Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
File:                     0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft (raw, json)
Hash identifier:          CLr4zbCFEWJwKbLF3DTPenh1A9P4kqjwt9W+jdT4Pyw=
Subject key identifier:   A5:89:2D:EF:C0:46:73:C0:53:1E:EE:6C:33:58:2A:4D:1A:40:3E:97
Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
Certificate issuer:       /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Certificate serial:       01962E61AF5D07DD66D4E1C31088374ECB7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl (hash: E7UkHDqSrDY5gsnPZGU2mPKBdY1VkYgkHyARqSpCn9w=)
                          2: AddwdaQYSDgJ_-W9pipGLPibD4Q.roa (hash: YjKAFD6jnw8P32xCITagf8KVgpNGeRxCswidFmsKIOw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:af:5d:07:dd:66:d4:e1:c3:10:88:37:4e:cb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=a5892defc04673c0531eee6c33582a4d1a403e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7d:c4:b6:44:9b:c2:ba:b3:98:1e:f7:31:b7:
                    7e:2e:da:f7:f2:a0:65:05:c7:ca:2a:4e:f7:0a:72:
                    85:a1:dd:4a:08:1f:6e:3e:7f:20:a3:f4:09:c3:8c:
                    9a:a4:12:6c:54:47:6d:d1:52:fc:1c:93:1a:5a:8b:
                    11:72:5b:80:40:5b:07:d6:7f:c0:ce:83:e5:c7:0b:
                    2e:0c:02:1e:be:fd:2f:1c:4c:bf:e3:39:d4:b2:cd:
                    ac:f9:2f:28:62:f3:6e:77:95:91:bc:ae:2a:3d:fa:
                    c9:87:dd:35:48:98:ee:9c:31:7c:36:0b:a8:47:83:
                    28:65:26:a5:e9:0a:f5:db:28:6d:2c:8d:77:ae:ac:
                    ff:71:87:7a:d6:5b:b4:6f:1f:f3:e0:a1:1e:eb:3e:
                    c3:d8:1a:f3:30:18:c9:ac:96:58:fc:27:3c:a7:b5:
                    f5:42:74:b3:00:85:e3:e9:e9:ab:7b:f8:67:46:b5:
                    27:fd:3b:5f:89:cf:30:4e:0d:7b:5c:f6:6e:35:98:
                    c5:fd:68:76:e4:70:18:b5:e8:a7:fb:70:0d:7f:87:
                    26:47:1a:d2:4f:8e:e2:8a:8c:8b:35:ee:9b:c1:6a:
                    f3:4e:47:c9:44:bc:58:68:19:53:e6:a0:76:d1:20:
                    c7:94:c0:d2:92:72:f7:65:d8:41:ad:3a:46:2f:f0:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:89:2D:EF:C0:46:73:C0:53:1E:EE:6C:33:58:2A:4D:1A:40:3E:97
            X509v3 Authority Key Identifier:
                keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f1:42:39:94:34:f0:b2:f1:e7:7b:cf:f8:c4:e1:d3:8a:cc:
         de:71:be:d6:fd:d8:10:ea:92:08:17:2e:0a:49:91:34:29:b9:
         ec:a0:b1:d7:02:c0:ef:2a:0a:1f:46:7d:2b:d7:5b:a4:67:84:
         69:59:be:c0:76:31:ef:6d:7e:a1:fa:7a:85:c7:e4:24:5a:7a:
         75:1e:7f:02:b4:d1:f6:b4:61:e6:8b:27:e3:9a:bb:85:84:07:
         c6:9c:65:52:c5:40:af:49:57:41:2a:f4:14:a8:58:5a:de:45:
         74:7a:fc:e0:3c:fd:5b:90:59:8f:71:5b:35:07:3c:c9:5a:73:
         27:db:fd:1d:db:d7:97:6a:6e:5a:1c:aa:e0:d8:e3:84:4d:c0:
         9f:d0:e7:6c:88:e2:38:63:3f:0e:98:c6:c7:a2:43:26:2e:0c:
         42:18:bd:48:77:22:6b:a5:49:c8:2f:44:86:03:4c:f1:bd:f4:
         fa:3b:e8:7d:54:12:ba:26:08:d0:e7:49:8a:ea:67:14:9f:14:
         53:4f:ae:dc:75:fd:9e:74:03:91:56:48:2a:3d:c7:99:fe:27:
         72:e7:db:22:42:5d:fd:0e:ed:7b:f1:18:b3:73:bc:c2:07:ee:
         09:87:d8:ef:e2:f7:c2:22:dc:02:77:cb:c8:9a:63:47:8d:9d:
         f1:84:51:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----