Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
File:                     dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json)
Hash identifier:          G35dvqobZDg0rgT0bpDfY2e+YWHaFwcU8uc3RUGj1FQ=
Subject key identifier:   12:CF:A4:A0:A2:C3:6E:E7:5C:01:E8:B6:3F:F1:C8:AD:00:CF:C2:CA
Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
Certificate issuer:       /CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Certificate serial:       01962E9941E13B2CFD431169498ED4311636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: UaLrmjH+gVEcecj/Yd3mgrSY5jFFlVXLwP71tpKywiY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:41:e1:3b:2c:fd:43:11:69:49:8e:d4:31:16:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=12cfa4a0a2c36ee75c01e8b63ff1c8ad00cfc2ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:a2:6d:20:ac:b6:67:7e:15:48:b8:34:63:
                    aa:59:8a:8c:4f:d1:d2:7e:5e:68:4b:1b:6d:c3:75:
                    ac:a7:db:96:e7:55:0a:8c:3b:ff:51:b0:3a:8d:91:
                    a0:68:fc:0a:35:1f:28:eb:79:14:c1:98:dc:ed:94:
                    c9:09:40:31:74:92:38:77:a3:2e:5d:a3:e5:4b:f7:
                    12:d2:b2:93:89:69:5f:7b:af:88:80:9c:6b:f8:04:
                    64:25:31:62:e3:bf:17:6e:1e:ab:99:16:7a:26:bc:
                    ce:d5:b0:3d:31:c0:e9:d9:73:10:f0:43:7f:19:7b:
                    80:df:5d:de:1e:c3:97:46:a1:28:cc:67:7e:1e:f7:
                    7d:4c:ca:87:ce:86:8b:66:24:b9:0b:0a:02:04:b6:
                    e1:33:cc:0a:e8:7d:09:54:3c:27:20:47:9b:7a:c8:
                    df:1b:d1:53:21:e6:e3:b1:16:05:cb:e7:41:03:2c:
                    c6:f0:2b:ab:ae:7d:99:df:01:02:ed:69:41:bc:e1:
                    56:ac:a6:2f:b3:3f:c4:bb:75:49:e9:6d:c1:f7:5b:
                    e4:9f:9c:ac:f4:6d:c1:bb:39:dd:b0:02:1b:3f:8c:
                    14:67:5a:c9:f1:8f:41:77:cd:08:82:27:75:9c:15:
                    9b:ee:e2:70:51:8a:eb:4b:64:32:d9:c8:9e:52:0d:
                    a4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CF:A4:A0:A2:C3:6E:E7:5C:01:E8:B6:3F:F1:C8:AD:00:CF:C2:CA
            X509v3 Authority Key Identifier:
                keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:90:c1:9f:f1:09:f6:47:42:61:87:6c:7f:c9:b3:41:3f:fe:
         cf:74:4f:3d:54:14:bc:b1:af:38:da:67:5e:5b:63:3e:5c:0f:
         b1:5f:eb:b9:8b:58:7d:86:31:43:2a:14:7f:d6:f4:3e:94:60:
         15:8f:f8:9f:57:08:89:21:14:a7:e2:43:d8:ff:2a:12:48:bf:
         d9:3f:f8:4c:f8:1d:85:78:16:52:62:e8:ec:cf:28:1c:83:8a:
         f9:22:9a:2c:3e:70:8e:38:08:4d:d1:f3:d5:f8:4d:bd:27:2a:
         3e:41:fe:f3:3f:31:3f:d6:ce:7a:d6:51:ba:06:bb:3f:09:21:
         87:9a:47:a8:36:97:95:b5:7d:80:8e:5b:a5:e0:a6:89:51:f5:
         13:3c:09:02:91:8c:2b:3d:fb:6c:29:f7:14:e6:80:cc:96:c8:
         76:88:4b:9f:2f:09:9f:f3:df:8b:d1:2c:6c:12:48:e1:52:db:
         0c:82:66:18:ed:e8:5d:f5:c8:32:f5:e9:03:19:61:aa:34:91:
         cb:b1:0b:44:9a:bc:dd:1a:48:fb:5a:fb:3f:3f:41:a0:12:68:
         ee:dd:3b:59:c0:5f:c0:6d:31:05:1d:51:ae:85:63:cd:b6:4d:
         a2:82:c3:81:23:4e:47:59:8b:ab:38:2a:87:22:97:b5:ca:5d:
         1e:d1:9e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----