Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
File:                     dciLHEH7612r73Q8V6zf_E-nRpk.mft (raw, json)
Hash identifier:          y3Bcpl7jJRHPJgyK0VbgzhxWwmUmpa8ozoVuNK5HDk8=
Subject key identifier:   E8:DE:B2:B2:CA:0A:86:CE:07:CE:18:8E:E4:FE:81:92:AB:27:4A:FA
Authority key identifier: 75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
Certificate issuer:       /CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Certificate serial:       01962F3D3C81168A3072508A9270259F3921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
Manifest number:          0F79
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: 2bqsQsJql_hwoFMeZ0nmgZGmbEw.roa (hash: e5rzAihzL4LX4PAPTH0rwfwcZpBTQn6I0oUQG0cd6f8=)
                          2: dciLHEH7612r73Q8V6zf_E-nRpk.crl (hash: MUuH7Y8UYQ7FZCiJd9rkcLeLxgScLSlV9xZW6k7VRhY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3c:81:16:8a:30:72:50:8a:92:70:25:9f:39:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=e8deb2b2ca0a86ce07ce188ee4fe8192ab274afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:74:27:19:c8:2f:3d:e8:c8:df:66:6c:25:
                    3c:ce:70:88:63:19:01:40:a5:27:25:59:af:11:0a:
                    a4:ff:74:1c:28:11:26:9c:b1:e6:f7:d6:55:1a:48:
                    1c:51:43:b1:cc:25:33:b9:07:0c:a2:bc:ae:2d:6b:
                    e6:61:2c:c0:b5:bc:98:52:63:c2:d7:dd:93:4d:58:
                    75:17:b8:32:f9:92:df:28:a2:3e:e7:14:a5:3a:ea:
                    fe:89:db:63:b6:21:64:2e:b9:97:8a:b1:00:4f:4b:
                    e5:87:a5:00:c3:65:e3:fa:42:bf:4a:7e:9e:d7:90:
                    a7:3e:63:84:b4:4b:e3:1b:db:9a:7c:16:dd:d5:9c:
                    93:9d:d1:55:58:99:0a:72:50:67:45:10:51:0a:e8:
                    bf:94:ac:c6:66:e4:14:7c:df:6b:4e:88:a6:62:d9:
                    20:ba:92:4b:1b:21:e7:f0:97:b7:03:ca:76:c2:d5:
                    87:e8:55:5c:13:1a:e7:ae:0c:1a:bb:60:16:44:56:
                    c0:f0:5b:1d:f5:27:44:4c:94:a4:bd:21:89:89:e3:
                    d9:98:c2:c8:49:0d:14:0d:c3:c6:6e:83:06:d9:c3:
                    39:a9:b5:cb:09:ae:21:fc:a9:90:55:45:d7:75:29:
                    4d:80:5a:3e:3f:fa:cf:91:ce:04:48:eb:37:d8:8f:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DE:B2:B2:CA:0A:86:CE:07:CE:18:8E:E4:FE:81:92:AB:27:4A:FA
            X509v3 Authority Key Identifier:
                keyid:75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:57:8e:9e:94:dd:78:5f:be:5f:c4:35:66:c2:93:26:8e:47:
         a4:1a:2e:bb:0d:1c:aa:a0:d3:16:07:bb:05:4b:47:1f:1e:ab:
         c4:18:b8:3f:47:da:62:b5:ed:9f:03:57:7a:0b:56:0d:de:21:
         62:b6:c8:50:dc:92:1b:46:7f:8b:67:af:da:7e:a8:a7:c6:2a:
         de:a5:87:79:57:9d:ea:9f:ae:20:f0:a7:c3:0a:2b:e5:a5:55:
         77:33:2e:21:78:75:f7:d5:a9:6c:2d:da:ed:d8:48:53:fa:c4:
         94:e5:f7:22:6e:b7:82:3e:89:6e:5d:1f:e9:82:72:45:41:ea:
         8c:e5:5d:2f:fb:b5:16:22:fa:b6:1a:6c:02:b5:c2:d2:4d:59:
         b9:7e:b1:0c:e8:d4:e3:72:19:72:98:c6:45:4c:26:0f:5e:c4:
         4a:ca:f2:b0:30:d8:80:8d:3e:e5:71:31:88:6d:2a:50:62:c3:
         62:29:2f:12:18:57:3e:e5:38:83:f2:c3:1e:b3:a4:9b:5a:10:
         a0:53:e0:29:37:75:cc:1a:44:94:30:43:ee:5b:39:dc:54:75:
         54:24:2a:20:7c:33:f7:de:fd:5f:4c:d3:f7:66:dd:2b:be:4c:
         20:44:49:c4:e2:c3:d3:41:a3:a0:ae:84:0a:8c:02:3c:42:76:
         91:26:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----