Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File:                     _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier:          kMM589mzCD+VOLpHfqNpIPazb62mVSfnFrK7nAqqPbk=
Subject key identifier:   75:82:5D:15:01:F4:57:72:42:A6:C4:0A:3F:24:B5:42:AC:66:D4:1F
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer:       /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial:       01962ECFAE030B4199998E0CB1C75FAD92E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number:          116B
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: hPXhd+X9SEtCPJdjdT84sJk6FhPf8dfesasXHXRKp4o=)
                          2: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (hash: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ae:03:0b:41:99:99:8e:0c:b1:c7:5f:ad:92:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=75825d1501f4577242a6c40a3f24b542ac66d41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:d9:77:7a:46:15:8b:fe:ca:df:98:05:30:
                    a6:88:61:14:16:84:88:c9:f2:f6:16:44:39:9d:b5:
                    32:d3:8b:48:d4:4a:6e:62:74:88:a1:e3:d6:09:a8:
                    c1:7f:85:07:9c:18:09:3a:50:58:8d:08:29:b5:97:
                    6c:7e:89:9c:f8:62:bb:eb:d1:83:59:dd:01:5d:61:
                    dc:0b:fe:cc:ac:63:d5:70:ad:7c:d7:a4:93:fb:04:
                    2b:0f:e0:38:cd:cf:56:8c:21:44:99:8b:32:43:42:
                    6f:74:2f:15:a4:e7:77:c0:23:08:e8:a8:3f:88:33:
                    49:f3:bc:31:9a:37:63:fb:ee:46:09:c3:ac:c1:eb:
                    8b:3a:80:f1:09:c4:cc:de:32:66:49:ca:45:cd:26:
                    37:da:cc:7c:aa:74:f5:d2:ac:f5:60:e1:49:49:41:
                    6d:72:73:6e:c0:00:55:2b:83:5d:7a:a7:1e:c2:a1:
                    ae:61:36:8c:96:75:a2:19:6a:89:a5:5f:f5:04:6d:
                    3a:4a:13:bf:33:b7:d3:4e:56:a9:8d:99:35:ed:99:
                    01:26:dd:6f:1f:af:4e:f0:7c:a3:14:58:b6:f3:bd:
                    ba:39:45:33:9a:fd:aa:2c:fd:22:ba:55:07:2e:e8:
                    ee:62:95:4b:9a:f0:f7:b0:d9:09:fe:e4:12:30:34:
                    8f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:82:5D:15:01:F4:57:72:42:A6:C4:0A:3F:24:B5:42:AC:66:D4:1F
            X509v3 Authority Key Identifier:
                keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bc:24:22:b5:4d:c5:28:50:11:82:a9:13:63:d1:25:bf:06:
         3f:6a:a3:9a:28:26:76:68:7d:fa:72:8b:eb:56:79:60:73:ce:
         5e:31:76:a2:b3:e4:60:58:94:79:ce:dc:e6:a3:aa:2d:59:10:
         0f:12:d2:24:2b:7a:57:ec:1c:ab:9f:1e:b1:4a:99:b1:ca:ed:
         57:5c:a1:db:cd:ab:1d:e6:c1:17:84:15:8c:0d:e7:2e:36:b5:
         dd:5b:85:dc:59:f2:87:71:8f:6c:08:e8:0c:a2:82:83:16:ea:
         22:f7:d9:c0:58:4b:3a:ea:72:2a:37:2d:06:88:e3:a8:9e:24:
         e9:7d:19:4a:b9:87:57:79:ba:1c:48:a6:3e:87:48:0d:49:0e:
         5d:6d:97:81:84:94:23:0d:52:71:8f:23:b5:2c:de:63:85:08:
         8f:44:e2:cd:92:a4:6a:55:67:5e:a5:18:c0:98:2f:49:f1:04:
         2d:a2:82:d0:e7:99:1c:47:0c:99:3c:ca:92:45:f1:d6:c7:bf:
         8e:d5:16:ad:37:79:ea:f7:6e:d2:5d:2c:a5:2b:85:04:22:ac:
         ab:fa:0b:c7:50:95:89:10:f8:84:79:81:54:63:53:2d:96:a8:
         cc:7c:39:bc:db:cb:a8:2c:17:76:56:97:69:20:ba:73:da:50:
         10:14:1e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----