Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
File:                     DkGjlotidBs200i-DSyRxdSxM6I.mft (raw, json)
Hash identifier:          ao+xi+e6b/YiSlFksxt5WowTxTTwR1TarbLHvOEaACY=
Subject key identifier:   EE:D1:4A:DF:14:DE:8D:FD:AA:14:C9:C1:56:D4:34:6F:B0:53:56:DB
Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
Certificate issuer:       /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Certificate serial:       01962FAB1C589B2AD7315310538B5CCAE9E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: DkGjlotidBs200i-DSyRxdSxM6I.crl (hash: IFAvepxj7envOsvKT/f66vro0vFlGQIiVp+Fkcocb8A=)
                          2: nHnuu4F-Ic_WUkHgNlM9Go5lrwU.roa (hash: 5dkmrGwUAjAB3N+7M+2yibV5BDpF46oezVix+Yio7q4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1c:58:9b:2a:d7:31:53:10:53:8b:5c:ca:e9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=eed14adf14de8dfdaa14c9c156d4346fb05356db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ba:dc:f4:e8:0f:29:a1:1e:a9:3e:a3:02:61:
                    57:59:3d:0b:a5:e3:14:e9:49:1a:74:7e:2a:9e:a1:
                    bc:d7:7c:b0:33:52:b8:e0:a9:17:a6:1e:26:13:dd:
                    f2:99:38:81:3a:e5:31:5b:ab:3f:d2:45:c8:22:c6:
                    d5:35:23:93:e0:0a:35:d7:dd:cf:1c:02:f3:7d:ca:
                    58:20:45:ff:ba:50:2f:80:0a:f1:8e:60:a6:c7:47:
                    2e:86:5f:08:89:e1:74:66:c1:33:2e:bd:95:e8:63:
                    10:4f:5c:dd:2f:bf:0f:a2:de:fd:35:5e:6c:5c:70:
                    7f:0e:14:9b:40:a8:ad:ed:2d:d5:f7:8a:0c:41:f3:
                    0f:10:5c:80:5c:b8:82:7a:d9:66:d4:0b:e5:7d:79:
                    05:86:45:a5:9e:5a:9a:a7:ef:1a:fb:ea:b2:d2:5a:
                    1b:04:b4:69:42:c3:dd:9c:89:2a:cd:2b:ef:d9:f0:
                    be:4f:fa:9c:2d:8d:c8:a1:c0:18:09:7a:20:70:bb:
                    28:d1:fa:ce:b3:cb:74:d8:4c:75:98:11:ca:74:30:
                    42:2b:81:5f:b4:8c:e3:17:d0:8f:26:3f:1f:3e:2a:
                    fa:8e:d6:cb:10:64:f6:97:26:f8:7e:e6:fd:3d:17:
                    2e:f7:6e:4c:eb:9c:b2:da:14:d5:c7:b1:26:15:9f:
                    3e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D1:4A:DF:14:DE:8D:FD:AA:14:C9:C1:56:D4:34:6F:B0:53:56:DB
            X509v3 Authority Key Identifier:
                keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:5f:4b:eb:24:2f:56:2a:eb:08:8a:e0:b8:3d:c1:19:ee:c5:
         03:6c:7d:80:96:5d:9f:96:de:f3:59:8a:f8:f5:8d:76:2f:33:
         8f:59:63:74:65:ae:21:a8:9f:0b:52:bb:b2:58:9a:d1:f0:a5:
         39:cb:25:a5:bc:04:8f:1f:0c:9a:5c:f0:c4:46:c8:99:96:e6:
         94:54:5c:52:96:1e:d2:94:99:f4:ac:fc:d9:e0:f5:e8:af:64:
         a5:2b:61:fa:2c:5d:db:1d:1d:dc:65:9d:28:e7:4d:da:b3:47:
         cd:85:af:29:de:2a:8b:2c:36:9e:b1:df:16:48:37:5a:41:71:
         83:3b:7a:c3:20:17:79:04:39:fd:a4:5e:da:fe:c8:5f:7f:79:
         87:8a:1e:17:18:72:7b:64:72:6e:aa:9a:0d:7d:39:1f:26:67:
         fc:a6:f0:93:eb:24:88:20:7d:66:b5:06:dc:03:80:f4:11:53:
         00:50:5c:53:75:f3:f4:d0:a2:32:8e:f5:a4:26:af:68:6e:55:
         5b:6c:bb:94:d2:fe:84:40:e2:cd:6e:a5:eb:6e:1c:5c:47:01:
         40:a8:ef:3a:44:b4:31:ec:7f:f6:e3:31:8c:cd:3d:16:20:c0:
         b7:c9:d7:fa:c0:63:20:6a:82:a1:61:85:ef:6e:38:83:c3:26:
         64:a6:d4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----