Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File:                     DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier:          MKMKhvpgi0t8FT+P6zb1D/nyG3Tw7pz7X+TI1qx2KMY=
Subject key identifier:   ED:A4:4A:40:F6:9F:1D:A2:78:C4:45:2D:C0:9F:18:6E:B3:81:9A:0E
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer:       /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial:       01962F07499EBEDD10A3EC42CE17130453E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: Nz03z+3PtZ7uDkDMg48QZxdFRLKDekqKcR89hNqVy2s=)
                          2: bJFxuWRTLDK11fnMj6JzG9bfGJc.roa (hash: GJmoaYMZlK46RmoyjMRGd4Icb8shLixbmKsjvQhxyu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:49:9e:be:dd:10:a3:ec:42:ce:17:13:04:53:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=eda44a40f69f1da278c4452dc09f186eb3819a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:a8:34:7a:cc:06:cb:7b:05:f9:d9:96:9a:
                    67:ba:bf:36:d1:09:a3:fd:49:04:1f:fe:42:48:12:
                    b9:37:09:95:69:de:9a:1d:42:a5:eb:1d:43:c3:81:
                    c4:2d:aa:18:0a:93:eb:56:d1:48:fe:73:5a:5e:0f:
                    70:0b:e9:23:67:e9:96:48:8d:d2:f3:24:5a:3f:13:
                    f5:df:8c:c5:04:23:a7:e6:7c:18:bf:ae:6a:c1:28:
                    52:c2:24:fb:81:de:85:66:34:60:12:5f:c8:b5:8a:
                    04:ce:da:24:bb:1a:85:ff:eb:96:6c:3d:f9:6c:58:
                    5d:2b:24:96:47:bc:cd:dc:74:95:55:61:90:2b:f6:
                    d3:bb:e5:37:99:8e:47:fe:c2:d6:18:f3:88:1d:dc:
                    a6:7d:5c:bd:1f:c8:58:93:a9:69:54:25:09:17:e2:
                    11:6d:91:75:5e:ea:c2:e6:8c:ee:38:76:46:1e:80:
                    5a:cf:7b:73:9d:76:d2:5b:67:48:d7:a1:bb:be:1e:
                    71:3e:17:e8:22:31:bd:a5:21:f0:7a:23:02:f8:8e:
                    ec:85:3c:d6:4d:06:53:b2:6d:21:2b:3f:e5:3a:11:
                    c6:b3:ce:45:24:5e:b3:d9:0e:95:f0:fc:65:ed:99:
                    83:14:d3:8e:49:77:06:a7:ff:7e:ce:9b:62:67:00:
                    eb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A4:4A:40:F6:9F:1D:A2:78:C4:45:2D:C0:9F:18:6E:B3:81:9A:0E
            X509v3 Authority Key Identifier:
                keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c1:d6:6e:48:ce:14:15:9a:35:1c:12:ec:1a:49:44:d9:2b:
         2a:c6:eb:66:00:bd:30:5c:0d:be:83:e1:de:ca:ea:04:f4:e4:
         23:04:37:6b:e3:0e:3d:64:1d:1d:db:34:64:70:56:a6:c0:a5:
         ff:f5:fc:1d:0e:27:cb:27:2b:df:f8:a8:89:1f:03:e9:75:8c:
         dd:f4:cc:ad:0d:45:d5:ad:97:1a:2e:0f:d0:dc:99:00:c6:f6:
         fa:06:5e:80:ef:e7:8b:e2:21:4f:27:a3:c3:8d:bb:95:37:b9:
         c6:04:bc:f1:5d:c4:1b:d5:04:66:ea:1c:7b:4a:60:e0:f3:c0:
         fe:a8:47:03:e4:69:13:61:c3:0c:b1:a2:05:e4:1e:05:97:ab:
         28:69:b8:a8:4a:bb:bb:bd:01:a2:a4:15:77:eb:66:70:37:42:
         2e:25:33:af:33:5a:63:98:15:7e:e6:e2:ef:ee:a6:3e:4e:aa:
         92:c0:93:7c:74:53:3b:2e:f2:43:24:e0:0e:da:c6:cf:01:ef:
         b7:be:2b:a0:ae:ce:04:97:40:6f:cf:91:12:34:2a:4e:f0:58:
         aa:92:ff:75:46:e7:de:8e:4a:89:77:cc:6f:a2:93:25:45:11:
         b4:57:ba:f7:f1:77:40:59:88:22:88:7c:0a:44:1f:f9:23:fe:
         09:65:23:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----