Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File:                     d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier:          76FrZ9rC1jKsKIb3yTqCZxvSd31B+ywQQKAfwkn2shI=
Subject key identifier:   EC:16:D5:74:EC:45:F4:0A:D9:CE:80:B3:68:7B:D8:5B:62:21:9E:F5
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer:       /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial:       01962ECFBE3B6056503F62C2A5E394C0AB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number:          6F
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: YhU5HITXmEzEZK077V2NUQi5G0E.roa (hash: hsmvHe6gnKNA2Q3OE6zeLGrGjvqCoU3tN+crhtSom4Y=)
                          2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: O6uMOamV3qp+MGsKw75oO9NJW6ZDQsHYbswhuLm5c9A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:be:3b:60:56:50:3f:62:c2:a5:e3:94:c0:ab:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=ec16d574ec45f40ad9ce80b3687bd85b62219ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:34:cf:2f:62:09:53:d1:a6:33:8f:d1:65:2d:
                    ce:85:df:78:9d:1d:10:44:ce:6c:34:82:63:aa:80:
                    27:5b:e4:53:95:1e:d8:57:e9:6c:c8:17:a4:4c:97:
                    69:51:28:1d:af:31:16:69:de:8c:6c:0d:83:d3:50:
                    df:95:e2:db:a5:2b:27:6e:3a:dc:4b:79:87:bb:d7:
                    6b:94:b7:96:fb:8b:f9:76:de:a1:b5:5d:f6:4f:8b:
                    b7:48:a3:e0:7a:59:32:58:9d:a0:c6:8c:57:f2:ef:
                    6a:59:d3:f3:f6:0e:8e:fd:f5:d2:65:1c:57:96:1c:
                    81:73:9e:76:9f:2a:73:58:8e:6a:ff:08:4e:23:ef:
                    d2:ec:9d:31:cf:55:fd:1f:b2:fa:c7:58:f9:1b:79:
                    4e:99:d2:c7:16:a2:5a:45:ef:ae:35:95:eb:86:c0:
                    ae:61:3e:a1:a4:47:9d:24:40:59:8e:1c:7b:25:03:
                    6e:07:6c:fe:c1:1c:d1:33:3b:02:9e:6d:88:2c:6a:
                    4a:35:a7:02:e4:91:f2:01:20:f9:e8:3d:0b:07:e5:
                    ae:ab:0e:14:0a:66:42:87:90:71:e7:70:e2:5d:81:
                    a2:be:21:35:60:38:05:c9:35:5d:ef:65:64:82:ad:
                    13:ac:21:f2:b1:34:93:a7:b5:83:c6:18:b0:c6:67:
                    59:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:16:D5:74:EC:45:F4:0A:D9:CE:80:B3:68:7B:D8:5B:62:21:9E:F5
            X509v3 Authority Key Identifier:
                keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5d:f5:76:dd:5a:89:27:f5:42:bf:55:f7:89:45:e3:8b:a3:
         b3:cc:68:9a:71:8e:fc:73:13:b3:89:49:c2:b1:bd:e0:a7:41:
         fe:2c:f2:7e:20:62:d4:c7:53:8f:a2:04:eb:a6:5b:25:75:c7:
         9b:05:05:b0:4a:d3:e2:b7:b6:12:a0:28:5c:c2:6b:4c:e7:c7:
         ad:d1:dd:e3:f4:db:e0:aa:90:b1:f1:01:50:fb:f4:b8:13:79:
         db:e7:b2:20:49:34:cb:1c:9c:7b:ab:28:8e:52:a2:6f:c2:c5:
         49:31:ea:83:25:17:cb:fc:5a:33:39:e8:2c:a9:79:cd:60:24:
         24:ae:67:5a:ee:23:cf:35:15:d5:63:2d:b0:0c:77:77:4d:53:
         a3:20:3e:1c:62:a1:4a:6c:7f:cd:e1:2f:d5:2c:d6:cb:0a:4e:
         22:ab:fa:ff:9d:15:99:62:69:9d:22:56:21:c0:89:79:c6:90:
         f9:e7:64:f5:72:3c:dc:42:05:4b:32:7e:ed:fe:5a:aa:a6:65:
         23:0d:b4:ed:56:b7:91:94:51:2b:e7:3a:35:98:c3:e6:f0:6c:
         c0:26:7b:8c:bf:98:72:9f:56:f6:97:ea:db:4a:53:47:b9:75:
         fd:bd:86:27:e3:f7:b7:27:a9:3b:b7:93:ed:d6:b6:f3:5a:95:
         c2:b8:56:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----