Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File:                     g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier:          azFF/yieETCMyi2x13LmzYRwOuw6dJBH1xdiTq35saY=
Subject key identifier:   B5:BC:D1:89:DA:89:3E:EF:DF:BF:BE:D3:66:C4:22:50:9D:CC:FC:C6
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer:       /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial:       01962F07251167F491E611A875FA352815BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number:          0E03
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=)
                          2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: LyEk02TOIgEb+KoQ2kDSeqIoe74ID7GuRfu21PS2HZA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:25:11:67:f4:91:e6:11:a8:75:fa:35:28:15:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=b5bcd189da893eefdfbfbed366c422509dccfcc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:b1:ef:02:44:a3:c5:ec:c8:e9:aa:e0:e1:
                    5b:b6:64:87:46:61:0f:e6:31:c1:5c:03:88:30:63:
                    2a:18:54:91:40:6f:25:05:66:9b:16:fc:18:7d:1a:
                    75:a5:a5:cc:62:12:21:be:e2:4c:7c:7a:ce:e0:88:
                    ae:9a:6a:0c:38:08:a5:46:9e:0e:14:98:0e:7e:88:
                    64:4d:bd:95:eb:68:da:3d:10:6e:81:0c:2f:3e:73:
                    42:12:7f:23:dd:6c:1e:f7:b6:e9:1c:6d:07:82:53:
                    6c:08:58:12:7e:b9:91:94:37:1a:43:57:14:1a:e8:
                    f0:0e:1f:79:c6:0f:aa:e6:fa:9d:b8:d7:06:de:52:
                    8a:ed:df:47:26:fd:ed:87:66:76:9c:c2:b5:bc:40:
                    6a:f5:c6:fc:b5:39:90:38:d7:f2:11:ac:80:f1:0a:
                    07:5f:d0:17:ad:31:2c:f1:9d:bd:dd:73:b3:61:3d:
                    73:f3:a9:85:0e:a7:9b:7d:cb:c4:e7:52:c6:5f:95:
                    06:7a:79:d9:72:1a:8a:51:44:45:11:85:6d:eb:9a:
                    18:1a:8e:31:be:d0:e4:08:0d:e3:64:26:c2:02:e6:
                    25:e6:ab:e9:f9:d9:24:87:31:fd:8d:9d:a4:e9:6c:
                    da:46:29:66:7d:a8:07:f5:d8:87:fb:63:5b:95:c1:
                    e6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BC:D1:89:DA:89:3E:EF:DF:BF:BE:D3:66:C4:22:50:9D:CC:FC:C6
            X509v3 Authority Key Identifier:
                keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:43:4c:43:60:ad:84:2e:43:4b:dc:fc:12:d6:c2:c4:85:8f:
         2e:82:a5:e2:d1:21:0e:77:96:d0:0b:2c:d8:3e:62:b9:f0:06:
         75:c5:33:d2:fc:81:4f:9a:be:6d:1f:a2:f3:da:11:ee:83:ea:
         a7:54:b4:9e:f3:d2:18:0c:30:dc:c6:8f:8c:35:23:78:c6:72:
         6e:d4:65:44:69:42:7c:be:2b:4c:a8:fb:44:40:60:c8:6d:7d:
         81:0d:ba:18:4d:27:46:2a:23:2a:a2:68:59:72:88:fb:2c:1c:
         80:a9:54:c5:b7:a5:b0:76:fa:b8:f4:75:7b:8d:02:18:93:1e:
         37:5c:c3:ab:ae:0e:bf:39:e8:f8:75:bd:2e:b4:62:3e:54:80:
         fa:d8:17:a3:71:02:ff:87:37:b2:6c:b3:54:9a:a2:52:2c:e6:
         d7:48:09:0d:86:1d:c0:16:c7:1a:58:ce:f7:52:67:81:86:98:
         55:f0:dd:93:8c:ba:c6:9b:cf:2f:b9:96:bc:d3:b8:4c:22:5f:
         e2:9d:7b:91:40:26:48:98:4c:70:ed:f5:63:9d:0d:5c:d0:6d:
         f4:2e:c0:28:1a:20:dd:15:f8:77:62:99:eb:42:da:ee:be:7c:
         28:d8:18:66:2d:13:fa:16:f9:81:78:9b:47:31:58:47:27:a2:
         85:5d:f5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----