Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File:                     dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier:          in4jqpX/8ajv0DIglJ+hVLibnRknISRC4h0zXE6/rmA=
Subject key identifier:   D6:AD:74:DC:1F:C5:B6:3F:B5:1D:FC:A0:88:8D:B0:80:85:3B:35:E3
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer:       /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial:       01962DF42DD7BCD0C70D8E3678C80F5E3E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: c_4VrUZIMtuPlYj4DhW8ouhaRQw.roa (hash: 3ElLAVX1FXo1T4VYhDu+QaMztPbJUQVgeIUdwTADFRI=)
                          2: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: bKyJWCS0RzSikX0ld0jZQaalOLjjMU6hiq78sQ92drU=)
                          3: r_WAi-eWzHC7Psr81UVNU3kzOJw.roa (hash: ZETLofVAHwa7kjk2pEcSj1ALX1XE9n9Z4taPD31cXSg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2d:d7:bc:d0:c7:0d:8e:36:78:c8:0f:5e:3e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=d6ad74dc1fc5b63fb51dfca0888db080853b35e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:cf:a3:44:47:9a:7c:63:80:02:11:c5:85:
                    a9:21:54:e7:78:a3:7b:22:27:24:07:59:33:4b:ef:
                    23:68:cb:f9:58:b0:fc:32:04:96:1f:c8:0f:f0:08:
                    11:74:bc:04:a8:51:07:8d:1c:f5:23:a7:0b:b2:bb:
                    22:6b:f1:ae:3f:5a:a4:7e:54:b9:38:d3:8a:2b:d9:
                    65:7c:bc:9a:d2:12:0e:a0:62:e9:d8:c0:ca:24:f6:
                    84:e0:4f:ce:4d:52:c4:14:87:ab:ab:87:3f:31:c2:
                    59:f1:ea:8f:39:cd:9c:7e:44:b0:ef:24:50:be:bb:
                    f2:5e:02:a0:58:be:61:f3:88:a5:56:5f:2e:61:5f:
                    d9:07:18:5d:9a:ff:fc:9e:ec:20:ed:7a:b1:a9:85:
                    c1:1f:a8:b3:0f:57:1f:08:87:09:bc:b4:8f:b5:2d:
                    e6:b5:d6:bb:0a:90:cc:cd:c2:40:5c:ea:33:16:4c:
                    04:e0:99:99:c7:62:16:56:64:c9:c6:eb:60:d8:ca:
                    06:80:b7:1c:d8:46:16:98:0a:61:24:29:4f:42:0c:
                    f1:21:60:99:f2:af:5c:28:13:2f:4f:8a:c7:cf:45:
                    df:0b:8c:ec:a6:b6:1d:29:b5:93:94:aa:1d:57:59:
                    38:1e:39:e3:46:4c:4c:26:ef:7b:14:9a:bf:f2:f5:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AD:74:DC:1F:C5:B6:3F:B5:1D:FC:A0:88:8D:B0:80:85:3B:35:E3
            X509v3 Authority Key Identifier:
                keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7b:94:ab:98:25:d8:91:0c:8a:17:11:4a:14:ff:15:ec:80:
         26:5e:4b:7a:96:00:1b:ef:12:cf:e3:51:3d:0d:c1:e2:be:8c:
         28:d7:03:6f:71:16:fb:01:af:41:f6:5e:40:5e:dd:d5:0f:75:
         87:33:bd:64:a3:09:73:37:45:b3:05:83:19:c6:eb:19:1b:bc:
         90:74:09:ea:c4:eb:ce:82:c3:4f:4d:90:5c:f9:ee:f0:b5:db:
         a5:ad:18:fe:d5:6a:e1:f7:45:84:02:63:32:21:59:e8:f7:34:
         50:35:ed:59:c9:b5:50:48:1b:54:e2:b9:89:3b:0a:35:27:26:
         75:2d:7a:22:cb:e3:80:2c:43:27:3d:58:64:99:f3:ce:97:95:
         91:6e:57:30:ec:e7:85:9a:f0:0d:7c:26:d5:12:ab:f7:97:62:
         2e:78:e3:d4:da:dc:b0:c9:d2:9e:f1:55:99:5b:f3:95:91:7e:
         07:2b:e4:4f:31:c0:87:5e:43:d7:6a:37:72:bb:59:d3:6e:ca:
         1a:d0:bd:6f:41:70:f7:d2:56:ef:a9:b2:1e:15:c8:34:60:09:
         5a:41:44:0a:8b:6b:ba:d0:68:41:27:43:c8:9e:77:42:76:10:
         4f:f9:d6:88:39:83:06:27:b0:db:b8:80:1b:46:7b:1a:cc:25:
         42:57:f8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----