Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
File:                     dXFLWBraGW41UcCM52JDvgWLROs.mft (raw, json)
Hash identifier:          bD627LFipWbF0pPCuaLsKFdXwhDfB1+aw/ROv20Oneg=
Subject key identifier:   92:9D:42:92:A5:16:81:50:DF:26:28:F0:6B:31:20:64:D0:5C:F3:B4
Authority key identifier: 75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
Certificate issuer:       /CN=75714b581ada196e3551c08ce76243be058b44eb
Certificate serial:       01962F3DD5C1904C542A15A621C7FC5098C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: dXFLWBraGW41UcCM52JDvgWLROs.crl (hash: IP4jjVWQOGbWwU4bJqwyo+OE1fixx87vXs6ojPTb/84=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d5:c1:90:4c:54:2a:15:a6:21:c7:fc:50:98:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75714b581ada196e3551c08ce76243be058b44eb
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=929d4292a5168150df2628f06b312064d05cf3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:a8:63:f1:f3:b1:1f:7b:ce:cc:5d:7c:ea:
                    39:74:c6:1e:09:42:4b:b2:d8:3a:a6:d5:62:e0:46:
                    4e:20:e4:81:40:1d:52:38:ad:c9:0e:23:71:8b:62:
                    1e:41:eb:b3:f5:c8:98:0a:31:32:41:62:a6:b8:33:
                    9e:c2:76:92:ab:4a:2f:c3:8c:cd:46:c5:9f:28:b3:
                    57:05:73:22:7d:41:0c:cb:f4:81:ec:cd:46:2b:68:
                    9b:95:08:99:71:13:f8:ad:e1:85:78:c2:32:05:53:
                    1d:e9:2d:c3:fa:23:c3:9e:8d:dc:5c:40:c7:82:90:
                    63:61:a0:d0:9c:8d:52:e5:0b:a0:4b:fa:31:70:16:
                    62:a3:c1:24:3d:6c:05:42:08:d0:65:05:a7:92:ea:
                    18:fd:03:7c:89:6f:fe:92:c9:49:76:5d:87:60:d7:
                    8e:cc:89:0a:9d:5a:aa:e0:cd:f3:80:22:a9:4a:2d:
                    fa:43:30:9c:32:78:68:c8:8f:1b:d4:76:1c:b4:40:
                    cf:32:00:f9:3b:dc:75:83:8a:b5:62:67:f6:ef:f5:
                    30:4a:50:f7:10:0e:7b:d5:10:e2:53:92:e0:56:8e:
                    5f:96:07:8a:8e:0c:a8:a3:a4:d1:08:28:f8:18:85:
                    9b:d9:44:6e:bf:e0:ce:ba:a3:45:7f:ae:57:b5:f2:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9D:42:92:A5:16:81:50:DF:26:28:F0:6B:31:20:64:D0:5C:F3:B4
            X509v3 Authority Key Identifier:
                keyid:75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c3:79:72:82:90:e6:37:a2:d0:b2:d4:52:09:c6:65:7b:d3:
         69:fd:78:f4:1b:c7:37:3a:11:83:a2:f4:2c:5f:3e:bb:db:3f:
         45:06:05:0f:a0:3b:d1:89:73:14:2d:83:11:bf:ee:1d:3a:52:
         03:1c:70:93:72:0c:f6:e0:de:af:0c:75:bd:f1:40:fd:23:11:
         f9:b0:a6:bc:fa:33:a8:40:cc:da:23:81:ed:bf:73:34:cc:68:
         60:81:ae:a2:89:e3:69:6a:57:87:b7:14:35:d8:0d:0b:6e:f4:
         4a:81:68:88:5d:45:ae:bf:20:45:0a:5b:03:ab:98:87:60:c4:
         9d:fc:b3:ce:9b:d9:8e:da:c8:e4:62:3e:26:b8:c9:9a:50:00:
         2e:37:e5:40:63:19:2b:9b:83:0e:49:ee:07:7e:4a:5c:07:92:
         0d:63:23:aa:b0:9f:2e:51:fe:a9:c5:da:07:37:e6:89:d1:3f:
         0d:ae:78:45:eb:e6:00:4d:0d:1b:46:9d:d3:73:ea:bc:58:77:
         e7:2e:1d:49:f0:4e:b6:42:3e:de:c6:c2:a5:b1:f6:af:5e:0a:
         a5:f5:0a:25:ed:88:72:55:4b:e4:52:e0:90:98:da:b7:86:35:
         82:12:e0:83:85:ca:b6:ba:a6:7b:b1:bd:6a:5b:ef:69:9e:cf:
         f9:dc:fc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----