Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
File:                     rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft (raw, json)
Hash identifier:          2If1U040NcFPmwZ4bK16ZbIOdnO8wJxbGyU1eHC8qkw=
Subject key identifier:   31:2A:51:7B:89:48:9E:FC:4B:8C:11:0C:C7:B8:84:A7:EF:3B:F8:E3
Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
Certificate issuer:       /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Certificate serial:       01962E99684FBAED5280BAF61904FDAC86E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl (hash: 66SG3DZaAt6umwdJtpxARcFlJHQfuN5UF9ZgO9ihYOs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:68:4f:ba:ed:52:80:ba:f6:19:04:fd:ac:86:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=312a517b89489efc4b8c110cc7b884a7ef3bf8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fa:95:7a:62:5e:41:1c:72:06:76:64:34:86:
                    8c:cb:24:05:70:9c:4c:4e:d4:a6:f1:e8:23:a9:e6:
                    60:18:f2:2b:c0:7a:fa:dc:34:f6:31:3d:5c:6a:98:
                    5e:08:21:6b:54:de:26:f6:bb:b9:48:50:78:11:4a:
                    35:38:cc:18:70:3c:0c:de:63:be:d0:d8:42:e5:e9:
                    93:7f:c6:cb:c9:05:b8:c9:41:ea:d1:14:bf:d5:2d:
                    e3:c0:2c:2f:23:1e:60:29:84:1f:94:df:09:a2:d1:
                    5c:28:55:b9:62:7b:e8:6f:53:36:05:f6:35:09:98:
                    1d:3c:70:cf:39:82:01:1f:09:80:2c:ed:77:83:18:
                    62:ae:51:30:c5:e4:bd:e5:54:8f:c5:5c:7f:51:30:
                    17:c4:27:99:d2:07:87:02:9e:1f:55:04:35:66:e1:
                    e3:6e:d1:48:4a:c3:5c:4a:cd:65:88:79:f5:8b:bf:
                    f4:a3:be:4a:ef:29:bf:25:da:e5:f3:c4:76:df:4b:
                    69:31:bd:18:11:52:3b:df:fd:0f:c6:4c:eb:8d:d4:
                    00:f2:9b:eb:e3:ea:54:f7:55:ae:97:63:87:76:b7:
                    29:30:b9:a8:aa:8f:68:a8:fe:58:50:65:b5:d9:50:
                    e6:f7:b8:6d:68:c7:43:f6:9b:73:8b:33:a7:a1:7d:
                    bc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2A:51:7B:89:48:9E:FC:4B:8C:11:0C:C7:B8:84:A7:EF:3B:F8:E3
            X509v3 Authority Key Identifier:
                keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:52:2c:64:18:0a:f7:de:e5:5c:5b:92:2f:90:09:37:81:73:
         33:26:85:09:7e:f9:e4:e7:85:76:bc:e9:46:07:af:f7:7f:f4:
         46:b7:6b:43:4a:39:8e:09:e9:b1:33:b3:89:be:f1:bf:a2:8a:
         97:29:8c:7c:b0:1a:80:0c:13:00:55:7d:05:dd:4e:c1:86:7d:
         2f:bc:64:a4:3d:8d:1f:e7:90:67:b2:7d:61:66:71:48:cb:67:
         18:88:c3:ae:8c:a5:c3:13:28:bc:33:f9:c3:8a:73:2c:bd:de:
         ad:32:4e:0b:38:3f:40:90:42:4e:af:e5:97:e5:07:af:e6:3e:
         c4:ed:05:fe:7d:6e:cb:5f:4a:d3:d5:48:d8:a9:5e:a3:4b:23:
         51:3d:9c:a1:84:70:31:66:bc:7a:03:bd:ae:3f:cc:a4:88:95:
         92:93:c0:8c:ad:a6:0f:07:72:d5:12:c7:ee:14:5b:cc:90:c0:
         08:8d:b5:49:a8:cb:5e:32:1b:8a:ab:78:21:2d:9c:89:d8:ea:
         5d:a4:9c:cc:74:b7:b4:2b:50:20:11:da:a1:92:bb:df:d7:06:
         dd:8b:e7:3d:8c:09:0b:d6:33:ee:04:5e:4f:47:2f:56:59:16:
         d8:f7:61:68:db:30:f4:e0:f9:d6:76:18:03:47:d5:06:3e:35:
         66:0f:16:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----