Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
File:                     duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft (raw, json)
Hash identifier:          +pQpWtoGl8MISe/vDDeb2VtUuEoHKUhPiOedI6KKCUg=
Subject key identifier:   EC:8D:9E:29:B6:69:D3:40:4E:47:6E:F3:7C:89:B1:01:8F:88:7A:84
Authority key identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
Certificate issuer:       /CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Certificate serial:       01962F74D0D8C810CDEBC80EDFD87461D625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl (hash: tDSC00hWgwmvWrGx/JSsolDy263nbehh4MHSQGvQLpA=)
                          2: x6TyoeiDznZ5SRtqywkNMGfQA5k.roa (hash: 1tj6LlfsRsB/tYIfqw9rOc/KrLH+6NOSUXP1XdEdR5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d0:d8:c8:10:cd:eb:c8:0e:df:d8:74:61:d6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=ec8d9e29b669d3404e476ef37c89b1018f887a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:83:0d:d8:f8:ff:0b:dd:a2:c0:57:f8:e9:
                    bd:7b:8e:75:6c:9f:09:06:9a:71:33:7f:97:4d:86:
                    59:b2:3b:38:49:ea:03:86:5d:89:e0:e9:ac:9e:6a:
                    44:f9:4d:dc:34:2e:c7:99:9e:82:84:8d:87:c3:c3:
                    6a:82:cc:b4:28:db:0f:72:49:8c:53:20:2f:d0:fa:
                    83:2d:0c:f6:db:95:5d:9f:bc:1e:f3:0f:5e:d9:40:
                    eb:4b:be:5b:09:69:70:12:66:b3:95:30:a9:0d:f1:
                    06:10:50:eb:9a:99:d6:cb:a2:6d:3f:45:88:1a:60:
                    d1:7f:37:7c:8e:38:b3:e6:d7:91:ad:bf:59:10:f9:
                    c3:0c:ae:ba:64:63:37:58:26:67:ac:dc:1c:70:45:
                    5a:ce:90:97:d8:4a:1e:05:46:98:3d:b0:92:5e:03:
                    1b:37:af:52:ff:58:be:c6:56:03:4d:30:f4:12:d3:
                    1a:9f:bf:9d:95:2b:a4:60:0f:21:92:dd:b5:8c:ce:
                    95:a4:23:0c:53:9f:f8:b7:e9:ff:6d:95:4f:a3:0c:
                    e6:61:c4:36:41:bb:4f:09:b6:8d:2f:4f:85:72:8b:
                    c2:7d:cf:67:9b:fe:5c:6b:79:a0:32:8a:ed:4a:1a:
                    a2:7e:8e:02:87:b0:e1:92:71:7d:2a:c5:f1:53:a9:
                    b1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8D:9E:29:B6:69:D3:40:4E:47:6E:F3:7C:89:B1:01:8F:88:7A:84
            X509v3 Authority Key Identifier:
                keyid:76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:33:28:56:3b:cb:86:19:8a:03:29:45:ba:56:23:b6:1d:61:
         6f:34:d2:6a:7b:85:44:47:c5:fc:af:19:92:98:bd:88:a0:99:
         7e:f8:34:28:f0:f9:3c:0c:a2:31:3d:87:29:e9:4d:e7:96:c2:
         18:37:99:74:56:2f:37:a6:d6:51:5e:19:cb:9f:ad:a6:eb:a5:
         8f:50:c0:63:20:06:7c:be:54:c1:31:19:96:93:f8:50:29:41:
         e0:49:e7:50:d4:4d:aa:ef:78:09:84:89:c1:76:37:3d:83:a9:
         83:8a:60:c3:9d:65:31:b8:44:90:1f:da:b9:24:72:17:5c:7c:
         3c:0d:a3:99:bc:23:11:4c:fb:d1:d7:01:1d:ba:1b:0e:2f:7f:
         48:85:d1:c9:17:78:e4:19:22:b3:99:4a:b2:a3:1a:7e:62:33:
         c9:4f:73:dd:48:7d:c0:cc:78:f4:5b:3d:bf:fd:2f:1f:9f:10:
         5e:23:ef:13:32:e7:0c:dd:b3:0d:6e:2e:61:86:b0:72:96:51:
         0a:93:d6:c0:92:da:3b:45:76:e9:bd:97:fc:10:de:ed:c3:5e:
         cf:24:ae:30:a3:50:c2:1c:c5:2f:b7:c8:5a:31:1c:4c:cd:0a:
         f0:87:90:01:f1:52:ca:54:f0:a3:9b:26:8b:8c:6b:8d:4f:2c:
         a9:62:78:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----