Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File:                     Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier:          9+SfQTB9ScbGzmUhG+BW8hDOglCwuINqATble4Y3+H0=
Subject key identifier:   39:7E:B8:D2:77:19:DE:4D:29:77:4D:07:D2:76:6F:C4:82:D1:36:A8
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer:       /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial:       01962F3D5D788BEDD4314F219CE115B19B79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: 1li935jrG3nllxmzGF9zsowUfxT3hlZHsmMUcYaGYcQ=)
                          2: ayJmzYBNfcdq3NPJ8M3cFOVfzCs.roa (hash: 0bZlkgsn21QwI80X8EQdx07gNzwAcET4bz9RvPxajWM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5d:78:8b:ed:d4:31:4f:21:9c:e1:15:b1:9b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=397eb8d27719de4d29774d07d2766fc482d136a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:34:f1:89:af:5f:b8:bb:f2:18:d5:58:83:9c:
                    f0:df:59:45:e1:77:83:03:65:c5:b0:7f:c4:99:fd:
                    f3:50:b3:04:4e:53:8e:fb:ee:5d:90:b1:db:9d:66:
                    13:0f:57:80:d4:b6:46:5f:63:e1:34:cc:3b:f8:f5:
                    a5:41:56:9e:b3:2a:b3:07:47:67:c0:6b:80:f5:33:
                    92:20:9d:e0:1f:3b:a1:44:c6:26:c6:27:21:01:b2:
                    f7:e0:50:12:6d:10:4a:59:57:3f:0a:d8:3e:ae:41:
                    92:f7:7a:3a:54:6e:bf:31:d8:94:b8:3a:a2:14:1c:
                    58:83:9f:01:19:eb:39:7d:32:41:69:3b:f8:a8:0b:
                    04:9d:2c:e8:01:dc:45:48:f1:b2:f8:f5:cb:61:8b:
                    9f:46:ef:2a:b1:ce:2c:f8:7b:74:87:71:77:73:3b:
                    69:01:b3:69:be:2c:ef:88:c5:8d:fa:34:45:b6:fe:
                    42:d1:af:c4:fb:35:13:a5:2a:f1:b9:18:75:3a:04:
                    fd:ed:98:07:09:01:e5:d7:91:7b:42:86:d8:80:e0:
                    ac:23:56:b4:c0:7e:cb:de:2f:6f:5b:7b:98:06:8e:
                    d0:c5:46:12:6f:bf:c9:02:db:9d:97:17:c7:4f:c3:
                    58:48:0b:c7:7a:06:49:8a:80:1c:55:de:45:19:5d:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7E:B8:D2:77:19:DE:4D:29:77:4D:07:D2:76:6F:C4:82:D1:36:A8
            X509v3 Authority Key Identifier:
                keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d4:0f:e1:63:b2:69:ba:52:4c:8a:51:d4:07:c1:88:39:01:
         49:7c:0e:11:1d:97:9a:e3:be:3f:3f:d5:50:e7:81:fe:a7:4c:
         ee:b3:b5:b4:d5:6f:04:44:36:44:75:72:73:0c:fc:70:4a:aa:
         bd:61:43:2f:a9:bb:8f:fd:f4:f0:ad:12:39:ce:5a:ae:73:d4:
         3f:d1:ff:77:cc:de:ec:98:a1:21:65:79:3a:8b:50:da:c1:fe:
         15:d8:65:22:e9:fd:4f:14:d5:31:2e:e0:6a:04:e0:35:1a:91:
         6e:f2:5b:c3:da:3f:13:62:e6:5a:a8:8b:f2:7f:6f:87:12:fe:
         18:33:56:7c:82:2a:c6:a4:ec:ba:f1:99:95:8e:3c:1c:d7:e1:
         ba:43:b5:b1:7a:03:01:d2:39:fb:3d:92:9a:54:60:56:1b:43:
         e4:df:9c:07:07:2a:41:d2:b4:0f:3b:c2:ac:a6:5b:ac:00:91:
         d0:72:15:21:7a:96:74:6a:17:da:8f:cd:07:5d:01:c4:41:6a:
         f1:a7:b6:b9:40:22:d7:8a:c5:3c:21:83:76:02:06:9c:94:47:
         34:87:8b:56:b5:f4:30:de:4c:be:84:50:41:72:99:d9:ff:b9:
         0a:6b:01:98:0a:0f:1d:46:52:dc:94:86:c4:9b:90:0e:02:63:
         58:ee:8f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----