Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
File:                     dGMyObqiEDEGpiYN39fni4CUNVw.mft (raw, json)
Hash identifier:          f9+5crdlTHmBu/NvsXuDSuuupwzSjZwEK02WafpMbKk=
Subject key identifier:   95:B0:66:4B:38:83:2E:23:B0:94:52:BE:84:28:DB:D6:F8:72:84:F0
Authority key identifier: 74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
Certificate issuer:       /CN=74633239baa2103106a6260ddfd7e78b8094355c
Certificate serial:       01962DF3A7E65518840B1652D1EE2D1E8D18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
Manifest number:          0BBE
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: GndNIt9G7qZhnR5IIBXP3kbyL_4.roa (hash: SBp7dhTz+pfIJxl9syItY+Kj164I5JLZ7F2dz4iFPso=)
                          2: dGMyObqiEDEGpiYN39fni4CUNVw.crl (hash: BgpsCWW3DWDHvyVEA7MVkQ9f7/fNPH3sK+g44eIs9QU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a7:e6:55:18:84:0b:16:52:d1:ee:2d:1e:8d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74633239baa2103106a6260ddfd7e78b8094355c
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=95b0664b38832e23b09452be8428dbd6f87284f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:12:ea:ba:a3:06:54:40:09:ae:b5:19:e9:
                    73:a8:78:47:ec:d2:da:ce:7e:fa:43:55:9b:a8:b4:
                    16:3f:24:2b:c8:5d:b1:c2:e7:70:35:92:b4:c0:ce:
                    1d:d0:83:2f:1d:ca:80:b5:d6:10:26:c6:65:a4:ba:
                    45:49:c4:d5:ad:6a:1e:a7:6f:99:ab:57:4c:ff:15:
                    dd:19:93:d6:a0:dc:e7:0a:53:b5:7d:29:32:18:89:
                    6a:08:a7:2e:75:9c:6c:29:34:c6:c7:d4:c0:d4:a4:
                    db:d1:2d:9f:4c:02:b1:a9:72:80:05:2a:6b:43:0f:
                    03:00:4c:44:90:84:2b:55:79:a1:90:f1:c3:c5:2b:
                    83:45:eb:88:2b:60:c8:0e:6a:f8:c5:7e:f1:03:b6:
                    57:1c:e9:33:91:db:be:c8:93:27:84:11:8e:16:04:
                    d4:ee:c9:c5:e0:f5:9e:49:2d:2a:db:a7:0d:e3:0c:
                    0c:ed:fd:d9:df:6a:45:92:b7:aa:de:8a:a9:ca:4e:
                    9d:08:70:58:86:34:96:2c:06:a0:63:98:31:1a:a9:
                    14:b8:04:4d:b9:60:e1:e4:08:4f:e1:75:39:b5:aa:
                    e8:a0:f9:ed:e7:60:7f:e2:5d:b3:72:89:8c:2b:8b:
                    84:2f:bd:6a:a2:86:0b:4e:52:98:40:e9:83:d9:47:
                    36:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B0:66:4B:38:83:2E:23:B0:94:52:BE:84:28:DB:D6:F8:72:84:F0
            X509v3 Authority Key Identifier:
                keyid:74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:27:d1:85:51:d4:4c:68:9e:61:26:a9:ec:7b:68:40:f7:60:
         34:5a:a3:5a:73:e1:f1:2b:57:60:1f:b1:97:09:48:b8:9d:93:
         52:5a:58:7e:02:d6:a8:2a:34:3c:60:40:1b:28:d1:a9:d9:30:
         35:b3:ff:85:d2:f5:b4:fa:19:7e:63:cf:3b:d3:db:d2:c2:74:
         1d:64:d3:bd:44:43:98:d2:08:9a:0b:39:5f:d1:bc:c4:c5:fc:
         a1:ec:e2:ae:bc:f2:88:31:45:6e:7b:1a:a7:f2:37:43:e7:1a:
         87:8e:7e:53:a0:f2:84:9a:e7:01:6a:df:30:d5:e3:ea:5f:ed:
         5c:49:15:e8:b3:27:e1:38:a4:03:0f:09:2f:4b:b5:cb:04:af:
         b5:11:78:14:04:c8:f6:f8:ac:6c:7a:7e:6c:75:86:aa:59:10:
         31:63:89:1d:f0:8f:13:af:2f:6f:3b:87:a7:fc:9e:60:85:a4:
         ee:fc:97:6f:a4:45:d5:e7:c3:92:7b:29:52:35:49:2f:50:7e:
         bd:4a:4c:08:2c:d8:82:c5:51:3d:21:ec:1d:a8:0f:e3:73:90:
         bb:2d:d4:63:1e:14:ea:97:51:3b:a9:af:c8:0a:d8:e8:fb:97:
         4c:8e:3f:93:cc:45:31:55:fb:54:66:f8:a4:a6:2f:58:c0:4c:
         ea:1b:b2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----