Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
File:                     dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft (raw, json)
Hash identifier:          D3114heTVZl81FPZ8KpfEroVsfWlSMmwzSzJz4nc5fw=
Subject key identifier:   7B:2D:FE:3E:E6:13:8B:AF:70:70:A9:EF:D6:0A:21:19:39:78:10:CB
Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
Certificate issuer:       /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Certificate serial:       01962E2AFDBACC416C3B33F48D91F3F10876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
Manifest number:          0204
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: 9pwkvVGUxZHUtwNlu3Y83Nxaz_8.roa (hash: wGfSTyvkpA3QffCb7EADqonJa2uikcNI7XZWM9G88mE=)
                          2: dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl (hash: O/TZxPWhJP0wmfhr6MbZM/OQxuynsIJZvzLfvm7JmuI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fd:ba:cc:41:6c:3b:33:f4:8d:91:f3:f1:08:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=7b2dfe3ee6138baf7070a9efd60a2119397810cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:25:60:02:bb:0d:5b:c0:01:1d:e6:eb:ff:
                    3a:36:15:32:22:0d:e6:be:e8:92:a7:c0:f1:4a:15:
                    bb:57:71:71:a0:ec:e8:80:c9:9b:e2:ec:f4:a1:1e:
                    9a:75:0d:99:e3:a5:d4:08:6d:57:aa:2b:7c:8c:1e:
                    2c:69:24:8c:73:46:4c:c3:fb:62:87:e1:63:5d:c7:
                    2c:5d:f2:dd:a1:76:be:ec:f7:f0:aa:b0:17:0a:4f:
                    2d:c5:6d:c4:ef:74:3d:f6:ae:05:e6:13:b6:c5:12:
                    ed:bd:44:25:6c:de:ab:91:47:c7:be:39:48:8e:94:
                    17:57:de:bc:d1:c5:83:70:02:e9:c8:f8:3a:06:f3:
                    34:c4:48:5b:e4:62:40:74:ec:23:97:93:fa:99:b2:
                    62:10:37:8c:04:30:90:1a:bb:8a:0b:af:08:bb:b9:
                    90:77:1e:79:39:b3:c2:6c:25:f3:74:9b:aa:70:a5:
                    fc:69:2c:4a:77:b2:a0:99:58:90:a1:8e:22:3f:ab:
                    a0:2e:57:61:85:9b:49:18:78:73:e2:fe:3f:bf:27:
                    12:6e:76:db:63:7b:9f:c2:7a:2f:27:12:32:84:ed:
                    57:ac:93:66:88:f1:fa:6d:3f:57:94:b7:1e:92:5e:
                    b7:d7:95:c2:02:0b:11:49:7d:04:57:fe:80:ec:20:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2D:FE:3E:E6:13:8B:AF:70:70:A9:EF:D6:0A:21:19:39:78:10:CB
            X509v3 Authority Key Identifier:
                keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5c:3d:1a:7c:4f:df:ac:61:fa:2a:72:6a:5e:23:2f:f1:66:
         59:1a:95:34:73:3f:a6:6c:6b:87:1e:80:2d:27:31:23:b7:e4:
         c3:31:af:95:b9:e0:82:49:32:2c:d0:78:ce:3a:aa:e9:5d:c4:
         47:27:d7:69:96:30:8e:c5:78:e2:2f:10:40:fd:db:19:ed:5a:
         20:81:4a:d8:72:d2:9a:ae:87:97:77:fa:c7:71:5d:db:e2:f6:
         48:9a:51:8a:35:b9:8e:34:68:64:6e:21:31:5b:7b:1c:d1:65:
         ad:2b:c5:c1:15:26:b6:45:7e:c9:0c:b2:fb:d1:9e:ee:96:07:
         d0:7f:c3:b2:de:fa:be:f6:10:49:27:87:f9:8c:46:a9:e1:88:
         e1:e7:99:74:9e:98:90:89:fb:30:3d:61:d9:71:f3:ec:d5:58:
         96:79:a9:90:82:ec:6d:87:1f:0d:27:ca:c5:11:05:b8:e4:15:
         a0:ab:8a:78:47:0e:06:ff:74:1b:7b:04:d3:e7:03:f7:cf:2f:
         6f:fc:65:1e:ba:91:9d:d0:50:ec:f6:c6:42:f5:2d:c9:87:a9:
         ce:9b:30:b3:25:57:13:ab:e1:df:a1:87:86:5a:56:6a:aa:03:
         2d:51:2c:53:62:c5:ec:95:67:59:34:4e:a2:e1:2d:de:d5:bc:
         43:4d:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----