Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File:                     D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier:          h69rZV0Qwyvn69vb2jrkJn4hKiBamYAVXf3swcnL+T4=
Subject key identifier:   A8:23:1A:44:00:30:24:FE:7F:6C:BE:D2:79:D7:0F:6B:5B:B8:7F:17
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer:       /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial:       01962F3DD92F4DDAD21A5840E60603ECEAEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number:          0F81
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=)
                          2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: tJVMYfzibTqlSEtu9FwmDbUNDdCZc5YGay5qpdsndQQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d9:2f:4d:da:d2:1a:58:40:e6:06:03:ec:ea:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=a8231a44003024fe7f6cbed279d70f6b5bb87f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:67:39:92:e8:67:ed:fe:60:c6:0f:0f:d1:de:
                    40:04:5a:ec:88:eb:7a:cd:da:49:76:ce:f5:9a:16:
                    f7:cf:19:67:89:75:09:35:be:fd:9a:ae:17:33:5c:
                    10:45:2a:e2:ec:18:bd:ee:ba:b4:c8:d1:ec:31:62:
                    83:eb:00:a9:d1:78:ac:67:44:10:c6:e3:e0:72:0f:
                    63:bb:86:3d:27:b0:5e:45:63:a4:a9:53:e2:73:53:
                    15:8c:d3:d1:86:23:82:7b:e7:5e:c2:18:0e:82:8c:
                    34:f5:9e:22:9b:d6:cc:b3:cf:5b:c5:6d:51:2e:fa:
                    12:dd:94:7b:fa:80:b7:90:2c:bd:ac:ac:00:d0:65:
                    88:76:9f:85:ca:87:eb:9b:58:f2:78:3f:a1:7b:42:
                    d3:85:e5:bb:66:72:2b:39:0a:da:29:12:31:53:02:
                    c2:03:ab:c2:42:f7:83:3c:75:c4:a6:b9:81:a3:04:
                    7e:f1:e5:ad:e8:87:62:9d:57:f2:34:d6:57:50:1c:
                    26:8b:fb:36:b4:1f:3b:ff:08:f1:06:23:f3:4f:f3:
                    70:22:0d:99:d3:cb:12:44:a5:f8:89:10:69:dd:18:
                    c9:12:fc:aa:25:8a:1b:0e:66:1d:aa:39:05:83:f5:
                    5b:c2:08:80:5d:d0:84:1d:61:5d:ed:76:bc:e5:9a:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:23:1A:44:00:30:24:FE:7F:6C:BE:D2:79:D7:0F:6B:5B:B8:7F:17
            X509v3 Authority Key Identifier:
                keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b5:d2:f6:dd:fc:13:c8:ca:b7:73:b2:39:28:5c:b6:08:79:
         84:85:0a:3e:1d:13:f2:87:a7:23:7c:9c:43:33:ac:46:11:c0:
         ae:28:4f:a1:f7:e7:96:0a:b0:48:c5:79:4b:fa:cd:e5:73:2c:
         4a:bc:c9:5d:56:b0:79:88:17:8d:8f:60:4c:4f:56:8a:09:65:
         36:71:3c:30:22:54:84:f0:c3:4b:5b:e5:49:15:e8:dc:98:bc:
         eb:09:55:97:fb:6d:65:fd:13:08:c2:3a:52:7f:9d:4b:21:7f:
         69:b9:a9:37:d0:fd:2b:1b:95:36:37:8b:34:4c:28:83:03:81:
         33:cd:2b:00:da:8f:8a:15:8b:09:73:16:ea:2b:46:8b:0a:d7:
         5c:e3:d6:20:68:09:d8:44:b4:29:83:ed:ee:32:ad:4d:36:a3:
         ea:d9:b4:03:48:03:ee:77:ab:c1:c1:dc:38:3b:d0:02:57:2d:
         d9:36:69:93:38:f9:75:f5:73:35:df:f4:c8:c5:d1:4c:3e:9a:
         e8:6f:d8:c5:72:f8:4b:db:ea:16:ea:b0:27:9c:1e:f9:4d:58:
         0d:f9:1f:7d:79:93:8b:b0:a1:9a:8f:9c:57:94:1b:b8:74:d5:
         47:0e:a3:0c:92:e6:4b:48:dd:1b:8f:2f:c7:a6:d9:96:1b:d5:
         ad:bb:21:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----