Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File:                     1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier:          jbuALZLdjbwZx8rAJ4Jbejb1mMd3/h+Gw4wjOTNFdTs=
Subject key identifier:   60:96:FA:32:CA:7F:DD:65:71:0B:F7:72:51:F6:E6:2C:34:6E:2D:07
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer:       /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial:       01962E98F8D9456B8C44D2CC149499D2EDB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number:          1210
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: pIjQK68/0w0lS20Q8N8d5V6k3tW/hfm63F7ErOkQMk8=)
                          2: gXT82y4_ruBTwVaX5bN2hgE4EKo.roa (hash: eKWZFW/juKdnFf5IqmdyNTYbtOCEhhxhQ9S8D2wh2us=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f8:d9:45:6b:8c:44:d2:cc:14:94:99:d2:ed:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=6096fa32ca7fdd65710bf77251f6e62c346e2d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:52:5b:28:fb:71:98:03:0c:b8:a4:aa:22:5d:
                    06:a4:fc:df:99:20:dd:20:1f:9e:54:0b:f2:35:02:
                    07:1e:27:00:af:13:bf:61:67:35:36:52:10:58:09:
                    c8:57:cd:8c:e5:fe:86:c9:7e:23:81:de:e0:1a:d0:
                    f8:1e:7c:9b:51:1e:da:fe:49:4f:bf:eb:af:94:d3:
                    1c:c1:ca:8d:77:8a:88:de:b2:ed:a5:fb:6e:3e:8f:
                    c5:96:73:d3:08:db:83:4f:7f:e9:00:60:41:13:18:
                    de:cd:17:d2:47:c6:6e:f1:9a:84:f2:6c:1a:6b:e7:
                    e9:80:66:9b:b0:63:72:5e:65:51:79:da:8b:7e:6a:
                    a0:2c:1a:35:9c:cf:c5:dd:4e:67:6d:0c:34:d8:73:
                    e1:08:85:cb:c1:98:67:6e:e3:bb:27:bd:e8:8d:0e:
                    c2:cd:54:d0:e6:59:29:04:0b:44:71:a5:d7:c7:1d:
                    07:08:79:a4:cf:70:9c:27:0b:2f:96:b8:bf:6a:77:
                    69:a0:f4:c8:8c:d9:d5:96:8b:7a:b7:2a:5a:1e:d9:
                    4d:df:b4:31:f5:d1:e8:30:f0:4c:48:da:82:44:e8:
                    b5:7c:31:99:80:2c:7a:bb:7c:07:e0:9d:6d:ac:3e:
                    35:36:e2:50:09:6e:d2:5e:17:bb:03:cf:01:d9:93:
                    d2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:96:FA:32:CA:7F:DD:65:71:0B:F7:72:51:F6:E6:2C:34:6E:2D:07
            X509v3 Authority Key Identifier:
                keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0f:93:b3:83:cc:a0:2e:13:0c:ba:d0:5e:fc:84:e3:ee:c7:
         d3:09:ad:3f:8e:67:52:25:90:10:54:2f:c2:14:0e:c4:f4:46:
         15:76:37:b1:6b:e8:ac:c9:06:45:d9:f0:c6:bf:93:0a:a1:1b:
         d0:72:50:27:ba:76:a1:c4:9a:fe:79:76:31:7a:35:00:ab:e4:
         8e:d0:ea:72:0e:da:32:7e:a7:9c:43:51:cf:d7:54:63:5a:d2:
         b3:4c:81:d0:6e:e1:7b:59:2f:07:36:6b:79:d0:cd:6e:01:de:
         73:88:ca:51:b4:9e:c8:49:17:e6:5d:a5:77:bb:ad:fb:f9:2a:
         6b:ea:f6:12:ee:9a:6b:c3:f8:7a:25:57:0f:67:cc:23:ad:27:
         6d:5d:8e:09:1c:74:28:8e:fb:5a:1b:75:20:8c:c2:3d:93:1b:
         14:0c:a5:b1:61:08:30:ec:f9:1a:5b:35:72:01:bd:2a:28:db:
         99:f0:b4:6d:7e:50:a0:38:2b:fe:97:74:a1:2c:e1:8e:15:c5:
         ef:40:8b:17:1e:45:cd:eb:7f:e8:ec:23:ef:db:59:53:de:5a:
         77:64:0d:61:31:25:c4:6e:ab:5d:51:94:27:4e:69:bb:da:f0:
         6d:93:30:55:d8:c1:69:69:4f:c2:9f:fe:0c:af:11:0e:20:0d:
         7c:49:0b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----