Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File:                     dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier:          ZsnQBf+BgnbZX+LlmZKYIy8N8qoSP+dGcSASl9PObV8=
Subject key identifier:   64:39:D3:83:A2:7D:84:0B:B0:23:25:67:A2:80:6B:65:CF:0B:6F:FE
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       01962F069560D5DD849BEBB2C0CE22D67C29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number:          156E
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: ILTLOyoWPc07Zu5uedVl9OoSM7g.roa (hash: rrMZtSbTq6ORLNPo8ZtTEklQIan0rtyS360P6d5+a8w=)
                          2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: /sGe9rn7MHk/sM3BkehfZra0LtUCRn4m8b5CvasSUBE=)
                          3: otKZ958cq46JjeuiWtQS_1cQ4O8.roa (hash: I3AuxBmpkKEz/bDKuyUmT7Of3tiFEgKl0C6pbBn4Ceg=)
                          4: pygSYveYfJ18y88VT99Py8VI8Ck.roa (hash: oWrjqJqkXBJagZmzia7A5lPs/2l0PT9MnEzwS9nzSRc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:95:60:d5:dd:84:9b:eb:b2:c0:ce:22:d6:7c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=6439d383a27d840bb0232567a2806b65cf0b6ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8e:72:1a:5c:25:67:b5:87:e4:c2:ef:48:38:
                    60:e4:c5:28:1b:71:1a:bb:96:bb:21:a6:ed:2f:a5:
                    05:e4:65:37:b3:3f:be:12:21:5c:d2:b9:c6:7e:af:
                    88:f7:f9:66:63:21:83:9b:73:e2:76:19:1c:1a:dc:
                    bd:ef:42:df:b8:0a:3e:51:14:d3:35:e7:b9:d9:d4:
                    78:0a:cb:59:94:e4:06:92:bf:89:8e:8a:5b:e7:69:
                    ba:82:18:f5:13:6b:1f:61:fc:1a:e4:2b:62:fd:4f:
                    69:f5:90:cd:56:e9:88:26:5a:7b:42:d0:ea:2e:95:
                    ed:4e:c9:21:b0:23:aa:67:d7:b5:e2:24:f4:87:6d:
                    05:39:3a:f0:5d:aa:5f:df:86:ab:d5:6a:ea:f7:18:
                    80:9b:40:bf:a6:f1:96:36:74:94:b1:d6:b6:5d:3b:
                    86:af:97:c5:08:ab:ef:e0:44:8d:94:c4:7d:c4:20:
                    ae:a3:89:9e:a4:96:f2:1f:e1:a3:fc:38:30:58:00:
                    6d:f8:5c:8c:b9:2c:d0:b6:dc:73:90:ec:18:92:7b:
                    74:ab:96:96:6d:ea:8f:6d:d3:c6:82:9a:56:5c:4e:
                    02:7c:a5:f9:2b:33:04:aa:8a:4b:a3:cd:b9:4e:11:
                    55:b3:e1:75:29:7f:4d:58:26:ae:55:e7:8c:66:81:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:39:D3:83:A2:7D:84:0B:B0:23:25:67:A2:80:6B:65:CF:0B:6F:FE
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a5:c3:4a:2a:f6:e0:cd:7b:3a:7b:8b:01:ce:6d:54:28:e0:
         34:93:ff:a2:f5:91:52:08:4b:6d:8a:e0:3d:87:f8:01:67:45:
         58:4a:54:9e:7b:79:b5:6c:bd:18:c4:11:0a:c0:ad:fc:23:b8:
         34:82:a9:4a:c7:78:07:7a:9f:c5:96:69:d6:f4:37:30:28:6b:
         d2:15:62:86:a1:46:f3:52:8a:d7:6e:bd:c3:73:67:1e:2b:7b:
         ae:84:c1:0e:2a:7c:39:35:d7:a9:df:01:f2:37:9c:be:12:06:
         fa:52:a3:e7:b7:6f:38:42:0b:9b:4c:a8:76:a1:6e:e5:32:d1:
         27:a7:36:4e:5c:ef:ac:94:dc:08:ca:39:b9:93:93:38:43:b4:
         f1:4a:48:2e:bc:14:0e:fd:19:8d:d5:9a:44:9c:67:eb:8f:07:
         98:57:a4:4e:7e:10:cf:24:be:8f:73:d0:d6:4a:3c:7a:36:25:
         f4:48:9e:6e:ab:e2:f2:85:47:83:4a:71:70:cf:0d:17:58:ab:
         42:1c:21:94:d4:b8:20:76:24:3e:68:85:9c:64:0d:ba:55:b2:
         ab:a7:89:5b:76:09:69:3d:71:2d:77:ce:0a:fd:1f:ac:bf:af:
         75:75:51:5f:ae:a4:4c:88:d7:90:2a:0f:f9:d6:58:78:6e:94:
         c8:0d:7b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----