Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File:                     CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier:          7vsMO9/Y7Ck8rQ/yCuQ//eu5LnqD8omcEVPvYua5GBY=
Subject key identifier:   5A:92:F7:77:F4:81:FD:D7:E9:41:36:49:BD:6E:4A:92:13:DA:61:4C
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer:       /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial:       01962DF3FAA157411955D8C0479C6B5CB1BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number:          07E2
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: 24PmMpD-bHbUV8mxF_RlzuSRjLU.roa (hash: ohLVMvfqoqKO1xPsU0QfK7dKJZtv+ZBmQ14II/YiXms=)
                          2: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: YgfmJ8biMHb2sJbEZkJMOuNKJ1RNEoXgS6nkZuBXkJs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fa:a1:57:41:19:55:d8:c0:47:9c:6b:5c:b1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=5a92f777f481fdd7e9413649bd6e4a9213da614c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:8e:fc:40:8f:65:c1:ab:91:ea:7e:14:a1:
                    20:4a:7f:a5:0b:9b:32:a4:d0:f2:53:5c:9c:00:60:
                    4f:7e:e0:a1:21:48:f7:43:d0:20:be:b5:ae:ad:fa:
                    32:d4:14:9c:60:5c:40:c3:69:f9:e1:dd:db:ab:b7:
                    b6:aa:87:eb:ef:2b:96:ad:0e:45:8d:15:85:e5:fa:
                    24:95:62:c8:51:f4:03:ee:c0:b5:87:a9:6e:9f:29:
                    b4:c1:9f:9d:b3:ab:ce:5b:be:cc:93:a7:35:dd:66:
                    ad:bd:0c:45:e4:7a:15:c0:92:67:96:be:69:86:7e:
                    22:9a:8c:1c:ba:00:b2:64:24:22:a0:cc:05:f3:6d:
                    3b:0d:71:fd:47:f2:44:75:e2:4e:6d:79:eb:8f:4d:
                    57:88:cf:6f:da:fb:22:5b:6f:e9:dd:2b:7c:8d:61:
                    2d:60:b9:cb:3b:25:1f:89:55:d3:f4:c6:52:4a:db:
                    ad:fb:97:1f:68:49:8c:e3:aa:3b:16:ff:0a:da:1f:
                    cd:09:4d:b5:06:fd:4a:b9:e4:2f:07:dc:c5:14:b4:
                    a6:12:b4:77:94:07:5d:63:8e:e4:b4:09:f8:fd:84:
                    0c:b9:d6:df:fe:1b:e9:e5:84:b2:32:88:84:2c:ad:
                    31:f2:2d:7e:fd:97:8c:3e:78:09:60:3e:de:3b:19:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:92:F7:77:F4:81:FD:D7:E9:41:36:49:BD:6E:4A:92:13:DA:61:4C
            X509v3 Authority Key Identifier:
                keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:88:c4:70:9f:8b:51:40:0c:40:95:79:76:6d:fc:05:a9:92:
         95:d9:dc:73:68:ee:27:4f:70:21:c0:56:0d:88:29:78:a1:b6:
         1c:5b:0d:c7:82:df:07:34:f9:55:de:07:ca:f3:bc:59:9f:13:
         b9:60:ae:57:0e:dc:e8:8b:36:54:9c:5a:cf:4d:c3:c2:dc:e6:
         b0:4a:2a:f1:20:f9:ec:ee:43:b9:65:bf:67:39:65:51:80:27:
         41:5e:f6:66:24:cc:30:bc:53:9f:25:e0:10:f0:57:bb:49:c1:
         42:39:fc:43:d8:21:ee:8d:c9:5f:3e:27:ef:28:57:c4:1c:14:
         1c:d9:42:2f:28:e2:0f:44:4e:b3:61:6e:73:fd:7b:22:15:44:
         ec:c6:e4:9c:28:9d:d3:2d:ef:e3:8d:62:7b:e5:e8:98:6e:01:
         c2:5a:c3:ec:0c:82:84:48:de:d3:a3:70:11:6c:35:01:8a:1e:
         aa:6c:02:e6:a9:d4:4f:fe:6e:d6:a8:fe:14:0d:d3:60:33:91:
         8a:36:0a:c2:a9:08:93:ba:25:ca:db:23:e8:5c:3c:82:08:58:
         e2:6a:60:91:b4:f4:cf:b1:a6:6f:80:73:99:e3:fe:31:5e:55:
         d5:6e:a7:46:69:b0:68:c6:0c:21:64:3a:2e:bd:87:60:37:f1:
         21:0f:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----