Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
File:                     d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json)
Hash identifier:          syC8fKcg2ZwY0borYIiZA+0IxwXo9rW32oXbefotiA4=
Subject key identifier:   9C:5A:B6:9A:DD:1E:A4:BC:92:8E:7C:21:F0:7A:4A:BD:DA:7F:45:DD
Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Certificate issuer:       /CN=77c7b457f9af042924142373ce090f7fa876257e
Certificate serial:       01962E99521A1BF372863DC1902746DC5A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
Manifest number:          0DAA
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: xw+0gxO47Z9T8c7V3/qRZSIp/7qH63EVhh/rvNkcSL8=)
                          2: gLKpyPGbqCEdbx2uKWZ-HtuhLy0.roa (hash: f77sZOCl1dYzZqqQSp/e70T40ZHDdgkRvhdb7798S4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:52:1a:1b:f3:72:86:3d:c1:90:27:46:dc:5a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=9c5ab69add1ea4bc928e7c21f07a4abdda7f45dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:42:07:64:6b:62:e4:70:00:b8:8a:e0:56:
                    60:19:3b:21:7f:2d:93:82:b7:a7:f7:02:36:cb:f0:
                    90:65:75:c7:a3:5b:02:68:45:a5:86:8c:30:5f:4f:
                    cb:68:7a:8b:b4:56:fe:5b:a6:ee:a5:e4:4b:1d:92:
                    d4:1e:70:ab:d3:32:eb:c5:73:70:2b:eb:76:d0:b6:
                    f0:49:4d:a3:35:f8:ee:f3:e8:ff:a6:6c:79:b7:0a:
                    32:b0:47:be:e8:65:99:90:1a:00:25:a5:c1:8f:d7:
                    ed:fe:fc:97:95:d1:57:65:f0:9b:3a:0d:57:7c:40:
                    20:e9:ad:ec:96:eb:f4:bf:f1:de:7b:13:3c:b0:79:
                    f9:37:5c:c6:32:92:bf:2e:50:a6:f7:98:97:06:f6:
                    c8:fd:36:f3:e3:45:5c:c7:c6:6b:1f:e7:e9:ab:58:
                    97:44:b1:dd:cc:91:bc:7b:d0:38:b1:42:67:bb:02:
                    5a:69:84:31:74:f9:48:be:4c:0b:15:70:1f:ac:47:
                    d0:03:75:49:1f:a4:7b:7f:f5:16:b5:b9:4b:7e:60:
                    f2:7c:a1:ba:f7:64:27:2e:25:5a:f2:65:a7:63:40:
                    1a:56:55:da:71:df:9d:6b:db:25:1b:c7:ac:56:ea:
                    ba:5d:35:47:34:83:ea:d4:ac:7f:70:66:3c:28:04:
                    86:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5A:B6:9A:DD:1E:A4:BC:92:8E:7C:21:F0:7A:4A:BD:DA:7F:45:DD
            X509v3 Authority Key Identifier:
                keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:32:51:1c:53:b0:31:33:63:29:89:73:d2:11:ef:7b:9f:80:
         71:4b:84:8b:d1:b2:39:85:3b:94:e4:72:90:06:e1:d3:7b:81:
         b9:d7:7b:e5:e8:35:d0:ca:8e:a8:e6:eb:b2:89:1c:02:33:53:
         6c:7b:87:9f:3c:c9:4a:83:91:eb:f5:08:34:4e:78:f1:65:7e:
         2c:b9:78:eb:5a:24:f8:36:f4:db:2e:c4:e4:c9:ef:63:49:c2:
         9c:45:c8:f3:f4:5a:34:87:4a:7d:e6:10:64:08:7c:5c:26:81:
         5e:9c:bb:b0:d3:38:83:d2:f5:9e:4d:57:2b:94:a1:a4:4f:fb:
         be:b3:39:be:1a:cf:bd:cd:a4:ee:46:a7:d2:33:f5:82:9f:76:
         30:76:c7:65:3a:33:55:24:88:4e:7e:d2:0d:39:d6:83:9c:7f:
         f8:9d:ab:47:2a:49:75:d3:17:21:6b:ff:79:36:19:80:c7:9d:
         ee:d4:71:b6:51:d4:0d:6d:ac:97:53:98:8a:30:4d:92:a8:29:
         55:fa:03:bd:51:5f:fc:fa:ed:3b:68:d0:70:cb:f5:2c:ba:03:
         83:7e:76:56:92:a0:a2:6b:79:86:bb:c1:f0:bd:b1:bf:03:98:
         9a:70:5d:db:ba:5d:b8:05:07:8b:fe:aa:4e:d7:34:76:c9:8f:
         b0:db:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----