Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
File:                     dw0111Zu5yRuTSEzy95Ip3RCPHc.mft (raw, json)
Hash identifier:          rPVHOIG1y4lTz5L1EXu9/1KJa6YoB+fFnqNLQsDR4TE=
Subject key identifier:   1A:DC:00:87:BA:3C:F1:CD:B2:B2:B9:C6:1F:47:CB:46:14:AD:BA:B0
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Certificate issuer:       /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial:       01962FAB72DF68DF9CCA40E399B16111E1BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
Manifest number:          08CE
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: SOT0W2XrP7CCow7oMidVP0WeTQc.roa (hash: LK/wr/vv637+E1XEkLAUiLeI/zSDn9f20e+XXEbQLBM=)
                          2: ZHw9z1FJzdvIzznM9dzN2O5C56I.roa (hash: bAuKlmhtwV1RMYb3UiAoj3013/bGmnUu7vNpvbyFAaw=)
                          3: dw0111Zu5yRuTSEzy95Ip3RCPHc.crl (hash: /D2cwczFzeRmAhLhZUn1xUJe/zi3jlbWWQY8/mgNh+U=)
                          4: kb1hhl4VhznPe9ar0pe3UEE3K-I.roa (hash: smgbn2o+yW8NSkrB4nhx/ecIptLt+NRlqrEvEJN1ma8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:72:df:68:df:9c:ca:40:e3:99:b1:61:11:e1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=1adc0087ba3cf1cdb2b2b9c61f47cb4614adbab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:fb:1e:e7:f6:78:c1:d4:5b:df:76:eb:92:
                    92:e6:d8:c2:33:db:85:06:6b:c5:ee:60:e0:67:35:
                    6b:9f:74:0f:e8:7b:f8:cd:58:cb:47:a5:9b:b8:cc:
                    e2:a8:f1:c5:8e:60:68:60:da:a6:b6:d8:d3:d7:93:
                    ec:c4:0b:51:7a:71:4a:1b:c6:6e:6b:f7:20:14:60:
                    1e:0e:2c:7a:4f:11:a5:fd:72:8d:1b:d4:50:dd:df:
                    52:10:4c:65:a8:c6:9d:86:6e:ce:1b:ad:86:a6:fb:
                    7d:17:3c:80:1f:53:a2:36:c6:f6:de:b2:b9:29:ca:
                    97:35:ec:6e:66:b3:76:dd:8f:17:a2:19:8c:46:f4:
                    5d:05:fa:37:85:9d:02:bb:55:61:c6:88:29:6f:47:
                    e7:99:5d:3e:59:59:12:b9:89:83:c7:0f:48:62:5a:
                    4d:e4:1a:ef:fb:80:a4:62:19:16:fe:f7:30:ee:e8:
                    4e:41:fd:3b:4d:27:86:67:0e:e3:d1:82:e7:2f:31:
                    b0:bb:53:f7:1f:b9:eb:e1:90:58:90:51:e3:7e:e1:
                    2b:fd:9f:7a:b6:a4:15:60:7b:c6:de:3f:29:43:80:
                    29:fc:2f:e2:09:e2:fa:ee:11:dd:68:ed:51:66:a0:
                    29:cc:fb:50:18:31:df:7e:c7:7d:24:e8:6f:e7:a8:
                    f0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DC:00:87:BA:3C:F1:CD:B2:B2:B9:C6:1F:47:CB:46:14:AD:BA:B0
            X509v3 Authority Key Identifier:
                keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:75:ed:40:7a:9c:2e:d9:18:f9:7f:75:fb:d5:2b:79:ee:97:
         34:82:c6:88:33:9f:de:23:9f:c1:e6:08:fa:85:ac:7e:b4:20:
         c2:5f:ba:23:b9:df:b8:0b:8f:cd:d1:a4:f2:87:d9:46:7f:4b:
         03:08:35:76:1d:01:0d:af:16:ef:50:01:ed:05:4f:dd:f2:5b:
         01:4d:0a:23:51:ac:f1:72:99:f9:ab:1f:3e:1c:1a:0f:43:97:
         a7:ea:94:2f:5d:30:c0:98:c4:c8:41:dc:6f:59:5d:17:d0:1a:
         fc:e0:88:ee:89:68:bd:65:9f:eb:4c:1d:49:99:0a:ca:50:96:
         73:07:30:8e:50:3f:62:c3:20:e4:e7:f6:44:f0:3d:a1:b6:8c:
         1c:7f:3d:d6:75:e2:43:55:24:4a:04:5b:99:3b:49:69:93:a3:
         66:64:36:0d:5b:1f:87:db:f9:29:16:22:52:20:28:8e:19:b2:
         3e:d9:bf:5c:c9:88:8a:e0:d5:6c:17:ac:6b:24:b9:6c:bb:17:
         c9:dc:f7:b0:f9:a2:7e:6d:64:ae:ce:66:d0:4c:a3:e6:ca:cf:
         e4:e7:41:ec:24:54:0e:26:b7:da:ec:91:77:37:4e:3b:4a:15:
         6b:0c:56:11:ae:1a:f9:08:ee:38:3d:4c:16:12:55:ea:d0:52:
         ce:94:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----