Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File:                     d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier:          bqTmYvxeXMAu/YBRVmSFaqXdywbW2QkM6CMW3cMJhx8=
Subject key identifier:   2C:2C:67:8F:F7:73:BE:ED:C3:0D:5A:0B:54:A4:A0:F6:12:36:8E:FE
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer:       /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial:       01962E98AF879ACE023722CFF64B1A76D30D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number:          0260
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: 8xnH2EyFugJWapFt0CpHPblFsPY.roa (hash: XrkRQTN/1NhwGqzw1tcTB1Z4+v0pWU4DY/KepWXR+ho=)
                          2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: CtAJyjcBIE0ROAa7JEfNGY95njmvbS3wD/PlJas6Iws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:af:87:9a:ce:02:37:22:cf:f6:4b:1a:76:d3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=2c2c678ff773beedc30d5a0b54a4a0f612368efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ee:f3:4a:dc:65:84:67:8d:5d:56:f0:e7:c1:
                    1d:f2:3f:a2:19:1b:3e:42:ed:b1:f9:52:b3:e1:a2:
                    d7:2a:d9:77:e0:f1:62:bd:3f:e5:48:d7:8c:92:5f:
                    f6:5c:83:22:97:b0:4f:63:78:7d:e2:af:ff:49:70:
                    0e:07:e1:6c:f1:d9:a1:33:46:8c:51:57:21:34:66:
                    4f:3e:1c:da:2a:0a:5a:c0:a7:11:8a:07:83:c5:be:
                    97:bb:97:dd:32:3c:a5:fe:3b:96:e7:8f:60:bf:65:
                    06:4b:05:7c:6b:3e:6b:e0:61:a9:19:c8:52:87:52:
                    41:a7:27:92:71:b1:41:9c:87:ce:cf:68:9a:59:95:
                    25:d8:bd:70:1d:46:63:4c:55:9c:df:be:4e:e3:a6:
                    ad:b4:96:fa:4a:11:69:a9:16:ce:29:93:4b:fc:1a:
                    01:4b:21:6f:80:57:c5:5b:57:9b:76:b3:4f:5f:da:
                    db:1c:3a:89:55:4e:bd:4d:24:11:ba:97:64:60:af:
                    9c:85:0b:ef:7b:87:cf:52:74:1a:d8:9b:bb:3e:42:
                    6b:6d:c9:d0:e5:ca:7e:5b:a8:c4:fa:42:fd:c6:ab:
                    7d:13:e7:ec:cb:76:e6:63:56:ab:44:6c:7b:c4:18:
                    db:23:e4:31:48:bd:96:d3:be:e9:e5:63:bf:51:2a:
                    dd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2C:67:8F:F7:73:BE:ED:C3:0D:5A:0B:54:A4:A0:F6:12:36:8E:FE
            X509v3 Authority Key Identifier:
                keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ed:db:e4:28:ef:bb:cd:5f:15:de:36:9a:07:fc:06:35:b7:
         e4:1c:a0:69:49:f9:67:66:f3:94:87:63:5b:ca:4d:c9:e4:59:
         02:11:9f:9f:a9:e1:d3:ab:7f:08:ea:1d:ad:bf:93:95:18:02:
         b2:80:2e:bd:75:9e:3b:40:08:13:f0:30:bf:d3:5e:19:7d:11:
         f8:60:3b:ba:6f:99:09:f2:8c:d9:71:bc:b0:47:7c:19:97:db:
         9d:46:36:1a:87:2a:1b:8f:a2:c4:eb:a1:4d:58:f3:31:1e:d8:
         b4:55:45:41:07:19:4b:4d:e3:09:11:d2:d0:3b:d4:b5:01:31:
         d5:47:01:ba:70:29:19:4f:7c:84:08:19:62:06:0a:79:39:32:
         e2:7f:fd:41:d4:c0:a2:64:c6:ec:9b:6e:c3:50:38:11:b3:ca:
         6f:14:73:a3:b7:8a:24:9b:24:c4:a3:02:99:56:cc:53:d1:81:
         2e:3e:ee:ca:b0:60:ae:76:cd:99:85:c0:16:fd:f2:4a:fd:2b:
         b2:be:5a:3c:38:a0:ad:86:15:67:53:e7:b7:06:07:46:e6:d1:
         c5:8a:20:79:3e:64:5b:fb:fc:09:cd:f4:0b:b3:ca:aa:bd:cf:
         27:80:7b:6e:76:77:14:64:7f:88:0b:fc:d1:95:cb:cd:23:a0:
         20:45:05:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----