Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File:                     dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier:          LEs2eTs+iGbEo6zqR2spQ4RFLiXy05qQ17T3sSNGVzo=
Subject key identifier:   AE:9D:E0:2E:97:0C:84:F8:2B:70:D9:66:63:F6:FD:E0:14:D2:8C:06
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer:       /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial:       01962E99A6BD60DB02CFCDE0DD2F5187D1E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number:          09A5
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (hash: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=)
                          2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: lCGXr++PsNFK8QtoVi/K3joqp8SxZtlg1oLnKR4SUtA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a6:bd:60:db:02:cf:cd:e0:dd:2f:51:87:d1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=ae9de02e970c84f82b70d96663f6fde014d28c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:0e:8d:9e:a0:cc:94:b8:5c:d9:a3:05:6d:
                    39:99:9f:9b:c7:6f:f7:36:85:84:4f:be:70:cd:84:
                    9a:9f:56:19:08:58:df:c8:bf:16:a7:b7:20:5a:a0:
                    0b:e1:b8:68:93:49:eb:78:df:dc:6f:7d:50:db:96:
                    ab:5a:fd:20:4f:2e:08:36:44:ae:a2:3e:9f:04:c1:
                    23:18:24:1e:71:f7:e0:e8:05:70:8b:47:33:06:71:
                    96:65:a3:b0:f2:84:2a:c3:57:9e:64:82:78:16:79:
                    e0:26:e8:23:a2:64:14:db:9c:6f:fe:64:df:68:cf:
                    32:05:2a:bd:8d:2a:7d:4d:3f:40:1e:b2:60:d7:f8:
                    3c:c4:aa:81:f7:26:64:2d:dc:32:29:97:33:f3:80:
                    2c:28:f7:12:35:90:f4:f6:6d:ee:49:51:31:40:df:
                    29:de:b9:4b:7c:2c:be:18:88:50:5d:50:11:9f:19:
                    82:87:02:e1:17:b6:9d:da:67:83:50:69:b6:bf:58:
                    86:52:49:94:52:6b:2c:ad:1f:8c:ce:36:9d:8b:35:
                    78:91:fe:51:14:cf:84:6b:db:ef:0c:9f:ba:83:3d:
                    d1:e7:2a:84:ef:8f:07:19:8a:15:2c:eb:f3:2b:5c:
                    8b:d5:23:9f:54:5f:de:73:78:70:d6:b6:5c:f2:1b:
                    32:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9D:E0:2E:97:0C:84:F8:2B:70:D9:66:63:F6:FD:E0:14:D2:8C:06
            X509v3 Authority Key Identifier:
                keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:55:fb:11:3c:fe:c8:87:2d:82:b7:a5:c3:d6:ad:26:68:2e:
         62:d0:b0:20:4c:03:2d:cc:e5:4a:59:f3:b2:d6:8f:aa:a9:51:
         ca:67:bb:f6:f8:a5:6c:16:05:dd:46:82:26:16:a9:a1:fa:1a:
         3b:f9:09:d4:84:f1:3e:b4:f8:e3:6e:17:06:4d:f7:51:3b:5a:
         e3:3b:2c:2b:73:ed:fa:09:ad:53:3c:54:6e:2c:79:80:b7:53:
         ee:f2:40:6b:4b:26:4b:62:b7:6f:43:be:c0:2d:ae:d2:24:36:
         2d:c6:a1:43:30:41:3b:d2:6a:1c:5f:a8:76:d7:d9:3e:ea:b6:
         d5:ea:7b:bf:4d:a6:74:58:9f:65:67:6f:28:42:b6:8f:ce:b7:
         44:d4:15:4e:f3:7f:90:57:1e:79:f5:72:9d:c9:83:01:ee:94:
         0c:95:49:d1:83:b0:6a:7a:5c:b2:50:f1:cf:e5:05:a6:bd:2e:
         b5:de:cb:b6:12:25:f7:32:92:75:a0:54:be:35:10:a7:f8:25:
         a1:f2:5c:e2:fa:bc:00:19:1a:4b:5f:76:a3:e5:37:63:b5:3b:
         07:73:d4:d1:bd:55:6a:8b:57:c5:62:e0:ff:66:d2:51:d9:32:
         e6:72:5a:28:eb:52:56:34:85:8d:67:19:ce:41:36:60:09:72:
         e2:31:4d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----