Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File:                     fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier:          ZwiuipGFAMk7nhXuf2wkJMx1qj+ytPNhblURBWzjJvg=
Subject key identifier:   F0:DC:28:50:DC:7E:4E:CA:96:F2:88:94:81:16:96:21:97:E5:B4:B9
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer:       /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial:       01962F7480487FA74F738D3B840230BDE8B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number:          0BD2
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa (hash: CneTmiRYnA+2gIbWw8P2gftXT9GSMXZurQf8UEQYJtM=)
                          2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: gv7irByG96LHcBXsDC8VOxBHDJbXznPvOQR71uGpl8M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:80:48:7f:a7:4f:73:8d:3b:84:02:30:bd:e8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=f0dc2850dc7e4eca96f288948116962197e5b4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:27:bb:f3:92:f6:e5:18:5e:53:5b:3d:69:
                    53:91:11:fb:0d:03:92:da:0c:44:5f:92:e5:fb:8d:
                    59:e8:fc:7a:1b:a7:9a:4f:77:df:fd:db:cf:2f:a1:
                    4e:02:d3:a9:20:a8:3f:ce:8d:c2:31:50:e4:a0:bd:
                    2f:8b:37:75:7d:e1:0d:8d:57:e9:cd:27:bd:3b:b5:
                    e1:34:e0:c6:b8:67:c6:03:d7:52:42:30:6d:21:7f:
                    e7:a5:e9:eb:08:32:34:5f:d3:ac:f8:cf:2b:5e:69:
                    48:f3:59:ba:08:70:50:7c:9a:22:45:35:3b:e4:50:
                    5a:23:8d:ba:33:d0:4a:00:98:74:26:11:fa:3c:2f:
                    67:77:64:a4:06:51:24:a9:21:d2:2a:f6:52:50:d8:
                    e0:06:7e:88:a7:6f:10:8e:d7:6c:3e:12:8c:2d:64:
                    f6:41:2e:1f:b3:58:b4:36:8e:ff:1e:53:42:1f:b8:
                    a8:75:2d:4e:74:c2:90:7b:8e:61:b6:c5:36:56:1e:
                    09:98:fa:a0:d1:59:f3:30:bc:cf:af:2d:80:6f:51:
                    a0:8a:7c:d3:eb:31:27:8a:4a:25:50:ba:9f:ec:56:
                    dc:7c:55:94:63:23:af:dd:78:2a:e4:37:41:cf:df:
                    2a:fd:a0:47:83:e4:fb:18:e1:e5:5a:06:36:0c:14:
                    36:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DC:28:50:DC:7E:4E:CA:96:F2:88:94:81:16:96:21:97:E5:B4:B9
            X509v3 Authority Key Identifier:
                keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:41:46:8a:ed:0d:ac:29:93:c5:aa:c8:73:4a:a4:d9:4f:8b:
         e4:9b:47:89:66:2f:40:45:b4:41:ae:e6:c3:34:90:c8:32:23:
         ee:80:15:09:a5:7e:96:62:bf:60:d2:0d:95:b1:1e:5e:ed:e9:
         98:52:a0:2e:95:59:e0:a2:ba:23:20:18:ea:10:59:6c:61:18:
         73:8f:42:ba:fc:01:a5:22:8b:88:de:6c:59:2f:f6:b6:12:2e:
         9b:d2:c2:48:76:08:bf:97:1d:30:13:52:bb:16:9f:96:fe:27:
         94:54:ab:f4:6d:c8:90:61:7b:a7:75:60:22:b2:01:f6:9a:8a:
         95:13:2a:d3:fa:25:19:e2:20:34:ed:0c:4c:66:c5:d5:1f:a4:
         73:1a:b3:e1:aa:c2:b5:88:e5:b2:d2:85:1e:2b:91:42:f3:5f:
         5e:0a:e3:2b:02:19:33:d4:7d:1e:0b:ec:83:48:a6:df:db:bd:
         2d:26:b7:7c:0c:c5:e3:c7:21:27:3c:46:12:96:82:bd:76:73:
         ab:58:37:2d:f5:d6:33:ac:20:2f:ca:8e:1e:c6:f4:54:91:49:
         af:c7:94:50:b3:a8:27:7a:6a:36:ee:55:59:97:7d:44:65:fe:
         5c:df:a4:e7:e6:97:fa:9a:a9:73:b9:f3:9b:32:64:81:a2:dd:
         f4:f9:7a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----