Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File:                     POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier:          0ImFcHOz1qTVmdq0lt9FRYGqN3SS9LMzwMfxsIwWs8k=
Subject key identifier:   DA:C4:41:D2:C0:BC:4F:9C:08:97:ED:A2:4A:7F:74:23:3F:45:D6:2B
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer:       /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial:       01962E98FFA31E65C5343410832111E2714E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number:          0993
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=)
                          2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: 5f+nDrDUc84UjMTYRz+Y5/hfj+U86r510PzzAIA7Mj4=)
                          3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ff:a3:1e:65:c5:34:34:10:83:21:11:e2:71:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=dac441d2c0bc4f9c0897eda24a7f74233f45d62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:0f:32:6b:98:d0:51:57:ae:62:f8:1e:3f:
                    b9:5f:db:42:02:b8:bc:99:20:7b:dd:83:c0:db:e1:
                    01:bb:3d:05:58:01:fc:dd:a4:3e:fa:cd:0f:33:8b:
                    c1:f2:ac:a8:03:4f:2b:bc:c8:46:bf:bf:62:7d:c1:
                    34:0e:51:8d:33:cd:5d:83:ca:ff:90:d3:06:2c:4c:
                    bb:1a:be:e6:88:65:bd:e3:2a:52:9d:d2:5d:ba:ff:
                    e6:3a:be:cb:28:7c:35:61:0c:92:da:b5:e0:7e:d2:
                    88:89:98:31:d6:31:06:8d:53:68:8d:ce:0f:30:71:
                    4b:1a:ee:b5:65:08:88:1e:56:06:14:5f:78:4a:da:
                    f8:b2:ae:30:ea:80:f0:7f:2b:67:df:fa:52:f8:00:
                    21:b5:9f:d4:3c:98:41:8e:59:1e:8e:98:34:85:d5:
                    cf:f9:81:f8:cb:72:28:31:a4:6c:1a:68:8c:f8:a2:
                    03:b9:b2:63:4b:50:32:ea:6b:cd:9a:af:9e:ba:b0:
                    92:1f:5d:2b:06:73:eb:bb:bf:c6:f2:05:ea:c8:f8:
                    39:23:78:a2:d0:95:fc:8c:b3:79:ab:d2:b2:14:75:
                    98:27:76:e5:25:73:0d:19:92:0e:2e:65:e6:fc:6c:
                    20:eb:9b:5b:f4:4c:3d:e8:7b:fd:94:de:e7:d2:ad:
                    9e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C4:41:D2:C0:BC:4F:9C:08:97:ED:A2:4A:7F:74:23:3F:45:D6:2B
            X509v3 Authority Key Identifier:
                keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c0:60:13:bc:41:0f:cc:2f:a4:c1:d5:3e:75:ac:d5:7e:2a:
         8c:dc:9d:99:ef:eb:49:e4:64:fd:b3:f2:a8:a6:e6:fb:42:0e:
         3f:0d:7f:1a:a3:2e:3f:73:8d:1e:ec:ab:64:d6:69:36:1b:66:
         52:ab:b7:72:c4:4a:cc:91:eb:72:6b:2a:8c:46:b0:9b:24:2b:
         7b:68:b8:84:83:d0:e9:26:22:f6:c8:8d:93:d8:51:28:74:63:
         50:fb:ab:cd:bb:d1:bc:f1:3b:c2:47:91:2b:6a:dd:15:59:ed:
         52:65:f4:9e:b2:7e:68:32:18:f1:78:bb:93:8b:ab:f8:78:92:
         f6:d1:68:d6:83:d9:28:18:2e:1b:fe:66:3e:df:c9:03:29:4e:
         85:79:a1:b3:dc:25:3f:8a:6d:b6:1f:72:09:87:f9:bc:9b:a9:
         7c:cc:1d:8f:14:5f:56:66:1c:ee:5f:b3:1b:91:16:42:4e:9b:
         02:98:b1:3e:0d:6b:74:99:3a:89:27:c1:d9:d4:be:6e:77:5c:
         5d:76:38:a0:f0:65:9b:b8:24:33:fe:0c:b7:f2:c4:47:ca:6f:
         38:39:5a:fe:dd:bb:f0:22:91:14:df:06:bd:ff:f1:6e:48:17:
         5c:f4:7a:e5:d7:4d:21:9e:c5:b7:9f:15:ce:b0:03:4f:c9:9d:
         fb:84:7c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----