Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File:                     dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier:          NZZnv9Zb+tcVToT3XZu2jix7p9BuXAu73QnPzZlCPxE=
Subject key identifier:   F3:0F:87:54:81:25:79:13:31:94:44:82:50:FC:35:05:91:44:40:85
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer:       /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial:       01962E994E8EE1D28F7CA2A6365792ACF0C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number:          0713
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: vsDuykCzlskhZ9dPaQinO8P7Airss0e3adYvMreuCK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4e:8e:e1:d2:8f:7c:a2:a6:36:57:92:ac:f0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=f30f8754812579133194448250fc350591444085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:ab:b9:29:c4:48:d5:80:23:a8:af:d8:8a:
                    1a:a2:0b:f2:0c:8a:d1:74:f7:63:a8:d6:e6:54:21:
                    42:f5:68:9e:da:46:1c:fd:41:d5:c2:9f:6f:13:45:
                    44:bd:05:eb:05:a0:6d:49:88:ef:ca:6f:3a:c1:e3:
                    c8:eb:35:f8:5a:4a:5f:1c:40:82:9c:21:7c:54:2e:
                    d7:5d:30:e3:bf:a2:ea:53:bd:cb:28:a9:f0:b1:b8:
                    0b:f4:7e:ba:f9:0a:7f:30:f7:27:a0:ec:13:a0:b1:
                    59:fb:e1:2d:7b:b8:ca:9d:1a:20:b6:76:cc:c7:75:
                    7c:65:86:7c:12:9b:7a:59:e0:85:84:20:9d:3d:b5:
                    92:9a:37:3d:10:23:c4:7c:85:fb:f0:96:aa:f2:25:
                    50:7b:aa:20:cf:ce:8c:9c:e0:ad:75:8c:e2:3a:ce:
                    22:9c:d7:85:9a:70:8d:ff:ed:af:3f:64:ad:dd:a2:
                    bf:ea:c2:4c:82:ff:be:99:04:00:ca:54:1b:af:5d:
                    7b:54:28:2c:8a:1d:8f:98:f4:d6:0f:1d:ba:35:33:
                    0f:9d:b0:b2:2c:e4:d2:84:98:b7:4d:c6:e9:43:be:
                    06:af:7b:7d:8e:3f:a1:68:be:94:15:8c:c8:2c:77:
                    e3:e3:95:f2:e0:32:9d:c2:91:4c:5f:4b:df:64:d3:
                    07:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0F:87:54:81:25:79:13:31:94:44:82:50:FC:35:05:91:44:40:85
            X509v3 Authority Key Identifier:
                keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:77:ad:0f:7a:68:04:18:0c:a7:d8:68:54:e1:73:2d:cd:89:
         8a:38:46:82:4f:0e:99:12:56:a7:a5:27:9b:01:bb:5c:14:4a:
         d0:4b:f0:4b:84:0c:b2:ef:c0:81:9b:48:38:99:fa:d1:64:f5:
         56:29:9f:5b:d1:51:09:ed:55:e8:16:a5:dd:25:2d:52:83:55:
         20:82:82:38:c1:9c:e9:90:c4:49:74:74:0c:79:c9:7f:af:1e:
         4f:ac:f1:bd:1e:cd:a3:c9:1b:97:89:0c:a0:7d:71:a4:90:d4:
         db:a1:ab:69:f7:9f:fe:e9:10:86:6f:da:29:33:38:2b:25:46:
         8f:53:eb:24:f3:e3:b0:36:1e:3f:1f:eb:af:75:fd:32:39:7b:
         10:f9:84:7e:58:a2:51:da:d4:b1:90:28:7f:59:76:b6:2a:d6:
         cb:f7:c8:1a:6b:e3:ca:7f:93:2f:1b:2a:66:b1:42:cf:f2:67:
         6c:6a:56:a8:a4:57:80:97:4b:ea:ae:14:a2:02:fc:f2:84:82:
         32:f8:e5:76:57:24:f1:89:bc:84:f3:52:93:d9:87:9c:2d:06:
         80:aa:58:e0:34:2f:0b:00:96:67:5a:db:c4:b4:59:a0:de:ef:
         7e:84:a2:d7:f1:ad:40:9b:77:06:67:20:a3:65:8c:1b:be:29:
         84:d0:fb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----