Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File:                     _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier:          pCvahPuwhmXkvdyVDJ7vN86PIMTxMXCRP1Pqr7R5io4=
Subject key identifier:   DA:7A:91:E7:F5:17:91:2C:0A:3B:5F:BC:C5:92:3C:B3:BF:47:E2:6E
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer:       /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial:       01962DF3D005F0C9929209DE8672684C2E85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number:          098B
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: 9-QqvBY1hUAnRzJQw44a_LiZwk0.roa (hash: Wiz9RtceWsVgYPfDCWScaw54WuSutaiOATQ7EKmFaHA=)
                          2: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: Cj1xniPOrSrv272+uSdaqjGhrgAY9YGVEWP9bUsyexA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d0:05:f0:c9:92:92:09:de:86:72:68:4c:2e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=da7a91e7f517912c0a3b5fbcc5923cb3bf47e26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:f0:f3:75:57:86:8d:07:c4:ed:5b:95:f6:
                    1f:d1:4c:35:b4:10:ab:0d:32:ba:3a:c4:c9:72:e7:
                    34:96:d5:dc:92:2e:bb:18:54:13:1e:3e:c1:e2:bb:
                    dc:08:63:47:04:06:cf:9d:4e:69:18:78:ac:ab:3b:
                    39:ac:00:87:23:35:78:a9:88:ee:e8:b8:97:26:e0:
                    ef:ab:e8:df:35:7f:86:2d:cc:20:1a:29:0e:02:47:
                    0e:f7:8e:9e:86:ec:0b:65:56:6b:83:9d:68:83:3e:
                    8c:f9:34:15:96:d8:1a:08:e6:00:cc:09:53:c3:02:
                    77:4c:a8:f8:77:75:22:a3:fa:67:26:5b:79:62:40:
                    88:df:bf:1d:ad:74:dc:12:2a:72:2a:53:16:12:e2:
                    fc:e5:93:cf:07:2a:1f:b3:06:00:18:7a:2d:e4:37:
                    59:e5:7f:cd:c8:96:00:c7:3c:8e:70:90:2a:1f:6f:
                    f9:c9:ef:bd:d9:04:fa:9a:e0:9d:44:0a:b3:68:ee:
                    8a:cd:02:76:56:4f:78:a2:74:ae:5a:cc:1e:0a:f1:
                    6b:d0:39:10:f6:58:76:b3:28:6a:55:7e:05:6a:d7:
                    98:0b:8a:2e:f1:c0:2b:aa:e4:42:89:10:dc:db:b2:
                    23:f1:18:ad:55:a4:74:0d:98:df:95:2f:01:13:10:
                    e7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7A:91:E7:F5:17:91:2C:0A:3B:5F:BC:C5:92:3C:B3:BF:47:E2:6E
            X509v3 Authority Key Identifier:
                keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:41:60:e2:b7:50:45:99:e4:c9:48:15:02:0a:a0:02:3c:4c:
         c8:05:99:f1:0c:3f:89:29:83:e8:6d:7e:c9:56:9c:09:47:da:
         39:c3:88:b8:72:28:97:58:71:4e:e2:ab:79:86:b4:85:f5:fb:
         0b:df:dd:9b:27:ca:35:bb:09:4c:8c:3c:e6:cd:40:0d:9b:f1:
         16:3b:30:b1:4e:cf:f0:19:bd:6d:b6:7d:79:21:f8:ab:4a:eb:
         75:20:d3:9b:15:2e:9d:ee:a9:f5:b5:c0:2c:7e:bb:1d:fb:73:
         72:8a:97:54:93:50:1b:e0:4b:b2:6c:23:86:a7:f9:84:d8:b7:
         fe:f2:d2:01:70:73:7f:3c:db:30:ba:40:38:98:ef:7a:44:fe:
         5c:12:ff:60:f8:9a:d7:b2:87:82:03:ab:dc:67:a6:9c:fa:f1:
         69:53:7c:5b:e0:ae:bb:e0:9e:a3:0b:90:2b:ad:09:88:09:e1:
         fb:1d:17:e3:7f:9a:ba:e2:f3:0c:d0:bb:8a:8d:4d:73:67:6c:
         f9:88:8c:ce:4b:0e:73:d1:5d:cd:10:9b:60:8c:a7:83:ed:d2:
         ef:87:01:ab:5e:bf:19:97:8e:49:ed:03:1c:ba:a9:15:6f:3c:
         77:0f:ca:f1:b4:b5:e4:64:23:82:35:20:ff:68:89:aa:d7:3f:
         c6:e2:d6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----