Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File:                     dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier:          NXbQgV5JrfFKecg3cL9UUpWfN59UYVXAfZOWLFItJ08=
Subject key identifier:   4F:F2:56:A7:02:22:29:A9:EB:3E:4B:C3:43:21:42:76:CA:54:69:B5
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer:       /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial:       01962E2AE4F32425694799B8631D87A1D3C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number:          0FB3
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: 1-jgtOPobXCJDbrHGNdmL9rzJbgM.roa (hash: uCWGxr32WWfEG1/b7Z2jim0tRFwDuOHUsX5k577/0+I=)
                          2: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: Fkv3NZi3Fwf4bcgEbyCfV18IH4jZvZIRszDE1Bn2E88=)
                          3: x3drftlfvyiEtkh0afmWcroU9Js.roa (hash: NILZn8jb2pSCwJZ594oMmV5sakNi3NDJXkj51QTnCsM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e4:f3:24:25:69:47:99:b8:63:1d:87:a1:d3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=4ff256a7022229a9eb3e4bc343214276ca5469b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:64:09:b9:38:a3:89:7d:06:0d:d0:62:3b:1b:
                    ad:a1:93:53:d6:70:87:24:a6:13:f0:d7:a4:00:5f:
                    62:b2:da:1e:65:89:15:3a:92:07:5e:b2:60:6b:03:
                    d2:5d:fe:08:63:6f:4a:33:09:92:5a:e5:78:eb:8f:
                    9a:13:77:61:c8:be:19:74:cd:5b:a6:f7:7f:61:d6:
                    2f:f8:29:0a:5e:a9:ec:41:da:74:bf:29:a0:af:fb:
                    d7:43:db:f4:97:1b:f3:7a:6e:d7:20:78:d3:a9:bf:
                    30:34:5a:23:45:e4:17:48:0a:a3:2d:84:9a:29:28:
                    01:6f:d2:fd:c3:79:fb:59:fd:0a:28:32:1d:44:2c:
                    cf:e0:91:7c:7f:60:cc:e5:89:f6:9d:56:57:70:6d:
                    22:93:99:f3:ea:84:b2:92:3f:af:41:59:8d:cb:73:
                    aa:98:54:c8:a4:59:b4:dc:8b:e5:da:86:2e:91:8a:
                    c7:25:60:eb:b3:e2:89:1d:41:95:72:79:a1:28:e6:
                    bc:11:97:1f:4c:f1:d9:d6:21:87:4b:15:59:35:2b:
                    cb:ce:04:5a:03:69:51:89:1e:09:ae:9e:2a:85:7c:
                    90:68:f9:90:77:57:e6:49:fc:9b:e1:e1:a5:60:e5:
                    44:40:70:a3:66:73:ac:41:45:bd:36:46:a8:1a:f2:
                    d7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F2:56:A7:02:22:29:A9:EB:3E:4B:C3:43:21:42:76:CA:54:69:B5
            X509v3 Authority Key Identifier:
                keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e7:c2:af:fc:56:58:9c:fa:1f:34:f2:ba:79:48:34:b7:83:
         44:fa:df:73:a2:1f:1f:9e:09:7a:3f:3f:d8:ea:e2:55:fb:0b:
         3a:0c:72:7a:42:42:45:d2:44:57:ea:4a:00:34:bf:d0:e6:36:
         4e:b2:ca:5c:12:da:18:09:42:4a:20:86:1f:c0:5a:f3:7a:70:
         c4:3a:3d:43:ae:c5:66:4e:58:1c:2f:77:f5:75:2e:82:19:17:
         c9:29:2a:85:14:2e:27:f6:06:8f:ec:1c:73:fe:95:4f:26:d3:
         12:eb:fa:09:43:46:4d:37:6e:a0:86:60:f4:f4:37:e3:30:c5:
         79:d8:df:0a:11:99:79:e7:df:81:14:5a:b4:7d:97:ec:47:2b:
         4a:ba:1a:b4:cf:87:a3:f1:21:cc:32:bb:f0:a7:ee:ef:89:81:
         c0:2c:19:23:1b:1c:92:3e:44:55:fa:d2:bf:09:2b:08:4d:0e:
         0e:36:4c:5b:e9:66:0e:6e:2c:18:cc:bf:72:c4:7f:57:89:91:
         d0:d8:f8:0f:7c:20:0d:b6:1b:63:43:18:e5:29:c4:f5:8d:4f:
         16:da:33:15:c1:5d:3e:99:b7:5a:71:b5:74:63:f9:4e:9b:bd:
         99:7a:d4:ab:12:97:f8:48:29:f9:1a:8b:f0:7f:f5:73:61:ed:
         27:53:81:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----