Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
File:                     dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft (raw, json)
Hash identifier:          yQmsR/u1kSNRpzyiTidubw11cpMhadBgxraB38kZQEQ=
Subject key identifier:   D2:2D:BB:EE:9B:ED:EC:2B:69:1C:3F:F0:F8:AE:71:A3:78:FF:20:06
Authority key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
Certificate issuer:       /CN=76d44d97653a06d846b2443535b83e8cbc39d928
Certificate serial:       01962ECF75D477DD2AD6F2C91CC9DD9C3E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
Manifest number:          0158
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: BuJq75MR8DCU5hnHyoHSIDgc_Go.roa (hash: WYFNii4ePD8MQfSQILNRQNPBQSQiOXOjnZErIQSWojg=)
                          2: XwqfYEtRGpVmtxULo8IDWcyQXIY.roa (hash: Qx5i/G9uqQlJ2PX+MsevYGq69DXaRpp3PFojSyjEu/0=)
                          3: dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl (hash: q2QbL5cJ0pxVb+MBXJR/PvQwjv/gIA5ZgO7ixZ+JsEs=)
                          4: kuduuaUOyGakCO9Tn5rzfY0i8Hk.roa (hash: Q9PoN1sRWuaTY4KshxWn50PXqDpvKrsvU7VleCWrxSA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:75:d4:77:dd:2a:d6:f2:c9:1c:c9:dd:9c:3e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d44d97653a06d846b2443535b83e8cbc39d928
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=d22dbbee9bedec2b691c3ff0f8ae71a378ff2006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:b8:30:00:23:ea:1c:ec:18:85:7a:89:9a:
                    fa:4b:cb:19:5f:57:8d:a1:fd:88:c0:26:df:f0:7a:
                    9b:d9:5e:99:4b:82:3d:f3:67:1e:6f:e0:13:e8:c3:
                    84:f5:63:63:c0:c5:be:6d:3a:a4:3b:3d:fa:4c:54:
                    ab:89:53:fb:a2:bf:e2:13:10:cb:ec:d7:cc:a0:1d:
                    44:bc:0f:be:72:96:8e:5e:54:bd:e3:80:e3:9e:a6:
                    c5:e8:11:23:13:f2:0f:22:ff:2a:9f:53:c9:40:f2:
                    75:ca:04:1d:1c:7b:0f:70:5e:f7:8a:17:e6:93:b5:
                    07:3a:5c:12:ca:82:f0:b9:c4:ba:d3:98:f8:e8:8a:
                    97:fd:bf:b0:e1:5b:91:85:83:0e:a4:f1:a1:eb:6a:
                    b2:f1:ba:57:13:98:f9:10:87:63:8b:cc:6d:36:4e:
                    e4:5c:bd:11:f5:54:84:eb:b0:66:87:61:13:0e:09:
                    a8:ff:35:ac:28:3b:af:8f:80:ef:00:ab:e1:c0:26:
                    0d:5a:12:11:55:29:ae:7e:4f:5b:13:b8:72:87:fb:
                    f1:16:05:8a:e4:24:7e:d1:7b:48:f1:c9:ab:94:5b:
                    aa:35:d8:11:59:db:ab:e5:47:93:1b:72:32:5d:6b:
                    8d:63:62:ae:ed:bf:40:a2:3c:51:d1:42:b5:da:eb:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2D:BB:EE:9B:ED:EC:2B:69:1C:3F:F0:F8:AE:71:A3:78:FF:20:06
            X509v3 Authority Key Identifier:
                keyid:76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f2:ef:7a:b6:a2:85:12:b3:15:0e:d2:fb:80:73:69:6d:fa:
         f0:78:8a:3a:98:67:49:7f:87:6f:3a:bc:8f:90:d8:52:f6:59:
         ce:10:a2:fb:5a:61:9a:8b:1c:74:68:cc:73:c3:62:4b:74:02:
         20:2f:77:3b:8a:25:0c:80:aa:63:8b:2c:10:69:59:1f:58:04:
         b7:40:99:90:00:10:4e:8b:f3:c5:4a:ae:f5:19:4b:49:72:8f:
         fb:dc:bf:d7:7f:42:47:ac:cd:01:02:24:55:0d:51:41:6e:e2:
         c8:e3:7b:0e:f8:69:a4:c4:31:a5:5c:8c:65:c1:12:9d:d2:2f:
         56:63:c1:d1:ed:ac:ab:ae:33:39:74:13:71:2f:19:9b:f0:a9:
         ff:07:44:0b:7d:91:c7:9c:e0:d5:ac:67:f4:f7:21:f0:51:45:
         4a:95:2f:36:ed:75:12:a0:13:96:56:94:10:21:73:97:af:92:
         59:50:18:0d:ed:fe:7f:3f:12:3c:f2:3d:3d:d6:37:84:84:2a:
         6e:a1:1e:88:4e:93:e8:f6:cb:3b:e3:49:15:a8:4a:bb:75:03:
         92:1f:3c:84:58:dd:2b:12:41:b2:60:e1:41:06:de:7e:89:cf:
         d0:ff:8b:0d:ef:06:f4:44:d4:07:c7:5f:75:83:48:77:6b:47:
         ee:7a:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----