Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File:                     D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier:          gRNliG4lhqpyhK8RhGGL2kE3k6AOXE6fmeKmEdxgflc=
Subject key identifier:   AB:32:A5:05:89:E0:FF:62:AE:37:7D:CB:6F:73:17:0F:F6:41:20:25
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer:       /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial:       01962F0683D3A6E81E1B0536B2A822CB8C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number:          13D5
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: 1-9Xw-f0nG_vBoFqkQWYYVhrXaOQ.roa (hash: x800ct6/X3EmID3N4yS/h3J8l59DPbBfkE8AT6PGI1Q=)
                          2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: EVNkjzoPnMh9APCu9ARH6W1h7cSu4LtvJ2SvhIaKAyo=)
                          3: DLsbQslMWMAA8m5x5xT2CbKj_PA.roa (hash: BA4GEn1Aa+rFpkRZJ9HDbAjJajVs68qZDjkbK7NP/Xc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:83:d3:a6:e8:1e:1b:05:36:b2:a8:22:cb:8c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=ab32a50589e0ff62ae377dcb6f73170ff6412025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:7f:2b:ca:38:88:6d:a4:2d:0d:89:bd:6c:
                    16:a8:ab:0c:7d:a2:a7:a1:e5:05:3f:21:b0:bf:54:
                    41:e2:4d:d7:f0:35:13:3d:26:88:f1:cd:63:3f:7c:
                    6c:0f:9c:e1:5b:be:42:2a:97:4e:01:59:5a:c6:05:
                    91:84:8e:4a:76:6b:dd:91:84:dc:c9:01:46:51:ae:
                    9c:c1:8b:57:dc:49:8f:88:7b:22:bb:8a:f5:5f:81:
                    b0:99:fa:a2:fa:80:8c:20:d8:d1:82:89:be:72:23:
                    43:fa:0f:2f:77:4d:99:3e:1d:b7:7b:a0:fb:8a:14:
                    b7:d9:1a:d1:c4:b1:69:45:b7:41:04:15:f9:3c:38:
                    01:c4:4c:23:87:23:20:6d:22:76:d3:56:cc:c5:d3:
                    b6:3b:21:a9:24:d7:e4:33:32:cd:70:31:d1:49:90:
                    57:25:77:d5:c3:01:ab:90:01:82:ac:cc:f3:38:8e:
                    b4:b7:37:4a:71:f0:94:d1:6b:62:8a:db:94:f0:8a:
                    27:83:39:d2:19:2b:8a:b0:e1:fa:53:5e:10:a4:55:
                    2a:b2:90:85:34:80:65:bd:ae:e2:4e:be:87:ed:2c:
                    54:26:ff:04:0d:ab:d5:97:d5:e3:91:d1:02:31:22:
                    c6:69:64:e6:35:ee:a0:3d:e9:d7:66:52:11:fa:26:
                    0a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:32:A5:05:89:E0:FF:62:AE:37:7D:CB:6F:73:17:0F:F6:41:20:25
            X509v3 Authority Key Identifier:
                keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a8:0a:7f:dc:0f:da:a1:aa:14:d8:43:7d:7a:11:5c:f2:50:
         a4:36:31:23:43:94:1a:37:aa:46:ba:14:d4:f8:a3:ae:76:90:
         47:33:fd:ff:8a:81:13:1e:b0:29:8c:de:5e:3c:9c:54:52:ec:
         e0:8f:64:2f:19:55:92:9f:c6:e4:2d:65:5b:ee:5b:bc:8f:2b:
         71:c2:ca:7e:a3:5c:f8:8d:62:43:87:a0:ad:8f:a2:4d:f4:81:
         ff:96:58:ff:59:1e:c1:35:68:47:c8:64:72:78:e0:90:30:f9:
         0c:18:82:e7:c0:b1:f1:d3:c5:0b:59:99:2d:b4:17:bb:ca:39:
         3c:da:2c:5b:2b:06:68:e0:b5:3b:97:1f:37:4b:5e:dc:ee:d6:
         6e:40:89:cd:b3:0b:b2:94:fd:e3:7a:fe:5d:05:1b:f4:b0:39:
         76:70:8f:79:48:6b:13:64:3d:50:77:d6:a2:28:a4:76:07:8c:
         ed:a5:39:2a:99:46:14:0b:4d:de:e0:3d:bf:86:06:be:b4:e2:
         c2:22:1c:96:41:c1:69:d1:4d:53:e0:77:7a:e0:4a:9f:e2:6d:
         5c:75:4a:80:43:ca:13:07:af:d7:e1:9f:7c:7b:52:da:aa:0c:
         e2:93:da:7a:c0:33:4c:59:79:b8:75:88:91:f9:d9:f3:79:70:
         68:8f:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----