Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File:                     d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier:          ZfDRxWKh5ZhaKnXvQdGf7FIB6kCtwwIAmeevaOCAjoE=
Subject key identifier:   F9:F2:FF:13:71:57:DC:16:6E:3B:51:06:45:EE:F2:2C:D6:1D:9A:81
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer:       /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial:       01962ECF9FC543E3533D64A9A9C850B32FDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: 8sj8akoHRTPz11r3jLvMNT_NbaE.roa (hash: P2s2WOOKeXdgHhsxpLmfEClu5cRmFqEQjIJDZyeuzkg=)
                          2: WGokscrqIFlveSQ3XENDC_qxhbE.roa (hash: +LF+EeNcjsZJ5uw2CKGcqJlYFeUGcZcbeYs75HR4O74=)
                          3: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: u8Jso7ZoDvY6ht4vOYn9zP7LTgLsKiezyZDA8A1oUf4=)
                          4: dnAa52jzMLokgprr8j83t7M0O7A.roa (hash: RXb076NQLFmuO+ZHzSd4Sn5TggUypoGBas2+Hq6jEsg=)
                          5: wIY_dvatExTHxCY_kuzX-QET3Ok.roa (hash: kjV0Ojugy4LwLs+YAfKt1FqrpFMJ2uDqQ/zPE3W7Ris=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9f:c5:43:e3:53:3d:64:a9:a9:c8:50:b3:2f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=f9f2ff137157dc166e3b510645eef22cd61d9a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:4a:c1:c6:5f:87:55:72:b1:58:da:de:81:
                    2c:b0:2f:ef:9c:90:05:de:6a:f3:e1:c9:88:69:38:
                    d5:ff:43:a6:5b:c3:b2:d7:58:c4:a9:c8:bd:4d:22:
                    fd:97:a4:a6:10:76:43:8d:c0:f5:cd:0f:fd:62:af:
                    aa:a0:5f:67:54:cd:5c:b4:62:1d:50:e9:f7:2e:d0:
                    e5:b7:05:a4:7b:5d:9f:16:43:1a:80:a3:cd:f8:85:
                    89:c0:e0:e3:00:9d:ae:1d:45:4a:45:57:88:49:de:
                    40:31:f9:d8:bc:75:46:60:db:36:88:17:93:87:2b:
                    4a:f5:f9:f5:17:3f:e3:a8:51:fc:42:c0:04:bb:7e:
                    d4:f6:fa:b3:46:0b:d4:ad:e6:c9:49:55:b3:32:93:
                    6e:86:91:64:7d:24:34:15:83:af:1b:5a:ab:34:7b:
                    af:2b:43:07:a2:ef:d4:25:9c:d6:ff:5c:33:39:7e:
                    ff:fe:43:47:43:97:2e:7e:90:3d:b7:e5:60:c9:71:
                    64:7c:49:67:e5:a2:3f:55:3e:d3:b3:e7:ef:53:ce:
                    74:ba:b4:a5:fb:ff:c6:49:93:ed:de:c8:b3:86:c6:
                    93:11:1b:06:d8:6f:3e:14:cc:16:6b:84:c5:3b:03:
                    de:67:96:4b:c5:fd:9a:7a:16:42:74:97:bc:3d:5b:
                    bb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F2:FF:13:71:57:DC:16:6E:3B:51:06:45:EE:F2:2C:D6:1D:9A:81
            X509v3 Authority Key Identifier:
                keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c0:7f:a2:b3:77:f2:09:6f:0d:f4:80:f0:1b:3f:c0:99:2a:
         c0:77:93:1e:a1:fd:c1:d8:76:fb:6c:f7:55:0f:ab:a1:b5:54:
         5e:11:c4:0b:c1:19:21:9b:2e:67:8e:2d:40:74:20:bb:61:99:
         9c:04:17:cc:f3:13:95:7f:10:ac:aa:81:4b:56:14:16:8a:24:
         b8:96:bf:aa:9d:74:71:b8:14:11:44:29:10:fa:90:52:3e:bf:
         3c:61:fd:82:db:81:54:f3:3d:14:6e:72:b3:7e:9b:75:68:6a:
         3f:cd:3c:7e:d8:55:08:8d:20:83:75:88:b7:06:59:98:f4:3b:
         51:71:71:8f:63:0c:71:48:fa:f2:4c:46:11:7e:f5:f4:76:07:
         29:de:26:82:97:06:53:cd:02:31:c9:7c:43:ae:90:88:cf:79:
         6e:d9:67:ae:16:7d:e8:b5:39:54:a7:d7:b7:37:d1:c4:91:f2:
         42:12:0e:01:8c:8f:4d:49:6b:a9:fc:12:26:24:68:a6:93:1b:
         df:35:44:b8:af:e5:74:86:a7:3a:16:df:ac:cd:c3:a4:31:fc:
         43:47:de:eb:9b:e7:33:ee:4d:97:bd:37:ca:3f:57:5d:bc:35:
         af:9e:b2:4e:d8:1f:f8:57:f6:1a:83:70:83:7b:99:bd:df:d0:
         e7:0c:92:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----