Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File:                     dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier:          aFg6iX84WqFTfuZjTh+IyFaexq5qne2H18AfuQ95xBQ=
Subject key identifier:   49:4F:F0:26:C6:5E:C3:69:34:C2:61:C1:E6:14:64:AA:06:AF:D2:EE
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer:       /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial:       01962FAB2F78E72B5BB49F2D1B86CA11D579
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number:          147F
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: SmenFq2eO29wVInO8xQQnEozH4M.roa (hash: NLqfCsW+19ubwmofae6n/UEN1RfOh4ZI/s4/YAFk4k4=)
                          2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: ABfEfKZNewy65A8t4DlB47AbhpRLLoNkftNGP21dSO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2f:78:e7:2b:5b:b4:9f:2d:1b:86:ca:11:d5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=494ff026c65ec36934c261c1e61464aa06afd2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:c8:4e:58:36:8b:a0:30:35:94:0a:a7:79:
                    a4:d8:58:f7:3b:f3:a8:d5:04:0d:1f:88:36:06:7c:
                    ca:c9:df:b2:0e:61:d4:f3:50:0f:4a:f8:ec:05:13:
                    cc:d2:a8:68:ae:4d:79:f9:5a:57:c0:07:0d:d5:d6:
                    3a:3d:68:61:45:0d:36:6c:54:92:06:77:7e:41:14:
                    5b:1f:8b:be:6e:83:7f:9f:3f:74:53:f6:83:be:ad:
                    f9:9f:17:b7:de:55:f0:11:68:76:b5:66:ee:fd:f1:
                    ed:9f:82:d9:e9:15:44:a2:15:8c:4e:31:d1:d4:d1:
                    7e:f2:ba:f2:9e:87:87:5c:f4:9e:d4:3d:cf:d6:51:
                    3b:27:eb:d2:b9:49:f2:15:52:2a:76:7a:a7:91:cc:
                    56:d2:23:91:7b:8e:28:67:63:08:5f:96:f1:7c:b6:
                    f6:ea:91:df:b9:7e:36:10:d5:fa:91:06:10:71:d1:
                    3a:e5:1a:14:63:f3:82:bb:f9:cf:4b:04:16:99:c1:
                    9b:b1:29:22:69:b8:d9:66:2d:86:f1:e9:a1:c9:f9:
                    d5:3e:26:42:94:b8:fe:65:b0:e9:e9:a7:e2:ac:e3:
                    0c:70:6b:a8:df:50:53:8d:56:b8:4a:6a:94:04:34:
                    9a:b3:fa:62:3a:ba:bb:0f:ea:71:bb:58:43:ba:ec:
                    5d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4F:F0:26:C6:5E:C3:69:34:C2:61:C1:E6:14:64:AA:06:AF:D2:EE
            X509v3 Authority Key Identifier:
                keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d3:62:ab:e3:27:a7:60:b8:57:5b:4b:97:fe:30:c5:6c:fb:
         44:29:c9:04:21:a7:55:f3:44:aa:52:d8:e7:e9:56:98:a4:1e:
         66:b0:66:64:1d:72:d8:bc:67:f0:0b:77:49:b9:78:c3:99:df:
         81:46:50:72:aa:07:8a:f9:e8:5e:fe:4f:f9:61:9d:55:1e:70:
         fa:51:51:b0:b1:10:ca:6f:bb:e4:c2:b8:24:a9:07:0b:9c:c8:
         f0:57:7a:6e:c7:a1:66:bc:0f:b9:bd:50:f6:10:f4:04:4a:28:
         4c:c1:4e:08:75:d6:1c:2b:3c:a7:7d:79:8b:1f:28:49:f0:ce:
         1a:c0:79:50:a6:8c:c4:2e:91:b8:54:cc:5c:86:25:07:be:18:
         09:e8:ef:68:81:95:84:77:e8:62:16:71:7e:e7:8e:2d:75:47:
         e5:eb:77:0a:90:e0:fa:be:7a:d6:0b:97:ca:0b:55:28:a8:7e:
         cc:5b:b0:b7:13:f3:a8:15:a6:16:11:bf:ec:ed:b8:4b:ab:1f:
         6d:b1:95:17:fa:05:75:ec:c8:c8:44:f3:8c:4a:99:75:d2:87:
         03:35:cc:f3:09:11:33:32:04:5d:ec:55:06:99:1c:15:f2:b0:
         c4:cf:cc:ae:02:64:18:a7:d6:d4:6f:73:d5:ad:64:62:de:55:
         bf:1e:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----