Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
File:                     dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft (raw, json)
Hash identifier:          D4Z8W1iiHGv2pQsgWT3Hq36vgrgZ+xt/D0x0rWVt68o=
Subject key identifier:   86:DB:89:AD:CC:FC:50:A6:72:17:4E:E2:80:7A:ED:95:8E:A6:8F:C5
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Certificate issuer:       /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial:       01962E99534F0CC7DDDC9A151012391CBFA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: 8lBoSilDtW0ItY1m1FNkzFR9g7g.roa (hash: eMaeIeeNpB0IKHLHfs7pADlpK9Gp8r9cF63rKmEO7/4=)
                          2: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl (hash: XT5B8ObqubQJuWaS8Ln80auzYOIOGcHXWvfQbXmlbH0=)
                          3: vijarIUYgiNYSjUBEIP4lkhLgNI.roa (hash: 2GV5AIMYaF2M+jJbsLpgLW6R69LfUwGZ1/GjUEqVegk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:53:4f:0c:c7:dd:dc:9a:15:10:12:39:1c:bf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=86db89adccfc50a672174ee2807aed958ea68fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5d:3a:a2:56:8c:62:9f:57:04:68:b2:87:d9:
                    e1:aa:1c:24:1c:97:e0:53:b4:bc:5b:18:61:ba:c2:
                    cc:e1:05:d2:f8:09:55:c5:3b:35:9e:12:13:ee:14:
                    cd:ca:99:70:d1:5d:5a:b1:33:23:a8:4b:84:32:74:
                    d4:b9:ae:fc:79:66:cf:f0:a5:fe:cd:a8:16:f7:de:
                    78:f1:97:37:35:62:8a:0f:21:cf:45:63:68:0c:9c:
                    d1:a9:b5:7d:9e:63:95:50:41:d1:67:1a:5f:9f:d3:
                    a8:57:b4:f6:b7:a4:80:cd:e2:40:dd:e5:2c:f8:e7:
                    93:81:b1:ad:cf:e5:e3:f1:48:07:35:8a:f5:b2:75:
                    93:f6:93:45:41:d5:88:cb:f6:bd:06:b6:b1:5f:48:
                    92:64:ff:3d:fd:5c:15:df:2b:e5:1b:29:a5:a9:21:
                    52:ea:28:4f:62:ef:41:1d:47:a1:7b:5d:61:1b:10:
                    8b:e4:f0:4f:b9:f1:b6:c2:0a:6f:9b:a0:12:38:71:
                    94:cd:99:9c:a7:83:ba:7f:27:4c:6a:ad:8f:49:59:
                    83:cf:88:8a:f1:5d:ee:58:00:31:a9:d3:40:8f:f6:
                    b6:51:ad:23:54:0d:6c:20:67:31:72:f7:5c:8f:09:
                    4e:c7:9a:87:04:7e:86:b4:9b:73:9d:3a:53:52:bd:
                    66:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DB:89:AD:CC:FC:50:A6:72:17:4E:E2:80:7A:ED:95:8E:A6:8F:C5
            X509v3 Authority Key Identifier:
                keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:8d:0c:3a:89:44:f4:de:c3:6a:60:46:f7:db:e7:7e:e8:27:
         00:3e:1d:64:cc:74:25:6b:42:92:9e:b8:e6:af:f7:2e:a0:f5:
         82:e1:ef:d6:98:9e:f7:6f:08:37:e7:15:75:3c:da:c2:02:1a:
         0d:ce:87:85:d1:de:9c:8f:4d:6d:d7:d8:a1:39:b9:36:22:48:
         89:4a:07:e0:47:01:d1:52:28:78:74:c9:6d:6a:f1:c2:a6:7e:
         4d:cb:59:6d:e2:4d:0b:7f:5c:7b:fd:e8:e4:ca:41:eb:c0:48:
         f5:35:cc:4f:13:12:8e:af:ec:24:c4:8b:65:d9:a4:25:36:7f:
         31:d7:e6:9f:35:e6:e1:a1:a4:2b:65:97:7c:84:d9:2e:d9:0b:
         04:3e:22:ab:a6:64:3d:1b:f3:9b:c9:35:36:50:1d:5a:30:9b:
         23:41:e6:94:9a:82:ed:d1:f1:95:19:7e:4a:2e:25:fa:89:64:
         b2:74:c5:e9:36:fa:0c:3f:ea:9f:fa:f5:1c:6f:1f:c5:7e:fd:
         41:bb:d0:ba:5b:73:24:c2:d8:60:78:47:91:9a:ce:1b:23:8b:
         af:60:40:3e:10:fd:45:17:ba:ca:6d:b2:29:5c:75:83:1f:59:
         6b:de:2a:99:1b:65:13:47:d4:e0:d1:13:9e:59:e4:94:45:af:
         d9:2a:19:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----