Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File:                     cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier:          nEoPE9Fly3CViN5w/WqhNjnljJpB0ZkWijFNRI0UiyA=
Subject key identifier:   69:49:55:B7:D0:96:D1:AB:96:B7:B5:6B:6A:42:A6:78:24:79:FB:5F
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer:       /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial:       01962F067C741672165300C47F6D6D23DD6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number:          04DB
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=)
                          2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: LDFljXkLJg8iA4aUZicSOwogQMJ63ImHpXQBytoMqVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7c:74:16:72:16:53:00:c4:7f:6d:6d:23:dd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=694955b7d096d1ab96b7b56b6a42a6782479fb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:26:c2:e2:df:a3:2e:36:f8:0d:49:91:11:
                    8d:1a:9a:4a:c1:bc:7d:9c:38:21:3f:e5:de:c4:74:
                    44:a9:43:8e:91:41:b9:a5:aa:03:96:53:7f:f6:b1:
                    8b:db:3a:88:94:32:92:2b:b7:95:4b:52:e7:1b:67:
                    15:5c:fb:87:45:c5:41:87:7d:7a:eb:71:e3:83:f4:
                    8e:05:d6:bb:48:d6:37:ae:85:c0:39:3b:42:a8:38:
                    09:50:50:a3:9e:35:d0:be:2d:56:ff:18:30:9e:27:
                    ba:ef:c5:51:07:d9:b9:29:b7:4d:22:ea:3f:11:fc:
                    ce:bd:a5:85:81:4e:ef:4c:52:66:2b:32:63:5e:35:
                    cd:4f:41:60:e0:0e:1b:3f:3f:3d:51:99:ca:17:85:
                    58:e9:bf:34:3c:33:64:6a:fb:cb:7b:b5:cf:dc:df:
                    2d:89:bf:74:dc:0e:dd:dc:3f:67:7d:75:4d:6f:ac:
                    75:1c:1b:65:ed:6e:61:cd:b1:ac:31:f8:bc:32:ed:
                    fc:3c:98:2c:a4:28:7f:f0:ed:22:3c:6a:93:fd:a3:
                    1f:0b:1e:b6:f6:ca:bc:76:2e:72:f1:a7:d4:99:ea:
                    ed:1b:d9:0a:0b:4d:63:cb:8d:a2:21:b5:be:77:1a:
                    9f:fd:5b:a9:2a:97:79:ef:db:bc:b4:59:c1:6f:77:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:49:55:B7:D0:96:D1:AB:96:B7:B5:6B:6A:42:A6:78:24:79:FB:5F
            X509v3 Authority Key Identifier:
                keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:09:2d:14:47:e2:1a:94:37:f6:ad:53:7a:4f:6b:d6:8d:e8:
         14:07:b4:c6:9d:c3:d5:37:32:39:51:da:5b:0c:95:c4:76:71:
         be:81:f8:18:38:d0:e6:c2:ce:92:15:06:3f:24:75:1e:c4:24:
         2d:11:fb:a2:72:0e:a3:2e:ed:29:3d:ed:6e:a0:f3:d5:f9:18:
         66:e1:d8:36:38:d6:9d:4e:b6:3a:ba:14:66:b0:71:93:53:9a:
         f6:75:85:9c:0e:2d:7a:81:dd:e2:2d:f3:64:4b:0b:87:a5:d5:
         28:7b:c8:e0:6c:5b:01:b4:3f:07:27:18:c7:90:53:74:85:bd:
         df:a7:63:7c:39:a8:24:a8:1a:47:ad:53:10:ee:3b:b7:94:75:
         65:db:33:cb:1d:35:c9:c1:a4:7e:70:cd:40:06:3d:8e:fb:bf:
         99:2c:c0:68:0e:b3:87:10:c1:dd:28:5a:52:2c:57:60:e6:e0:
         78:65:12:7a:47:0a:e0:80:b6:4d:5a:dd:77:8b:9e:9d:6d:7e:
         f7:af:9c:f8:45:c5:1b:16:08:9e:1a:fb:23:bf:5a:7f:13:92:
         00:33:ee:7f:9f:dc:c6:a4:6e:f7:3e:7e:85:00:54:71:c8:4c:
         af:56:f1:c9:19:b2:ac:84:a0:e5:93:68:77:3c:85:cf:a6:63:
         96:60:22:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----