Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
File:                     Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json)
Hash identifier:          YnY04jxoX+ux25SaaSM0xxyDIpcMuHRd12e0xxdkrjA=
Subject key identifier:   8C:56:46:0B:41:AC:C5:A6:1D:CF:1D:0D:05:2A:D5:C7:C4:34:31:FB
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Certificate issuer:       /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial:       01962E2AB97DB0969D9922ED2BFA532CAD6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
Manifest number:          107F
Signing time:             Sun 13 Apr 2025 08:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:13 +0000
Files and hashes:         1: CQ0HG1zWD48ox6-boezAROBkH6Q.roa (hash: zcrpqTakOim+S6H2s99YrSuzoN8a0ByVl/l7V7jze5I=)
                          2: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: eefN8sJ0jBUGZNnZEoBDwrBfmjsb5+uhIQJI7zDG9vo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:b9:7d:b0:96:9d:99:22:ed:2b:fa:53:2c:ad:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
        Validity
            Not Before: Apr 13 08:01:13 2025 GMT
            Not After : Apr 14 08:01:13 2025 GMT
        Subject: CN=8c56460b41acc5a61dcf1d0d052ad5c7c43431fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5f:32:77:b1:2d:e0:e5:38:99:a1:6b:25:e2:
                    c5:83:e8:69:bd:5b:e8:d5:b3:77:42:26:d2:13:ba:
                    57:18:38:5b:03:04:df:c4:a0:e1:b1:d4:17:2f:61:
                    e4:7c:59:bc:95:bf:6e:98:0b:f6:4f:56:1b:e3:9e:
                    5e:5b:4f:68:36:75:2f:0b:ca:47:8a:1f:33:ab:42:
                    f7:00:f5:cd:5c:63:3e:74:74:03:c8:6c:bb:6d:8b:
                    05:d4:26:9b:4f:4b:0e:ea:ad:6b:5f:17:1d:26:40:
                    32:9b:41:1e:e4:fa:2e:73:9f:a4:9d:94:5b:18:3a:
                    1e:9b:7f:ac:4f:fe:ee:ed:44:b8:05:f0:fe:2b:14:
                    dc:ce:00:27:52:7b:f8:d6:c2:59:a4:9b:7a:bb:81:
                    ee:fe:d5:ec:ac:90:42:30:c2:5f:17:f9:9a:fc:f7:
                    3f:73:99:ff:98:10:f8:f0:4a:22:0a:96:31:f6:ae:
                    03:fc:f0:68:e5:d4:83:bc:f6:ca:b0:b0:64:08:5a:
                    06:55:f7:b9:3e:92:12:05:eb:42:68:21:3f:73:d9:
                    fa:44:3c:9b:a9:5b:82:72:23:b4:d6:1d:34:d3:a1:
                    4d:44:6f:09:22:92:22:d1:51:0e:95:f3:a1:5c:c8:
                    39:69:89:8c:55:6b:cf:7e:55:d9:cf:7f:93:8b:07:
                    0a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:56:46:0B:41:AC:C5:A6:1D:CF:1D:0D:05:2A:D5:C7:C4:34:31:FB
            X509v3 Authority Key Identifier:
                keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ca:45:19:f8:17:93:00:8f:2b:21:63:e8:04:e5:e7:9c:36:
         08:35:49:49:48:59:a1:06:32:46:44:19:18:b5:ad:56:9c:f1:
         fe:f3:da:fa:e8:58:b2:f8:f3:3a:1e:b1:4d:56:a5:9f:1a:18:
         6a:4e:d6:74:a3:0f:95:2c:a7:b2:95:78:00:50:47:63:6b:e5:
         8d:e3:ca:a7:aa:87:b6:98:05:31:07:b8:01:fd:af:dc:9d:f5:
         41:f4:4f:25:c6:af:ab:10:0b:68:b9:a3:68:2e:d6:80:eb:3f:
         a8:a2:17:5c:6d:13:2c:dd:50:31:35:67:fc:94:a1:33:36:38:
         77:40:a4:e2:1a:12:23:6e:2b:3e:5b:83:4d:54:61:b2:e5:4e:
         f3:04:e1:82:7c:b2:84:80:22:bd:60:72:3d:64:e7:f8:3c:9e:
         fb:5e:7a:85:60:34:4f:9c:67:39:aa:f9:b1:92:b8:16:10:d2:
         0d:4e:9d:24:74:ac:a4:45:b7:91:e9:5a:6e:68:c5:58:c1:2f:
         9a:d1:e4:35:5f:8c:67:e8:ad:b8:65:4a:f2:36:eb:6d:29:1f:
         89:6f:b4:bc:b8:09:e7:63:f6:f0:7c:4e:f0:da:7b:01:26:bb:
         71:bc:42:a1:db:d0:bf:5f:45:dd:a5:c1:5e:1e:5a:8e:2d:df:
         1a:8f:93:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----