Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
File:                     dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json)
Hash identifier:          7M+e6+0jBsndf3kw5Aj2DW90hXyAEBuBEkTRtKcal8w=
Subject key identifier:   E5:FA:60:6D:9E:4D:C9:63:3A:4E:34:F0:85:DD:70:38:75:69:94:EE
Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
Certificate issuer:       /CN=74864f5023ec6263ef9f16f90187f5f28061d115
Certificate serial:       01962DF4150F6A73EF4F24606367B183A15F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
Manifest number:          0AD7
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: h2idhjRHVqqI9xJQGDDRh2scdVzLhdEXLMMWOCAR7kk=)
                          2: vj_VJ7c4UiwkU_5yyGsly7O6qIk.roa (hash: RoD9r1uYXNwcvEQVZCci6nqFAbGm9X9wv8JUg9I5naM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:15:0f:6a:73:ef:4f:24:60:63:67:b1:83:a1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=e5fa606d9e4dc9633a4e34f085dd7038756994ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:67:76:28:17:b6:30:a0:c8:71:90:52:6d:35:
                    34:73:ec:07:96:29:4d:da:ac:62:45:24:7f:e9:20:
                    9f:75:71:d1:e5:1d:b5:c4:38:1c:2d:e7:2e:3a:9f:
                    89:4c:ae:43:79:32:74:dd:7f:fd:0a:1b:cc:4a:8b:
                    13:68:47:b8:58:ed:92:ac:aa:6a:66:8a:65:c0:40:
                    ed:20:70:b3:bd:1f:be:88:d0:9c:17:9f:6c:70:cc:
                    bc:1c:b8:a9:46:9c:4b:fa:db:20:97:11:0c:a2:fd:
                    96:13:05:9b:a7:1e:1b:6a:55:4a:40:1d:cb:96:e1:
                    b4:49:92:8d:f4:ae:6c:b5:48:9e:2e:24:4b:7d:34:
                    c6:db:f1:d8:64:12:6e:be:31:7f:10:cb:7d:22:bb:
                    a7:21:fb:da:ea:9b:29:03:08:f7:10:d2:f6:6f:66:
                    3b:97:3b:a9:63:82:a9:81:a3:f4:60:7d:87:d4:72:
                    72:ce:44:a6:c4:99:fd:75:da:08:cf:cc:4e:8f:cf:
                    b4:36:f1:e1:b8:57:9f:1c:56:f6:e9:17:53:52:eb:
                    ff:c1:f4:d4:93:03:6c:dc:0a:42:36:33:7d:2d:be:
                    aa:76:6f:dc:10:9e:46:0d:6c:49:41:be:d3:c4:68:
                    04:af:92:9d:e1:45:f4:a9:96:49:e0:79:0a:86:be:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FA:60:6D:9E:4D:C9:63:3A:4E:34:F0:85:DD:70:38:75:69:94:EE
            X509v3 Authority Key Identifier:
                keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3c:02:48:cc:d6:a4:87:02:41:bd:89:01:42:59:0b:e3:21:
         0c:17:d6:a1:8b:51:4e:fa:16:8f:3c:ec:59:a4:c9:c0:3f:0f:
         e7:ae:e4:65:59:39:fe:54:32:f5:9b:ea:f0:10:13:d3:81:f3:
         ce:39:a1:a2:2c:17:5e:41:97:c9:fa:75:72:25:47:73:88:14:
         fe:02:cc:f6:22:b6:07:26:cd:d1:84:46:cb:35:04:3f:96:45:
         a0:09:d1:60:9d:cf:34:c6:76:ad:fc:9d:95:ff:fa:69:3a:ad:
         e3:ab:a7:e5:37:fc:14:87:53:67:f1:7a:8b:cb:42:94:da:4d:
         ce:62:39:59:16:0f:20:a3:11:a1:a6:6d:ce:81:7d:3c:21:d0:
         84:00:af:48:48:8b:0b:62:6e:43:18:64:92:4f:01:ba:c7:be:
         9f:ef:a8:6d:ac:7b:35:f5:10:95:e8:62:f2:e6:e1:a7:6b:2b:
         0e:48:76:98:89:50:dc:aa:78:9d:ff:a3:ed:4e:c6:61:e6:03:
         ae:88:3b:1d:63:d7:94:b8:5b:ca:06:87:3a:56:5c:c9:09:91:
         0a:dc:a5:87:df:9c:7f:a5:30:50:c9:0d:0f:35:af:89:4d:df:
         36:55:22:9d:c0:92:37:3e:3b:10:2d:4a:ed:2a:32:35:da:ca:
         5f:bd:b0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----