Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File:                     _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier:          7Ia/3k7czTA15lk50RMgxRyrumXeimlsrz6ldywOP7k=
Subject key identifier:   C8:F3:96:15:85:C1:1F:55:BA:51:86:BB:A9:92:57:C6:0A:2D:F6:65
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer:       /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial:       01962E9922BF521826123DB078FDB7A1AF0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: i6N9K3Vo8ybdj2/xkE2ooHb2mq8tm2RcKlkR9O1f1io=)
                          2: uzHsVm3pK-eWySg6DxW1LNadfN4.roa (hash: f7Ekdfxt1w1Ik7dpXGT0WWQ4k0292INTL/KsMP+l94c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:22:bf:52:18:26:12:3d:b0:78:fd:b7:a1:af:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=c8f3961585c11f55ba5186bba99257c60a2df665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:a5:38:5c:f3:87:64:64:8a:51:d7:a4:4a:
                    57:bc:ca:0f:8a:eb:ed:35:af:e0:52:c6:05:fb:d6:
                    ee:2a:c2:5a:6d:01:78:33:da:fa:88:ec:1d:a4:f1:
                    db:1d:94:c4:38:a0:a1:06:e8:2a:23:dd:2d:88:d0:
                    03:a5:08:c8:88:56:40:1a:e3:71:13:49:22:4f:4d:
                    8d:e7:c9:19:33:38:2b:2b:70:c1:41:41:aa:5a:32:
                    94:f8:16:8d:3d:fb:40:41:e0:45:02:1d:0a:73:00:
                    61:41:51:f9:70:d7:3b:5b:be:5a:17:10:1a:d3:d5:
                    f3:af:af:41:83:ac:58:22:41:77:0d:df:d8:a2:ec:
                    8a:66:db:d2:30:da:85:6c:ab:3a:2e:f0:3b:92:5e:
                    ca:8c:98:18:46:64:e0:20:af:99:08:2e:ca:a7:51:
                    c8:6f:57:7b:5c:13:70:9d:eb:a9:ca:cc:b3:67:12:
                    22:86:ad:e2:57:51:4e:8a:f4:e3:8f:01:23:a7:1e:
                    72:87:59:79:49:2d:43:1a:9e:ae:67:92:46:6a:43:
                    1b:46:63:d8:f0:9a:b5:2f:e9:17:12:da:56:2f:da:
                    7a:0d:94:d9:5b:69:22:c4:e3:27:f8:d8:a8:48:1f:
                    43:71:4e:79:16:c6:f2:bb:04:bc:aa:5f:1f:82:dd:
                    bb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F3:96:15:85:C1:1F:55:BA:51:86:BB:A9:92:57:C6:0A:2D:F6:65
            X509v3 Authority Key Identifier:
                keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ea:db:59:f8:e9:d1:6e:8f:e3:13:98:24:42:24:38:1b:9b:
         52:6f:58:30:c3:01:e9:d1:89:52:d6:5c:46:9d:f3:85:82:40:
         87:a5:d2:a8:f0:f7:d3:64:d8:c9:11:93:e5:58:ad:e9:06:cc:
         06:e8:23:fd:46:1b:7e:d7:7a:de:91:52:b9:7d:24:06:c8:29:
         88:50:2f:26:a8:87:bd:ea:e1:e9:b1:c5:0f:d8:ea:bb:f9:3c:
         72:a8:a8:75:34:32:b6:63:d4:98:ba:46:90:91:ff:ed:c8:17:
         c5:fd:04:8c:ae:9b:07:98:9f:88:32:1f:a3:a0:f1:e2:59:14:
         6c:84:6c:3d:72:97:73:8d:b7:11:cf:35:50:1a:7e:ac:df:68:
         67:65:cb:ad:46:cd:e6:4a:41:25:20:9f:4b:5e:51:a8:98:be:
         d6:2c:30:25:98:88:4e:ba:d1:90:cb:39:b3:c1:77:a2:9e:ca:
         02:cd:f1:e2:98:3e:15:1f:94:64:a3:9f:4d:fb:d3:04:f8:60:
         23:4f:51:bf:2a:f7:ef:d7:35:a5:04:8b:98:16:bf:fc:e1:98:
         49:fb:0e:77:25:c0:fc:92:dd:08:5a:5c:39:f2:c3:b3:3e:61:
         1c:c7:12:f4:df:2d:25:f8:a2:37:e9:c5:70:14:ad:18:be:3a:
         a2:f8:0a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----