Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
File:                     i7dzgYUSSQpQCthD6irnF-8hsUw.mft (raw, json)
Hash identifier:          bX3PtqC9InW+T+aQusvyHxQFTiiidNXNvCpxKNnbdyo=
Subject key identifier:   BD:00:91:5E:89:DF:89:34:30:0D:03:60:D9:33:56:8B:30:86:CF:00
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Certificate issuer:       /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial:       01962E61DA889975FBD0EC1C486FC852B7C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: L6BmwALeicC8VgFsadJhZLZOhdw.roa (hash: jlbIuI51ox4C1wny8/EXm0XGuTxyG7RmZ5JEvI5tNCo=)
                          2: i7dzgYUSSQpQCthD6irnF-8hsUw.crl (hash: b1+L2jetUxv63PvR+oVteAbF1+tTOq7wJ4ouhQh4YlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:da:88:99:75:fb:d0:ec:1c:48:6f:c8:52:b7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=bd00915e89df8934300d0360d933568b3086cf00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:f8:f9:06:7b:e3:8d:18:08:bf:0b:97:fd:
                    99:0e:47:44:26:80:14:f9:cd:07:a8:d2:ae:3f:99:
                    1e:29:20:88:1e:b6:19:c8:d3:aa:60:89:28:61:98:
                    e6:df:09:3d:6e:02:ee:8b:b0:7b:d1:5b:6d:e5:13:
                    92:55:99:b1:48:ac:ef:dc:02:28:7f:73:ca:3a:46:
                    58:64:2d:0d:58:b0:0e:c6:95:f9:74:43:17:ac:d5:
                    e1:b3:ef:a8:35:3c:d2:ca:2a:3b:c8:0c:9f:7b:04:
                    e5:76:70:d4:0d:dd:fd:d9:a9:5b:93:33:0f:c5:64:
                    2f:57:49:a1:e7:17:d1:f4:ef:d6:38:43:37:53:70:
                    00:df:25:3e:3e:86:9e:73:09:f2:27:9e:4c:d0:b2:
                    09:b7:ef:bf:53:1b:fb:0d:63:88:f0:88:02:9d:6e:
                    ea:bb:f1:58:49:04:a2:31:8f:cb:bc:14:dc:28:94:
                    24:8d:f8:3b:1d:8a:e9:6a:4a:75:c5:a1:83:8c:0c:
                    52:7b:42:15:ea:d5:ea:19:a8:ba:24:44:32:fd:1b:
                    a9:bd:48:f7:7b:e3:7a:3f:29:80:c5:92:64:fe:1f:
                    59:84:11:42:58:e3:3f:fa:3e:1f:ec:fc:df:ca:6f:
                    ac:59:08:42:7c:50:1e:a7:07:f7:1f:0c:29:ae:2c:
                    65:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:00:91:5E:89:DF:89:34:30:0D:03:60:D9:33:56:8B:30:86:CF:00
            X509v3 Authority Key Identifier:
                keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7e:e1:02:74:3f:1d:00:72:1e:6d:d0:ee:b1:52:2c:29:55:
         aa:b7:7d:e8:70:67:06:11:6e:ae:c3:1a:82:40:36:d7:14:d1:
         ed:c8:2e:bc:06:12:38:28:a1:fa:ea:0b:70:a4:6f:50:9a:42:
         ea:66:5e:bb:7e:1b:10:0c:5e:2d:df:aa:a6:05:e8:a2:a8:5e:
         e2:ea:f9:c6:2b:07:e6:b4:18:34:5e:5d:01:62:29:83:3d:91:
         28:97:1c:61:48:08:24:17:8a:d6:44:75:17:de:50:a3:56:31:
         f7:49:d9:b9:3d:ca:5d:c2:87:fe:a9:9b:49:d5:0f:07:e3:8e:
         5c:75:9d:c8:fb:9c:08:bf:f2:e9:0c:b2:8f:52:d5:9d:75:b9:
         04:c3:74:e2:76:3f:b8:85:ae:ce:ce:39:82:c3:c4:85:72:36:
         5c:c9:13:40:37:a1:0b:02:4b:57:e5:bd:3d:f7:b2:a8:87:9b:
         02:9e:e5:2a:ea:b8:1a:9e:1a:8a:d8:00:3a:1e:5c:bc:9a:e4:
         ad:b6:74:fe:52:ef:d7:f1:55:92:5c:54:98:0f:7a:fb:b0:bc:
         d2:15:55:48:fb:5c:60:91:eb:6d:60:51:07:3f:5e:f2:24:3e:
         7d:d3:f0:b8:c1:38:94:85:8c:92:1a:de:a3:02:53:49:5d:7f:
         30:0a:3c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----