Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File:                     0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier:          MFHSDhqIwXXJ4JipMvx1VPJo11snfz+lrOXEO20EtV0=
Subject key identifier:   9E:0C:CA:74:8C:FB:E1:53:0B:0D:EC:99:B5:94:25:EA:71:AC:97:65
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer:       /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial:       01962DF427D32DBFCFDA328CBB781797FDDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: MuocwAmy1999NZalqnmHj1ai06yGOByPzbu4JoWqSVc=)
                          2: 9-3CRoQW_QjusaOMGpyHscSTGa0.roa (hash: hSgLJd/C+rhopgNVHjf6fxNZLuf8+Okfp+V4kR/UeS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:27:d3:2d:bf:cf:da:32:8c:bb:78:17:97:fd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=9e0cca748cfbe1530b0dec99b59425ea71ac9765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:ef:50:6a:0e:d6:3d:74:91:30:22:ff:52:
                    7a:34:60:ee:3b:36:f1:f3:eb:36:51:16:92:83:dc:
                    03:3d:bb:37:ef:93:0a:60:b8:e9:79:94:03:cf:96:
                    09:ae:dc:e8:29:60:a1:d8:2f:6a:78:fc:db:7b:44:
                    d2:15:ae:66:72:4f:49:cf:3d:22:c2:a7:6d:92:7e:
                    17:1a:e4:fa:f1:b5:20:e1:b5:08:35:ad:68:33:e3:
                    1d:ec:e7:fe:05:d7:27:04:18:19:d7:1d:4f:30:8d:
                    44:b8:8e:17:6e:64:70:8f:43:1e:af:2e:e2:a3:d8:
                    86:d2:6e:5c:b6:59:cc:96:96:05:d0:c5:78:a1:8c:
                    62:8f:b7:4f:ff:51:a5:1b:7e:e5:4b:9a:28:a4:28:
                    3e:56:51:74:b1:d3:b6:fc:d3:3f:ca:24:b7:cd:24:
                    d5:69:12:2f:b2:ae:9c:88:db:5e:de:66:1c:d7:c1:
                    80:27:58:1d:1b:fa:a8:ab:79:0a:95:72:51:c1:f7:
                    29:35:17:21:e3:cf:a7:74:73:cd:d5:fa:a8:d2:02:
                    e0:cc:7e:14:b0:25:14:a4:a6:51:36:cb:4e:35:77:
                    22:0f:88:aa:45:82:0b:08:3f:53:ce:03:46:37:47:
                    04:ce:a2:54:8b:89:1e:7c:b8:90:19:38:2e:31:ee:
                    f5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0C:CA:74:8C:FB:E1:53:0B:0D:EC:99:B5:94:25:EA:71:AC:97:65
            X509v3 Authority Key Identifier:
                keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2d:36:1c:e8:f2:1f:42:5d:47:8d:07:ea:02:bf:fb:e1:0b:
         38:49:75:b7:9c:6c:0e:91:e1:5f:d8:48:5e:1b:a2:4a:de:bd:
         bb:6d:49:85:e8:4d:f8:62:4e:76:01:fe:e7:44:fd:1d:7d:e9:
         75:9e:54:ca:a6:42:32:63:ef:d7:72:f6:92:bb:88:0b:35:ed:
         2e:7b:3b:b9:fd:02:72:34:27:5e:37:2c:91:20:f2:78:1d:aa:
         36:58:b0:9d:8d:4e:2a:41:bf:6a:ad:cf:20:1e:4e:d4:db:c0:
         bb:73:11:f6:b9:0b:a5:72:a2:40:f8:85:84:ab:03:78:8e:3b:
         70:f6:b5:57:ad:5b:6b:1b:be:82:d9:8b:bb:17:d1:a6:4d:64:
         59:9f:e2:7a:3d:45:25:46:50:d7:24:b0:7d:06:ae:3a:3a:8d:
         6b:9e:d7:d6:47:64:55:0e:39:7f:9e:65:2c:3e:c2:32:1e:b4:
         1c:08:61:3b:ed:dd:e3:de:47:0f:c1:28:37:b7:ae:89:33:92:
         e1:7a:20:3b:c1:dc:d5:a4:18:c9:f4:ed:85:b3:2d:10:da:18:
         82:dc:7e:85:93:50:02:bc:85:5e:af:0c:6d:10:5c:81:07:66:
         98:2d:80:8e:52:11:49:62:02:e9:cd:56:97:af:9c:26:48:3c:
         b5:19:9d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----