Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File:                     d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier:          u0p7j/RWrAHIih8VrHNe3PG+lW6E0eIJOOXxGGAJeu4=
Subject key identifier:   1F:DC:26:B8:D4:0B:6B:E2:EE:72:74:18:7C:CB:0B:CA:A2:BD:01:2E
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer:       /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial:       01962F3D70A55EFA05BD401BF1FF94C875AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=)
                          2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: IFfDzYNUgbZsC0zG0UXtRST3M5VhDUOAu5JyyYSzKH8=)
                          3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:70:a5:5e:fa:05:bd:40:1b:f1:ff:94:c8:75:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=1fdc26b8d40b6be2ee7274187ccb0bcaa2bd012e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:9a:a9:65:1f:ce:48:85:fd:e3:13:60:e1:
                    43:86:6c:a4:14:af:cb:22:60:e3:9a:bd:ba:72:10:
                    22:75:d6:da:03:d2:36:1a:35:60:65:69:e7:89:ee:
                    83:39:b3:ca:27:6d:82:de:2a:19:c6:ff:61:91:a5:
                    dd:ed:ce:63:8a:61:a5:e8:14:ba:7a:c1:c7:59:ab:
                    ed:6f:e1:0c:b1:36:a2:f9:d2:2f:41:5e:85:92:86:
                    97:9f:67:d1:86:e5:1b:53:bf:79:cd:04:f9:21:1b:
                    ee:f7:18:1b:d6:33:19:0c:a1:c1:dc:7b:b5:9d:2a:
                    5a:4b:3a:52:7f:1c:07:6f:dd:fd:ad:83:99:56:25:
                    a7:aa:fc:32:be:06:81:11:48:8f:6f:d4:3f:8b:c3:
                    e3:90:ac:33:30:de:30:25:fa:98:9e:07:68:50:c0:
                    13:06:ea:b0:bb:25:6a:48:9f:5c:32:56:31:cb:44:
                    ff:bb:f0:15:f1:47:d8:e7:b0:ab:6a:6f:a3:e6:e2:
                    5c:2f:ab:54:86:4a:f3:ee:6a:af:2b:f2:58:b8:17:
                    24:c2:0a:33:45:3a:7a:35:4c:10:16:04:3e:57:98:
                    76:b4:e5:69:cb:a1:53:34:24:06:a0:32:f4:d6:40:
                    8f:4a:9f:7a:63:5a:80:87:29:d6:7e:de:3c:f6:33:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DC:26:B8:D4:0B:6B:E2:EE:72:74:18:7C:CB:0B:CA:A2:BD:01:2E
            X509v3 Authority Key Identifier:
                keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:30:34:ef:22:92:2c:01:0b:c8:fc:a4:3e:a9:72:c5:84:4c:
         9e:26:95:92:7b:30:c0:18:cd:21:a1:75:56:97:3f:ed:ba:d4:
         a4:02:29:f2:14:82:85:5a:f3:ea:82:4e:57:7c:17:05:80:03:
         23:c3:31:2a:11:25:94:51:4f:c9:1d:69:4c:b1:f1:70:e3:59:
         2a:91:3f:7c:dc:5e:ad:77:b7:56:04:45:aa:9f:f7:28:cb:67:
         cc:8d:7e:22:fc:d8:1a:a9:a3:72:2b:20:b8:ae:82:1f:01:00:
         fc:f2:5c:aa:f1:51:8d:63:54:72:24:21:49:12:6e:c2:8e:21:
         36:0b:77:47:d6:eb:ec:ec:cf:93:c0:4f:42:ff:33:cd:08:7b:
         92:d6:54:46:bd:7d:76:db:f8:a4:b3:f1:28:23:13:ba:18:fd:
         5e:87:2d:13:fb:5f:d1:dd:83:d0:38:64:f0:38:17:12:9d:03:
         c1:bd:99:2c:c1:65:94:05:e8:d3:b3:8d:38:50:64:3b:3c:20:
         64:5a:75:6e:ee:35:bd:a1:ef:34:29:7b:ed:c7:38:cf:63:44:
         e0:ff:aa:c0:7a:e7:8f:80:56:6e:79:69:4e:f0:35:c2:6f:0a:
         45:b9:da:08:11:e1:35:68:03:65:27:4a:b9:af:42:00:1c:4b:
         4a:70:d6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----