Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File:                     dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier:          XSCQS2CaFiwAKTVVh0RgajYxhUFGsIZ9xA9EZVB9V7Q=
Subject key identifier:   F7:4E:42:7E:73:75:67:B6:6D:B5:F1:FA:30:60:12:49:80:D4:24:5D
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer:       /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial:       01962E991A497A1AEC0F85A77F679870B8C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number:          0FC4
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: d+k5TDP28Y7mDGo0rt9eRiBcd3ZJ9wkk7IKwGJk5Nl4=)
                          2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1a:49:7a:1a:ec:0f:85:a7:7f:67:98:70:b8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=f74e427e737567b66db5f1fa3060124980d4245d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:ff:a8:ab:df:a0:79:73:6a:83:b0:ac:6f:
                    ac:8e:4c:5b:7e:bd:06:20:67:93:e3:dd:4a:cc:f8:
                    e6:62:a6:9c:82:48:bb:d4:61:2d:fa:8f:9c:1b:dd:
                    a4:ab:60:a0:a8:18:da:79:76:84:20:17:18:99:9d:
                    82:96:da:13:d7:a0:be:b3:eb:b1:29:7c:ab:6f:79:
                    41:94:db:5b:8d:9c:71:0c:ed:83:2a:2b:b3:c0:d3:
                    29:66:58:be:be:8a:10:34:6c:12:0b:92:1f:11:ff:
                    ef:1a:8f:53:c8:69:01:04:f7:18:6c:32:9d:2b:70:
                    44:39:2b:04:31:9a:5b:0f:86:a3:0c:5e:c1:39:0d:
                    39:1a:df:da:2b:a4:56:19:14:94:7f:fe:ca:a0:07:
                    4d:70:34:c8:3d:b6:2e:20:82:12:b5:d8:1c:a1:73:
                    aa:7a:90:9b:d9:59:90:f0:e8:ef:96:c3:52:59:1a:
                    d4:08:e0:b6:a7:6f:f9:d0:07:b1:b6:d9:ef:c0:17:
                    07:63:2e:6d:a1:90:35:83:c3:73:9c:f0:48:c7:c2:
                    86:df:a1:7a:4f:6b:93:8d:d8:ea:54:58:46:55:06:
                    05:55:4a:a8:6a:ed:e4:ca:c3:e4:f7:a1:67:cc:b4:
                    25:52:e1:37:63:5d:fa:98:81:29:71:dc:bd:40:df:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4E:42:7E:73:75:67:B6:6D:B5:F1:FA:30:60:12:49:80:D4:24:5D
            X509v3 Authority Key Identifier:
                keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c0:d7:82:56:62:ff:72:ee:15:df:68:8e:39:f6:d1:50:03:
         50:38:8d:cd:ba:44:2d:5b:21:33:18:9b:c4:e6:03:3f:1f:cc:
         90:a1:e5:d9:70:b3:6e:db:a4:eb:cf:df:77:8c:59:57:f4:0c:
         40:03:91:ac:f6:bb:b6:bb:a1:9c:a6:bd:ec:03:c8:1b:2c:85:
         19:d1:9f:d0:1e:1a:9d:c3:d0:90:e8:72:2c:01:24:72:ea:59:
         07:dd:dc:b8:89:73:a5:08:a7:65:7c:f9:7a:41:c9:31:b2:38:
         db:39:63:58:4b:a8:fd:d1:77:5e:22:fd:91:82:60:f5:57:b2:
         80:f0:0c:59:1f:a7:0e:92:9b:59:cf:07:10:41:9a:45:84:64:
         95:c7:f7:40:d7:59:ef:ef:cb:65:2a:bc:38:8e:25:3d:6a:dd:
         27:84:a3:10:fe:51:c6:00:b5:d2:0e:0a:f1:d4:12:1f:8a:7c:
         5a:cb:bd:a6:0a:50:d7:55:16:64:32:18:5a:50:e1:45:6e:84:
         f0:5b:e8:2d:b2:40:fe:2f:7a:63:3f:9a:1c:c6:34:17:cc:18:
         f8:a2:49:ec:4c:cb:c3:46:70:35:9e:3c:b4:63:2b:74:30:a6:
         60:69:d6:9b:82:59:8a:91:87:24:ee:ca:8e:ca:37:2f:bd:fc:
         be:64:d3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----