Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.mft
File:                     dV-du8Al_uzgcje-wLvQXiAchL0.mft (raw, json)
Hash identifier:          OJOt33y6kAQDw9gr3/7/uTIcRidxs4HUOoDE9xDAVwA=
Subject key identifier:   BA:C9:25:ED:7F:95:48:D5:62:29:B3:74:F5:6A:89:01:9F:D7:9E:C3
Authority key identifier: 75:5F:9D:BB:C0:25:FE:EC:E0:72:37:BE:C0:BB:D0:5E:20:1C:84:BD
Certificate issuer:       /CN=755f9dbbc025feece07237bec0bbd05e201c84bd
Certificate serial:       01962F0698CE529B2989270831D2A8F5DBE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dV-du8Al_uzgcje-wLvQXiAchL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.mft
Manifest number:          0CC5
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: dV-du8Al_uzgcje-wLvQXiAchL0.crl (hash: i4GhF0urxxtuUS594yHbVOCyRC1fpxi3sxvnEtrZ9SQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:98:ce:52:9b:29:89:27:08:31:d2:a8:f5:db:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755f9dbbc025feece07237bec0bbd05e201c84bd
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=bac925ed7f9548d56229b374f56a89019fd79ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:23:eb:23:f1:47:01:f8:8b:8e:a1:da:5f:c2:
                    a7:56:bc:9b:82:2d:73:d3:f1:04:0f:cd:6d:f0:6a:
                    f7:3d:c7:42:e2:aa:49:2b:b4:14:76:9c:35:75:3a:
                    89:44:24:6e:c8:37:41:3c:30:4b:a7:71:e2:99:91:
                    f6:f1:be:01:51:d7:35:c8:75:88:5d:03:75:5b:f3:
                    d8:e6:be:81:d5:88:6c:fb:35:f9:48:85:10:2d:46:
                    7a:d7:3c:fb:5c:e1:27:14:2a:58:82:d4:43:1f:e3:
                    2f:14:71:e5:74:e3:1a:53:f5:16:17:b8:89:77:27:
                    79:84:a5:dc:7a:1a:c4:82:d9:fc:7f:d4:57:65:fc:
                    36:e9:8b:3a:77:98:ae:bc:c3:df:83:00:e2:ee:1c:
                    49:e4:0d:90:12:99:c9:e5:ec:c7:bb:6f:d4:61:16:
                    88:e3:54:27:e2:20:bf:94:3e:d9:f5:89:37:ff:56:
                    fd:a8:48:9d:a7:5a:54:e1:a7:d4:c4:0a:1b:fd:74:
                    ec:49:9b:d1:b2:87:b4:bc:ae:a1:21:ac:63:34:80:
                    c0:6e:0e:f7:8a:da:54:89:53:de:f9:8a:66:7b:ed:
                    f9:90:f6:d3:60:02:1e:4d:d7:6d:62:d6:dd:d9:d8:
                    13:e4:76:d7:78:41:41:0d:69:78:3f:70:31:1c:5b:
                    0d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C9:25:ED:7F:95:48:D5:62:29:B3:74:F5:6A:89:01:9F:D7:9E:C3
            X509v3 Authority Key Identifier:
                keyid:75:5F:9D:BB:C0:25:FE:EC:E0:72:37:BE:C0:BB:D0:5E:20:1C:84:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dV-du8Al_uzgcje-wLvQXiAchL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1df143-7caa-4934-b076-f8bd004c3089/1/dV-du8Al_uzgcje-wLvQXiAchL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1b:30:d3:33:34:d8:ed:31:5c:82:42:cf:3e:61:51:9e:b2:
         e8:36:bb:e4:e3:b6:43:b0:b2:82:21:46:d7:7c:9d:e0:19:50:
         70:d7:45:e8:55:98:6b:72:c3:22:78:76:50:1f:0c:14:55:8a:
         de:43:1d:2f:15:98:fb:08:af:a1:ce:c8:89:c0:0d:4e:c5:43:
         76:fc:c3:68:de:09:da:50:1e:9d:2e:f8:a8:fb:20:2c:94:8a:
         b6:2a:e4:5d:22:2b:9c:71:c5:0d:5e:b3:8d:47:ca:5e:80:2e:
         8f:6e:12:6b:e8:f7:a5:cc:fa:78:a4:1f:51:20:e0:89:34:3f:
         93:88:d3:aa:c1:05:67:6a:46:9e:37:0b:87:3f:fc:c3:6f:95:
         20:27:70:ef:7b:2a:93:a3:b8:6b:1a:f9:8e:3f:2e:74:68:c5:
         dd:6f:e4:8a:52:c0:64:41:66:5e:69:ba:1e:2b:73:a6:3c:40:
         e3:0e:1a:21:b2:d4:bd:c0:18:13:c9:49:7f:17:6e:f0:7a:a5:
         db:34:3f:44:a7:c4:92:9c:bb:4a:37:58:fd:41:62:24:e4:89:
         ce:7c:5e:bf:4d:7f:3d:51:b3:e7:ce:d5:52:da:e0:a5:b0:ab:
         29:d8:b6:a6:67:0f:d8:95:72:e5:7a:9c:fd:be:b0:81:85:0b:
         e7:77:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----