Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
File:                     dwrtd5md59Z-nfM_VVkd7e62JqU.mft (raw, json)
Hash identifier:          9lRK8l+45ANAbGD0tgujxtA85SPptODZ7cuutptmKMs=
Subject key identifier:   5E:35:E5:79:9D:E2:FC:89:2B:BA:EB:3C:89:3E:13:7D:4F:83:0F:89
Authority key identifier: 77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5
Certificate issuer:       /CN=770aed77999de7d67e9df33f55591dedeeb626a5
Certificate serial:       01962DF3AB157FADC62E7B891B93CAB05910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
Manifest number:          06EC
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: HD-O2jkuswq0DBtkA_qMAtYHpi0.roa (hash: vMxKnkHwvEkLxZMUSLynqgj1bxvvWTA51P3OBUUHA7o=)
                          2: dwrtd5md59Z-nfM_VVkd7e62JqU.crl (hash: e0ARxU6tfL/j+K+mz6EJP/zif0R03q0OTeZeKDGsZ8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ab:15:7f:ad:c6:2e:7b:89:1b:93:ca:b0:59:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=770aed77999de7d67e9df33f55591dedeeb626a5
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=5e35e5799de2fc892bbaeb3c893e137d4f830f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:6e:b2:5b:26:a5:c9:18:3c:24:70:e8:6c:
                    c2:5a:8b:54:37:d3:9d:e4:70:02:c2:cc:54:e2:01:
                    ad:77:69:11:92:1a:9a:dd:c9:fc:15:33:04:57:64:
                    25:24:83:49:b7:c3:60:dc:e3:a1:96:f1:7b:b2:d1:
                    71:ab:2d:14:e7:38:3e:44:ec:aa:4c:ef:ed:c5:c3:
                    5a:31:16:72:3a:5a:b6:01:91:8d:25:50:bf:6a:c8:
                    76:c7:c8:8d:d1:30:05:27:18:01:d2:1f:fe:6d:bc:
                    06:25:f7:d4:86:06:d6:30:df:99:ff:5e:3e:6c:f7:
                    34:d9:aa:5c:04:c1:e9:a9:54:59:10:7f:bc:43:0b:
                    fa:5a:88:c5:9e:db:59:ac:2c:0f:e2:dd:f9:de:83:
                    4e:5b:bc:66:c4:6e:ef:b9:3e:ec:b2:3a:23:4e:ca:
                    1e:c7:4f:f3:e8:41:5c:8c:01:16:a4:32:00:a5:43:
                    21:03:b9:5f:73:05:e6:3f:4d:5b:27:5c:b8:b3:d0:
                    10:ca:6c:91:78:2f:25:58:23:28:9e:68:a1:7f:cf:
                    3a:e2:56:99:e9:b5:65:9c:90:54:d7:1c:06:e2:9c:
                    f7:db:24:3d:09:f9:34:8a:b9:b8:ef:62:80:d6:a4:
                    f1:b4:e7:ab:d0:b4:03:be:1c:aa:a1:37:bc:a7:40:
                    d8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:35:E5:79:9D:E2:FC:89:2B:BA:EB:3C:89:3E:13:7D:4F:83:0F:89
            X509v3 Authority Key Identifier:
                keyid:77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f4:30:a3:09:fb:db:fb:85:7b:46:df:ec:fe:5e:de:6b:48:
         84:82:61:10:cf:75:35:1d:91:a8:97:99:c6:af:56:89:ab:97:
         a6:96:7b:5d:0d:0e:76:af:6b:ef:a4:38:a0:7f:5c:10:9e:a7:
         61:fa:33:30:7c:ca:5d:b2:aa:5e:50:ec:db:81:61:60:33:16:
         b4:9e:65:f6:d5:de:8a:37:1a:23:20:5a:58:ac:47:9e:35:c4:
         d1:b2:37:35:26:dc:ea:64:5c:4c:01:ce:31:60:0a:e7:3f:2f:
         22:c0:b0:a2:5b:08:34:0f:b5:93:8d:b0:d3:ac:c5:1d:4a:5d:
         c5:c1:56:a8:49:f3:27:ed:75:16:5a:33:82:b7:f6:a0:3f:c0:
         9c:38:43:1a:6f:07:c0:a7:8c:54:81:03:dc:0a:46:3b:e9:c4:
         f0:4f:17:44:2c:3f:88:89:35:ec:78:94:11:20:93:74:00:22:
         1c:df:a2:a4:30:8c:1a:eb:4a:f4:0d:38:fc:ae:21:ec:f5:15:
         c8:bc:bb:8c:0e:ac:62:5f:26:3f:b5:1c:a0:56:f7:54:19:fd:
         d2:74:a0:df:20:ac:21:47:ca:47:e4:53:a9:5b:5d:b4:b4:90:
         f2:cd:1c:b5:d0:27:f1:6d:e7:95:ff:d0:f9:f6:f6:f1:50:1e:
         d2:72:4f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----