Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File:                     DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier:          eHbNK94e/3HQf05Bfa+hId+M/kVtQY0Fz8StrLW/iPA=
Subject key identifier:   64:07:47:0D:A3:3D:72:36:3F:C1:A2:6E:8C:BD:AE:97:86:50:F0:4F
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer:       /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial:       01962DF3B4D1A8B1D030FE016B38E9E0FEA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number:          0846
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: 7g9WDnfwGC695A3gUF6F3XaKlmY.roa (hash: TzzYrMCZOYqgatk0txvOXfw1Un0jwLj7jZ0x8AM5wkA=)
                          2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: hwKt7b0nbabRYZgWUybhU1XqXMb2PYw0CSUaIItHsP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b4:d1:a8:b1:d0:30:fe:01:6b:38:e9:e0:fe:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=6407470da33d72363fc1a26e8cbdae978650f04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:40:b4:d2:c1:71:00:95:11:31:3d:a6:a7:
                    83:13:32:9a:db:75:60:77:af:61:f5:73:1f:1a:25:
                    a2:bf:2d:5b:9e:3c:d6:52:10:0c:59:6d:63:bf:c5:
                    a2:41:35:82:3c:28:f1:8e:81:14:c5:0b:4f:e4:75:
                    5c:9d:0c:60:9b:87:7b:38:b6:4d:4b:65:a7:fc:ea:
                    20:aa:5f:60:e7:2d:38:c0:ac:78:49:f3:6b:e7:55:
                    65:47:f6:b2:62:98:ad:da:e6:a4:72:69:38:81:87:
                    4f:a6:d4:44:37:98:5a:03:9f:09:4c:0b:22:b1:9d:
                    7b:1d:52:05:0e:e2:9f:26:52:ab:a8:03:c7:88:53:
                    e6:e3:99:b0:86:7f:09:c7:b4:a1:c5:ff:f0:af:d8:
                    a6:1e:32:9d:80:a7:37:83:ea:f1:2e:a2:7b:38:ec:
                    81:97:67:4e:44:b7:7a:c3:c8:9f:1e:be:f4:49:77:
                    4d:01:fe:c9:e0:d3:5a:ad:c4:ea:23:8b:73:73:ce:
                    b1:db:a9:32:83:9f:c3:8a:a2:c9:0a:8e:8a:aa:42:
                    c6:c8:47:bb:85:d5:21:61:73:1a:4f:f9:1c:90:cd:
                    89:a4:c9:c2:a2:eb:6c:bd:9e:7d:20:e6:ba:92:25:
                    2b:9c:8a:c1:cf:2d:5f:0d:17:3f:fb:5d:a1:c4:c6:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:07:47:0D:A3:3D:72:36:3F:C1:A2:6E:8C:BD:AE:97:86:50:F0:4F
            X509v3 Authority Key Identifier:
                keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:30:8e:ea:48:36:af:4a:f5:cd:aa:ae:93:72:22:4a:be:64:
         1b:bc:42:ec:4b:16:ba:e0:3d:3b:33:9b:5e:2b:1e:61:fd:fe:
         34:a3:9d:e0:52:df:50:4a:ad:16:d8:da:c8:33:c4:1f:04:6d:
         14:18:e2:12:76:ab:21:cf:ee:5d:fd:61:8a:ec:da:60:84:4f:
         00:c3:c1:5a:8e:ea:66:c6:9a:17:a2:19:12:05:3f:77:4c:81:
         ed:80:a8:f9:ce:cb:dc:bc:ca:a6:a0:46:93:b4:fe:a8:1a:50:
         27:23:68:f8:14:4b:5e:56:40:25:94:25:6c:63:dd:09:05:ca:
         e7:09:df:04:fb:9e:b7:49:1f:b7:f0:98:7e:c1:dc:cf:72:90:
         10:49:8e:70:8c:70:a8:32:fc:6c:a1:41:4a:cf:a2:2d:64:13:
         97:8d:01:26:70:6a:43:08:da:f4:56:db:23:32:83:d2:bf:f4:
         c5:95:13:59:be:c8:2c:b9:ff:eb:29:36:b1:49:37:66:a7:d6:
         78:37:ea:92:b4:07:6f:d0:b6:3f:7d:99:f4:34:73:21:a6:ad:
         dc:37:66:4c:ad:d8:57:eb:a8:d2:60:21:53:e1:9b:28:d9:e2:
         22:1f:b6:3a:8e:11:b7:1b:0d:b7:f0:1c:9b:82:6b:db:1c:0e:
         8f:de:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----