Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File:                     dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier:          enLyAPJcXOe8QBWzJ0QyCKfDiME8NElP0+hhpiIDVDI=
Subject key identifier:   A1:ED:3F:5E:2B:25:14:00:A5:44:04:41:06:8D:8A:64:61:6C:F4:C9
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer:       /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial:       01962E9936B014CB12C57937ED11149090AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number:          04BD
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: 5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa (hash: IgoqrrmJPuGzGpT+UcpwCttOwj7BjxbDg3tOXCDKJe8=)
                          2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: KzGJTFz3KvBVbkeJpRovLq7NbjGwhcuzNfnV1KO+Cm4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:36:b0:14:cb:12:c5:79:37:ed:11:14:90:90:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=a1ed3f5e2b251400a5440441068d8a64616cf4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:a0:a0:bd:37:ec:29:aa:97:dd:c8:4a:cb:
                    84:96:5a:44:e7:e8:7f:c3:1c:56:59:eb:2d:1e:3a:
                    4c:09:f2:41:39:ff:c0:9e:53:58:70:c8:81:18:d2:
                    a2:2d:de:e1:c6:f0:f0:7c:87:d8:8c:e7:02:42:0e:
                    d6:47:cc:36:93:68:64:59:0b:92:89:c9:5a:e9:e8:
                    8f:1e:18:e4:e4:25:e3:e1:c5:e3:85:27:9a:eb:41:
                    98:b8:7e:94:20:3b:94:50:12:cf:b5:19:3b:7a:60:
                    c5:4e:f2:21:9c:0c:2f:5c:78:72:14:5a:06:d6:1a:
                    48:1f:c4:9e:7b:32:43:8c:62:4b:c1:fe:1b:53:5d:
                    29:ce:18:56:ea:1e:30:bd:2f:46:3d:1d:78:cb:58:
                    04:f5:4b:9b:64:8b:04:7b:24:1d:ef:f2:86:e9:7a:
                    ba:25:24:fc:f4:92:3a:d7:14:8f:ab:06:4b:01:6d:
                    05:5d:6b:ca:47:7f:44:54:c4:2c:5f:38:91:40:34:
                    84:71:7a:0b:4e:12:8f:b0:d5:a2:20:e7:a0:8f:33:
                    95:48:32:c0:f1:bd:36:9c:02:d4:74:81:dd:ae:b7:
                    c7:d4:15:97:ee:57:bc:55:d6:1a:1d:34:37:25:02:
                    49:8e:00:5e:55:1a:01:a4:eb:b3:d0:b1:e2:cc:55:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:ED:3F:5E:2B:25:14:00:A5:44:04:41:06:8D:8A:64:61:6C:F4:C9
            X509v3 Authority Key Identifier:
                keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:4f:3c:ef:d2:6f:0a:10:0e:c5:f7:3b:94:78:60:29:7b:f7:
         68:89:b4:98:d6:48:31:6f:e2:b1:8c:5e:4c:7e:17:90:c8:b0:
         69:97:29:5d:5a:0b:bb:83:06:d3:c8:4c:ea:9a:d8:fe:b8:1b:
         11:c1:e7:de:6a:6e:68:fb:5a:5a:26:a4:f8:2c:02:f9:2f:ef:
         ae:c1:fc:5f:01:5d:da:3c:a4:ac:65:b4:07:8d:c0:20:ef:ac:
         27:04:15:75:af:0b:76:7d:46:0e:f7:e1:de:ca:6e:a7:89:15:
         6e:1d:c0:a1:af:38:47:ed:cc:27:da:a8:cd:00:3c:ab:05:5f:
         c7:3a:e1:67:18:62:d3:20:fb:d3:a0:32:f8:58:68:2d:6c:a7:
         df:84:58:3e:64:36:9a:ea:9b:fc:fe:1d:7f:d0:1c:0d:95:fc:
         b0:6e:8f:bb:e7:72:0b:35:cc:9a:5f:bf:8c:42:60:3d:b8:28:
         a0:63:7e:f5:4d:da:77:d5:72:bc:cd:71:4c:f6:76:a8:f5:58:
         09:7c:71:66:c7:88:54:b4:a5:dc:b8:9f:10:01:7b:5e:c8:96:
         e2:9b:a5:57:64:61:f5:6b:74:dd:66:ac:cc:05:0b:0a:c1:fb:
         2a:ac:f5:4f:2d:2f:c1:df:8d:e8:fa:48:48:e2:dd:79:84:71:
         57:83:0c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----