Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File:                     oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier:          7f3N5Jx77W1S+urjP3Bgc1gOlKhSTP+Ofzd/ctDWcjE=
Subject key identifier:   D1:DC:52:62:E1:81:FE:8E:48:F1:9F:22:D4:0E:54:1F:BD:8B:17:85
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer:       /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial:       01962E99653D434C53B6D1F84B54A75DBA57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number:          046F
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: oFklvX9KlU1NM_bVTSTtZ1s8fa8.roa (hash: 4FiRkOjDg+qr7WljZjcDh3AhahDm0psFF2Z877w08JM=)
                          2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: c79QxbeftUh5iwuY4Lu8pQbim8ppOHsDyRqDiraJSnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:65:3d:43:4c:53:b6:d1:f8:4b:54:a7:5d:ba:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=d1dc5262e181fe8e48f19f22d40e541fbd8b1785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:54:8d:a3:e8:bb:28:3c:d1:fe:c2:00:22:
                    d3:73:ae:5e:3f:66:bf:1f:37:64:53:37:b3:a7:a5:
                    9b:fa:c1:b4:be:80:a9:65:82:99:47:b3:51:09:29:
                    df:ce:5d:61:84:17:05:0e:dd:fc:e0:b0:8d:80:08:
                    2c:1a:e8:26:e2:a5:26:09:66:d9:8e:ea:e4:1e:62:
                    49:1e:26:58:d6:9d:02:87:63:21:20:e9:da:99:27:
                    c5:b4:d2:82:a1:12:60:89:82:25:69:91:1c:8b:8a:
                    a9:e6:40:c7:49:2c:18:d5:1e:c3:8f:65:04:e9:52:
                    f5:54:ed:90:4d:22:39:00:a2:f0:ea:c4:e2:af:21:
                    e8:65:b3:ac:8c:07:b0:01:ef:b4:88:93:84:74:5a:
                    13:26:d9:f4:8a:16:7b:9a:04:0c:14:5f:63:98:79:
                    d1:87:52:f1:63:90:53:1e:39:53:c7:2f:6f:0a:4e:
                    d6:3a:8d:c2:48:2d:2b:97:8a:84:90:33:b3:c6:ca:
                    c9:70:2a:8e:8e:a6:43:5b:67:39:ba:84:44:b8:03:
                    89:c7:55:35:38:5d:5e:7a:a0:bb:0c:0b:0a:49:bd:
                    30:ef:8a:3e:d0:d2:16:fc:d4:06:04:b4:2c:32:09:
                    1a:bd:60:e3:b2:08:c6:42:9d:c4:e1:a6:64:3d:b8:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DC:52:62:E1:81:FE:8E:48:F1:9F:22:D4:0E:54:1F:BD:8B:17:85
            X509v3 Authority Key Identifier:
                keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2e:13:9b:75:43:b7:7f:67:8c:04:ee:52:63:9f:3c:bb:fe:
         c3:cc:f2:08:f9:2a:54:13:c5:22:d1:09:9d:11:7f:f3:51:bc:
         05:f3:95:bd:f1:05:e4:17:da:02:66:27:13:05:4c:50:d2:7f:
         0d:07:3c:81:95:28:c4:ee:51:43:8e:36:b4:af:00:86:bf:85:
         3a:20:9b:f8:86:85:62:6c:01:c3:a3:47:35:6d:84:c9:6f:b8:
         b3:ca:f1:f9:55:4d:b2:96:c5:d5:39:7c:96:7c:c0:ec:15:29:
         c9:d4:1c:45:45:b6:04:c7:b7:97:7e:50:e9:6f:f2:01:83:44:
         15:f4:62:3d:80:a8:23:54:80:e6:c7:c7:e8:e0:67:3e:0e:30:
         9e:08:ec:9b:e7:e0:8b:6b:e2:4f:03:b2:75:18:5e:e4:a5:e3:
         a0:0c:af:86:26:bf:7d:55:ea:e1:71:0e:30:d3:50:59:8a:84:
         d2:28:72:99:b1:8a:16:e1:ec:72:44:64:c2:17:af:97:b8:3f:
         14:5f:7a:9d:30:cf:37:4e:21:87:5c:c3:9b:ec:33:5c:35:cd:
         c8:95:6c:2c:96:0b:c8:d3:98:f1:b7:26:9e:23:87:8d:01:cb:
         4a:c4:22:ed:69:51:39:86:c9:fd:04:9f:11:18:81:9b:27:fe:
         21:c6:03:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----