Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
File:                     d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json)
Hash identifier:          mw72HJu3jYu1VYgMWi1pJkPAGyX9c16pOSDepfPk/Zo=
Subject key identifier:   BE:C4:E0:1F:C5:C5:8D:7E:47:5E:7C:4F:86:89:08:55:A5:99:04:CF
Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
Certificate issuer:       /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Certificate serial:       01962F06CF7E98A20F0AA202F6AAB1A76AB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
Manifest number:          0263
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: ZKAB4Yghz4x0rD6zAjy90cCZU2XBew0LSZq82+CoP+c=)
                          2: lJ6hu6V7P05pf4Ct-PkwsRbTn-Y.roa (hash: yD7rptfWCX+Sfjy7H+I4AQ8wgaNpJdZq+9g0IP00GOc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cf:7e:98:a2:0f:0a:a2:02:f6:aa:b1:a7:6a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=bec4e01fc5c58d7e475e7c4f86890855a59904cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e7:64:41:36:bf:9e:ff:94:74:1a:d7:d8:46:
                    28:a7:70:b6:8c:5b:2a:34:e9:30:a3:6a:fc:ca:20:
                    08:8d:1c:bb:22:49:52:5f:89:d9:44:e4:da:0e:c4:
                    3d:c2:8e:10:3f:1b:90:af:78:00:61:8a:02:94:ce:
                    46:92:ad:26:a7:0f:8e:b9:1c:1c:1a:7c:d0:27:d5:
                    cb:98:c1:ee:41:f2:db:fe:03:77:8e:61:18:1a:3f:
                    5a:6b:7a:a3:0d:6d:06:b6:42:3a:13:05:e5:ca:b1:
                    49:e7:55:89:97:20:7c:87:0a:c9:90:37:81:03:a7:
                    f2:89:35:40:9f:e9:45:f4:7e:18:d4:2f:44:52:b7:
                    0d:a3:2b:d9:e4:61:ce:30:79:da:8b:2b:77:73:6a:
                    5b:f4:30:51:e6:5c:3a:9c:7f:81:27:43:78:2e:2d:
                    cc:92:50:6f:d5:6f:77:52:5e:ce:26:ac:68:e9:0d:
                    4b:ba:4b:9e:23:3b:46:d5:ed:db:41:34:fe:f8:85:
                    4c:3e:8e:5f:a9:35:31:8a:21:ad:4a:97:44:e2:a2:
                    58:d0:f2:f6:9c:39:69:e2:2e:c6:14:4f:71:33:b2:
                    cb:6f:47:e7:27:7d:ce:87:10:04:d2:54:8b:8f:f9:
                    a0:fa:ff:e3:12:c7:f0:ba:4a:69:5a:2f:ba:aa:1e:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C4:E0:1F:C5:C5:8D:7E:47:5E:7C:4F:86:89:08:55:A5:99:04:CF
            X509v3 Authority Key Identifier:
                keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:54:ed:ab:0b:bd:25:d0:cb:d5:9c:cb:49:b6:c2:b3:d1:28:
         43:16:f7:91:be:98:22:ce:07:eb:81:71:a0:75:55:5e:6c:78:
         59:5b:23:f7:8f:99:7a:e6:2a:3b:44:9e:0d:bc:50:0a:c2:98:
         29:94:d0:82:05:e4:7a:2e:4a:10:c3:55:ed:68:cd:e1:6f:1b:
         f2:97:f9:8d:2c:f8:18:98:81:8c:f5:ed:89:26:81:38:2a:2b:
         0b:e3:79:09:8f:7e:0a:81:75:b8:69:12:34:ed:bf:a6:40:87:
         58:cb:b2:0a:68:54:de:b0:2a:e8:8c:c4:bf:b6:b7:51:67:27:
         6d:9e:dd:f8:20:5b:8d:8d:1a:be:5c:56:03:65:37:64:c4:f5:
         13:09:9b:01:9e:33:ba:82:72:26:a1:ae:13:ab:0d:64:94:45:
         59:75:75:56:eb:92:7e:41:01:8a:8b:62:53:e1:8d:4e:97:50:
         1d:be:5a:6e:18:8d:09:8d:e2:76:6b:3f:6d:c9:79:6b:2d:fc:
         12:f0:8b:55:40:97:e8:70:a2:28:e6:44:ec:a9:ab:08:36:5e:
         91:ea:03:d9:06:d1:e3:5e:96:ae:a1:09:8b:f3:d7:45:e4:6f:
         67:b0:60:89:35:4b:8e:df:bb:b8:69:ac:59:07:ba:b1:e1:15:
         76:10:1e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----