Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
File:                     dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft (raw, json)
Hash identifier:          oSbKi5Un8djZ/xNG3dShXCGXpTF7BIcdfv78JYVZ14Q=
Subject key identifier:   4E:AD:DD:66:9E:02:44:90:37:94:CC:85:11:22:ED:F0:07:66:2F:97
Authority key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
Certificate issuer:       /CN=749ea3b1e58ba060b41fc2a078f6016264759664
Certificate serial:       01962E61BB91EAB56587DE13AAA6D0A97882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: 8ufIDITsiM6oD6O8MQCNfNFjxSc.roa (hash: 8hR826cHBgGmwXj/DW4UGY4gM4QS8fSh6KW7UDD9poY=)
                          2: dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl (hash: j0EtCtppUnaeYzJ8iaFSV+PaYS7W8eYYRNQfsmTn6J4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bb:91:ea:b5:65:87:de:13:aa:a6:d0:a9:78:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749ea3b1e58ba060b41fc2a078f6016264759664
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=4eaddd669e0244903794cc851122edf007662f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:54:4e:c4:64:ac:3f:e1:e0:08:ea:5a:a3:
                    01:a3:0b:e3:a9:ee:aa:31:42:32:d9:66:bb:5e:e1:
                    1f:46:22:19:c7:e8:ac:e8:71:a0:0d:25:c8:bb:c7:
                    de:23:0d:6d:1e:21:9c:cb:57:5e:58:e8:aa:dc:d4:
                    91:14:7c:8a:20:8d:52:ea:fd:b7:e7:18:3c:fc:1a:
                    2c:09:e3:0d:af:5f:11:16:dd:d4:d4:ea:48:b3:0d:
                    fe:42:06:5e:9a:ab:07:2f:58:88:62:da:f1:4e:d2:
                    e6:02:75:e3:a9:e8:4c:56:4f:bb:f5:a5:61:a0:a4:
                    9d:5e:36:0c:c2:77:53:31:f3:5b:29:0a:ae:c8:a8:
                    96:9e:4c:66:72:43:c5:29:56:2f:86:b4:c5:f1:31:
                    86:f5:54:63:e4:e1:cb:46:99:4d:bf:da:f9:95:70:
                    cf:37:2b:f9:dd:dd:11:d4:49:ea:f7:80:85:96:34:
                    ae:ed:11:c0:18:52:b7:cd:46:32:81:41:eb:08:0c:
                    fe:ec:49:3d:de:ac:8d:26:07:77:34:5a:b6:04:12:
                    1e:af:b5:94:3d:18:65:4a:1f:a1:68:23:66:13:c8:
                    29:bd:c8:f6:65:45:2f:bc:df:6d:90:48:45:0e:4f:
                    a9:96:ca:55:d2:8f:b6:76:d5:ab:f0:8a:a7:30:37:
                    57:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AD:DD:66:9E:02:44:90:37:94:CC:85:11:22:ED:F0:07:66:2F:97
            X509v3 Authority Key Identifier:
                keyid:74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b9:c2:7c:23:ba:c0:97:6e:93:97:82:8f:ed:47:e7:72:16:
         38:2a:80:af:51:bd:c5:79:6b:e2:12:50:b5:d0:c5:b5:d8:f1:
         c9:ac:dd:f0:0d:25:78:6f:c0:02:c9:1a:15:89:20:b1:6f:16:
         5a:15:32:c3:47:af:3e:ba:56:cb:80:4c:41:de:35:b2:ce:0c:
         99:01:92:e9:c5:39:2a:2d:00:4b:05:e8:08:82:30:e1:ec:04:
         03:42:96:73:29:6f:8c:80:44:74:83:45:76:3a:f2:54:81:67:
         1a:56:24:c5:65:d0:20:a8:f9:02:92:c7:92:97:15:e2:2d:31:
         af:ba:89:1d:d3:8d:aa:cf:79:33:dd:b8:86:7f:15:64:6e:46:
         99:a7:26:1d:9b:87:2c:75:07:a7:25:b5:d7:a2:38:03:88:1e:
         50:14:84:1b:26:f0:93:05:a2:f3:a1:66:43:61:43:dc:6d:6d:
         42:6a:1d:fc:e2:0f:fc:b6:21:e7:50:ed:88:f6:ff:bc:1b:8a:
         20:50:eb:bf:cd:5c:4f:f0:1a:eb:f6:07:2e:0d:42:eb:e0:27:
         17:2a:9f:24:89:e0:33:9e:5c:7a:ee:f6:f1:09:80:61:d2:8b:
         e7:fb:82:b1:aa:cd:b1:10:27:ee:5d:93:11:76:e5:b8:82:ac:
         ab:e3:aa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----