Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File:                     dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier:          mpnPS+7b24TlvAccciKwEKwnDDcK/CrQuhaJceKbfm4=
Subject key identifier:   C8:F3:D8:EC:56:CE:9F:27:59:04:DF:D5:4B:1B:24:29:39:2E:A2:5C
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer:       /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial:       01962E61FBA868EE271859D63F5E148D8DD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number:          130F
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: 2bqI38qPxl9WUEvcjb5e2aJxZZUt97cwrEGvWLYDymU=)
                          2: ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa (hash: 9V1D5AZ/eHVRt4YDKcmTOE8v9iNuXaOV/i0Ye/mdU9E=)
                          3: zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa (hash: DtxqGawsrFVZx4HNzS+S5CsdD6flwYPGqAxKv36rkJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fb:a8:68:ee:27:18:59:d6:3f:5e:14:8d:8d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=c8f3d8ec56ce9f275904dfd54b1b2429392ea25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3d:3f:b1:83:7d:e6:37:b6:05:78:49:35:0f:
                    6a:d2:fa:d7:95:24:38:12:af:6c:2e:c1:ce:f0:65:
                    2c:ce:de:ff:d9:53:50:a3:44:5f:4e:b5:ce:45:3b:
                    5e:c4:64:0b:1a:cd:ae:b9:31:38:fd:fb:92:a1:95:
                    89:17:56:c2:a8:b6:e7:8a:17:97:a7:8b:a5:a8:ff:
                    ca:5a:67:02:62:b0:3a:1b:d2:57:46:9c:db:b0:6f:
                    d7:03:e5:bc:01:e7:af:8d:d0:39:46:1d:ec:59:df:
                    d3:f2:6e:b2:40:98:1a:e2:76:7e:2c:fc:a6:76:d0:
                    97:56:6a:ef:70:ac:79:74:6e:d5:0a:2f:de:1f:f2:
                    58:fa:eb:21:67:79:b5:ba:c4:23:e1:40:3f:39:ff:
                    1a:e0:05:37:7d:a4:2f:da:34:62:aa:73:5b:a0:82:
                    40:dc:08:ed:03:e9:99:f0:68:6a:77:e1:9c:81:b4:
                    53:4b:56:3e:10:f5:f6:47:d5:c4:f2:6e:af:cb:48:
                    e6:d5:8b:3e:c7:a2:d5:95:01:c2:08:10:5f:3a:c2:
                    ea:a6:09:63:3e:3b:cd:67:d9:98:85:6a:45:ef:be:
                    b5:ff:bf:e3:ae:6b:16:ae:ae:47:2a:21:9a:85:4b:
                    c2:06:0e:99:7e:0d:79:2c:34:86:7e:d7:28:bd:ab:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F3:D8:EC:56:CE:9F:27:59:04:DF:D5:4B:1B:24:29:39:2E:A2:5C
            X509v3 Authority Key Identifier:
                keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5f:18:8b:dc:8c:5b:6d:14:bd:14:96:dc:6a:89:3d:d9:bb:
         46:29:fc:92:93:14:a4:43:1d:2b:f8:1a:13:f1:68:69:df:ab:
         03:db:58:3e:4e:a1:c0:d6:40:5e:20:94:db:5a:c8:b6:9b:5f:
         72:b0:12:02:2c:ad:e7:72:92:26:23:06:23:6b:e2:4e:92:53:
         fd:1c:59:2f:56:1b:ad:8f:19:89:2f:4c:a4:a4:50:00:3a:5d:
         1b:ac:c0:e9:0a:e2:01:27:f0:e6:79:bf:65:c3:43:c3:49:7f:
         b6:1c:18:37:ed:d5:45:09:3e:b7:9e:f2:66:b2:0f:ef:f2:5e:
         5d:f1:4d:a6:32:e2:6f:7c:33:aa:30:e8:ae:67:89:2a:21:02:
         c9:3a:3c:3f:71:4e:3c:25:e8:f0:3e:e1:a9:c8:8a:73:1d:81:
         64:78:f8:2b:33:38:ef:df:63:00:10:38:83:f8:61:73:39:52:
         37:c6:ea:21:59:e5:cf:7b:2d:0b:68:89:0a:33:77:f6:d9:8d:
         ce:68:2e:13:7b:21:e1:e6:56:e4:6b:1f:2e:3f:ba:3e:04:6b:
         10:56:62:8a:f9:16:f6:53:6a:d1:a9:98:e2:44:4f:15:aa:8f:
         c6:93:df:6a:4c:86:3e:f6:2d:e1:7a:f2:59:e6:3d:6b:6e:28:
         cf:ad:cb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----