:bd:f1:8d:c8:a4:
                    78:23:f1:1e:cf:49:0b:71:ae:2e:63:bb:4b:55:1b:
                    5f:e8:91:b6:c5:6a:70:2d:19:bb:77:3c:ca:89:65:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:35:B9:AD:D7:55:05:CF:7F:DC:C5:0D:DB:8A:A8:BA:55:50:0F:1C
            X509v3 Authority Key Identifier:
                keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e0:5d:14:f0:4f:fe:12:1a:8f:e5:36:8d:f9:90:e4:b4:0d:
         95:15:06:14:14:01:61:d1:a8:5d:a7:f6:f9:ab:1b:c4:0b:fa:
         75:15:ff:3a:de:ec:5d:18:7b:2d:c4:6a:92:61:51:fd:1a:3a:
         c7:75:b6:2f:c9:91:0d:fb:91:8d:92:3a:c3:80:13:81:09:85:
         bc:b7:b8:9b:ca:8e:c3:ad:9d:b7:23:79:64:c9:c2:f2:cf:31:
         26:33:7a:1f:77:3a:90:a3:44:8b:ea:08:ff:e0:d3:df:f6:17:
         a3:0f:bd:2e:81:18:f2:a8:06:34:8a:92:46:ee:f3:01:91:ac:
         00:f3:a3:8b:9a:2c:e2:cc:78:34:a7:9a:ad:bd:16:98:a0:15:
         cf:8d:da:bf:03:5e:88:26:81:04:c7:40:cc:02:08:0d:3b:1e:
         ee:07:2c:0b:ac:33:1e:a5:ea:19:31:f6:38:b0:b9:35:68:8e:
         04:5a:31:28:a9:14:ad:8e:b6:ab:7d:18:95:cb:29:7d:5e:b3:
         3f:33:85:b9:80:90:c4:eb:a3:92:ea:0d:d4:ad:d0:1e:b4:d5:
         e1:cf:50:95:68:df:fc:4d:ac:5f:eb:8d:41:f4:9c:8b:0c:3e:
         75:5b:17:36:48:40:54:f6:c4:ab:ef:2b:ff:a8:fe:7d:00:a2:
         e1:98:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----