Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
File:                     dxPzWC9jkBMFUwtLGTbNbmYRowo.mft (raw, json)
Hash identifier:          sMobLhtuNOSFyexAUsVlJd0Yy1wHnX39nGAELVctgwU=
Subject key identifier:   6F:1B:9C:4F:F9:B8:72:61:F6:20:49:55:2B:FD:0E:DD:8F:58:47:C0
Authority key identifier: 77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
Certificate issuer:       /CN=7713f3582f63901305530b4b1936cd6e6611a30a
Certificate serial:       01962F06A86A026DF0FB421BB7130EF9233F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
Manifest number:          02EB
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: QBpayCeedHorPlMUrxP80cZpQMk.roa (hash: OQ5xE2z8NMteCC4WWbezxTDqjx0MzAo+K4Av2s6co/8=)
                          2: dxPzWC9jkBMFUwtLGTbNbmYRowo.crl (hash: 2jmzjI1rSWRcNhFcVIe5U+4qhLzKgSBybf6/ircdygA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a8:6a:02:6d:f0:fb:42:1b:b7:13:0e:f9:23:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7713f3582f63901305530b4b1936cd6e6611a30a
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=6f1b9c4ff9b87261f62049552bfd0edd8f5847c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:2c:97:41:b8:11:37:95:de:c5:ad:e1:c4:
                    1a:84:e0:35:a0:b6:f3:04:7a:c2:62:53:b3:eb:17:
                    d2:fc:cd:ef:1d:74:93:48:ca:67:8c:c1:d3:69:66:
                    87:dd:85:35:86:a6:33:6c:3b:ff:0e:fb:d3:b1:b0:
                    d1:21:26:a6:20:94:a1:c5:24:0f:e5:c2:ce:a5:2c:
                    8d:f2:c8:fe:1e:f2:d0:fd:f1:ba:e7:94:38:83:8f:
                    0b:dc:01:83:ec:75:57:ba:8f:b8:8f:f7:d6:aa:ea:
                    7d:e1:15:a8:89:14:5c:d9:78:73:0f:07:2e:c3:cb:
                    91:b8:60:b1:8a:b3:1c:93:f1:e6:dc:4c:1b:94:95:
                    77:e4:36:64:6b:d7:2f:d1:23:76:92:32:eb:5b:3c:
                    66:b2:0b:88:0d:15:f1:04:99:ab:12:bb:8b:76:ff:
                    67:43:14:6a:2d:03:b3:c1:84:ac:1d:ab:77:90:a6:
                    9e:d7:b3:67:70:64:60:f0:a0:a2:cc:ab:66:c2:4b:
                    50:49:eb:78:f7:b0:9d:fc:0f:6a:e5:ed:7c:e6:ac:
                    b0:20:9d:1a:1b:07:2a:80:39:0e:e0:69:07:f1:4d:
                    70:26:56:58:20:29:cc:40:a2:f5:67:12:c5:62:91:
                    b8:15:8c:e0:cf:03:01:bc:0b:f8:a8:6f:ef:28:bc:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1B:9C:4F:F9:B8:72:61:F6:20:49:55:2B:FD:0E:DD:8F:58:47:C0
            X509v3 Authority Key Identifier:
                keyid:77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:63:c0:2f:e4:41:fa:e3:e4:ea:5f:4e:c5:c4:6e:d2:8f:cc:
         55:00:35:b5:e9:bd:f4:a5:44:ad:e7:b2:9d:a5:92:75:3f:c3:
         ce:3a:51:45:85:0c:42:90:1b:3f:a6:d4:99:9f:0a:af:c9:be:
         21:56:cb:2c:e3:a1:c2:26:0f:ea:a1:20:f5:8d:ee:f7:c6:54:
         c4:da:fc:09:42:04:9d:22:2b:80:f7:b8:b1:bd:1a:dd:32:7a:
         e0:7c:d5:5d:87:6b:8e:87:77:0b:98:3c:30:5f:37:bf:f3:37:
         64:c1:37:7a:6e:1b:24:7e:78:3a:16:7a:d1:80:0e:1d:2e:81:
         36:d3:4c:00:6f:28:3f:9d:05:e6:39:62:9b:01:a0:90:37:0c:
         46:53:cf:42:c0:4d:a1:4c:2d:66:94:7b:5a:83:5f:97:e4:20:
         4e:14:8b:11:1a:85:d3:ef:1e:d6:3d:70:40:50:2f:d5:3a:29:
         8c:5a:8c:ef:51:fa:41:5a:72:16:dd:ba:81:2f:9b:77:3d:c9:
         d4:86:40:de:57:1c:36:da:62:0e:a8:61:7d:33:94:33:b1:9a:
         67:40:8c:82:ff:d1:89:87:f4:5d:ac:9b:df:0d:67:72:d4:8a:
         8f:de:90:f0:60:1e:e5:61:22:48:66:f5:45:6a:9d:a0:7c:e7:
         75:27:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----