Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d624-184e-4037-8c0f-71290deec53b/1/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.mft
File:                     dL_NdUDQ8V7CXc5ZO9dHwntzbe0.mft (raw, json)
Hash identifier:          +Bj2sVYxdxJ1CH8PU1pTZPagcRciEM13fgLBqQnlXvw=
Subject key identifier:   32:2B:83:F4:17:10:8D:ED:BA:68:B9:17:3E:23:79:F0:3B:E7:A7:85
Authority key identifier: 74:BF:CD:75:40:D0:F1:5E:C2:5D:CE:59:3B:D7:47:C2:7B:73:6D:ED
Certificate issuer:       /CN=74bfcd7540d0f15ec25dce593bd747c27b736ded
Certificate serial:       01962F7440DE03E6A81249E2016F30C76A0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/51d624-184e-4037-8c0f-71290deec53b/1/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.mft
Manifest number:          0770
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: dL_NdUDQ8V7CXc5ZO9dHwntzbe0.crl (hash: bHgCI8tfQoauq178cKW2x5+n4YBBMMFXaOaP477Sp7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:40:de:03:e6:a8:12:49:e2:01:6f:30:c7:6a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74bfcd7540d0f15ec25dce593bd747c27b736ded
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=322b83f417108dedba68b9173e2379f03be7a785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:a2:4d:96:00:71:e2:23:cb:29:9e:f9:a0:
                    f3:dc:29:13:77:8e:27:65:cb:59:44:28:84:60:97:
                    d8:5b:7c:94:3d:cf:f8:bd:9c:25:b9:95:fd:98:95:
                    db:44:72:dd:44:fb:2d:ef:7b:1c:52:e8:3e:52:da:
                    51:aa:68:81:64:62:cf:ff:bb:0e:0e:f3:9c:df:e5:
                    a9:fb:f3:bb:37:c1:03:3d:34:ed:7e:03:27:4f:b5:
                    5e:6a:42:21:ff:c0:3b:74:5a:0a:f5:57:f0:99:ad:
                    98:44:d4:fc:41:2c:69:78:f6:73:a6:d6:2d:3d:4f:
                    99:38:29:d9:4a:cb:57:e3:ce:b2:70:b9:8a:a5:df:
                    cd:02:e0:93:77:9f:9c:38:32:9f:d9:0e:2d:cf:de:
                    56:eb:da:e3:dc:41:e2:65:c0:f0:19:c9:c3:37:c2:
                    5a:48:b5:dc:5e:d2:0b:82:7f:d0:f1:2f:10:97:b9:
                    93:f3:5b:ac:cb:0c:cf:b2:ad:1d:05:ad:dd:04:28:
                    92:6a:85:eb:e8:45:ba:1b:a0:b8:3a:c6:52:40:36:
                    a7:17:f0:ab:b0:e2:70:ba:49:49:5f:6f:5a:d2:42:
                    6a:36:52:59:17:af:5e:2f:56:3c:e5:a6:73:5c:fd:
                    26:56:e5:8f:75:ef:69:f7:63:8b:bc:0b:96:ee:80:
                    e3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2B:83:F4:17:10:8D:ED:BA:68:B9:17:3E:23:79:F0:3B:E7:A7:85
            X509v3 Authority Key Identifier:
                keyid:74:BF:CD:75:40:D0:F1:5E:C2:5D:CE:59:3B:D7:47:C2:7B:73:6D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d624-184e-4037-8c0f-71290deec53b/1/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d624-184e-4037-8c0f-71290deec53b/1/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:37:d2:75:73:12:4d:45:63:6e:9f:d1:3e:80:c3:41:a4:5e:
         30:c9:33:69:34:5e:56:72:12:67:4a:af:86:25:ee:7b:33:32:
         4e:e3:ea:f0:a6:32:cd:4e:f5:ef:03:6c:56:0b:29:b9:b1:ef:
         67:b9:9b:ea:5f:e7:cc:12:0b:16:a9:73:05:ac:cb:b9:d8:29:
         2b:a7:01:22:8a:57:40:b3:6b:7b:0a:7e:6d:c7:97:97:a5:8d:
         e4:d2:ed:8a:55:67:0f:eb:24:e1:65:c8:ed:a7:e3:c0:d9:a4:
         e0:40:cf:a8:0b:65:db:fb:25:3a:9f:32:70:8e:d4:93:02:8f:
         78:4a:c0:16:86:73:53:dd:34:20:07:6d:6e:6b:84:cb:e6:19:
         42:a6:0d:c1:5d:c7:8b:10:36:38:6c:fa:0f:b1:5f:9c:c9:ea:
         8c:7b:25:c0:73:37:6d:a0:81:68:16:fc:21:d7:ee:61:bf:95:
         27:b6:3f:e0:c8:ae:7b:15:55:c1:06:26:0d:c2:be:cb:c4:e8:
         0a:51:ea:92:ab:6b:35:e6:4d:b1:54:d2:c2:41:47:c0:72:1b:
         5f:1f:fb:0d:99:45:7d:bf:0c:aa:ab:19:b3:98:e0:13:8d:c2:
         45:ba:3b:8a:15:6b:06:6d:f6:48:e4:bf:ec:0f:02:28:b1:f6:
         95:63:9c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----