Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          /+4pWySahqRfLcm7h7rsC5YvWrhP0q48jaocJlmZyQk=
Subject key identifier:   00:C0:C6:85:16:E0:44:3C:FB:09:85:5A:03:BB:01:64:D8:1E:7C:59
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       01962F3D9A0B509378A4BEBB6209A7544825
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0A30
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: 3Eic+YiaFt9d65uWR3n5rgUYHB8RvQM9nyrzEbxx+tI=)
                          2: mhdzxHyga_rpAnhJvnJWGrarNFw.roa (hash: l1WjIafW1o8IpUq72+h/DmsurJ/Xd4bFO/qecSh/CbU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9a:0b:50:93:78:a4:be:bb:62:09:a7:54:48:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=00c0c68516e0443cfb09855a03bb0164d81e7c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:4a:e4:aa:8e:e0:48:e7:6d:f9:e0:2d:12:
                    73:05:e7:a4:27:30:1d:4a:2e:7c:91:5f:36:2f:cb:
                    51:a7:6c:db:94:76:90:21:8a:3c:6a:69:5d:78:89:
                    cf:40:ba:bc:ad:b8:c9:48:63:e5:db:f1:1e:b3:de:
                    28:15:ab:fa:78:f5:63:1e:e2:de:d8:a5:98:d4:16:
                    1f:35:00:1f:7c:92:4c:68:28:1b:9a:d6:39:58:54:
                    19:69:33:c1:18:68:9d:57:8c:eb:75:69:be:a2:34:
                    7b:b2:39:a6:2d:3a:06:0a:0d:30:62:96:eb:89:56:
                    51:1f:20:ed:5a:a4:25:4b:96:6a:b5:7d:fd:77:6e:
                    84:22:28:0b:96:26:56:c0:5b:91:25:8a:51:a8:11:
                    c8:81:bc:14:99:3c:32:24:85:e8:9a:87:4f:0a:50:
                    c2:85:da:86:41:db:2c:d0:d4:44:aa:72:d6:d0:95:
                    13:23:b5:90:8a:e3:03:63:a2:2b:bc:25:fc:6d:99:
                    16:e7:bb:26:d1:83:60:f6:4b:14:ac:9f:07:26:54:
                    1a:c1:53:22:f1:a7:34:41:ff:80:d2:30:33:04:eb:
                    f9:f2:af:f9:a2:4b:8d:32:69:23:49:0a:55:e6:11:
                    6b:dd:c1:50:d1:69:97:2a:3d:77:95:de:56:b3:44:
                    69:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C0:C6:85:16:E0:44:3C:FB:09:85:5A:03:BB:01:64:D8:1E:7C:59
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:44:ca:ab:74:fb:00:db:e3:cf:36:6f:c1:43:45:22:03:1c:
         25:3e:04:3d:fe:73:0f:e7:30:7a:9e:ca:0f:ef:40:72:64:a8:
         14:c7:0e:14:48:fb:e4:52:a6:70:67:17:b5:72:56:5c:72:31:
         be:14:89:33:6c:ff:4d:40:bd:cc:62:22:fc:b7:33:33:4b:9a:
         ec:ad:c2:d6:e0:54:f7:dc:3a:ef:80:d1:25:97:6b:47:6a:0b:
         d1:f1:0b:aa:0b:b4:bd:37:1d:47:83:29:78:42:64:f4:4f:45:
         b7:e1:54:50:68:9e:d5:0a:72:91:6d:e2:f1:c5:d2:78:8d:dd:
         af:7a:4c:45:3e:29:3e:4d:8d:1b:50:f6:a3:e5:7c:31:11:fb:
         0c:e0:24:2c:9e:cb:b3:87:1d:20:b5:d0:e6:b9:41:60:1a:ce:
         95:bd:f1:fa:7a:4f:36:fe:75:00:bd:8e:b5:39:30:7a:38:e5:
         98:7f:3f:f0:5f:96:1e:04:40:a3:fb:0f:0f:ac:2e:23:b7:0d:
         1c:3b:88:c3:b5:1c:31:43:cd:ce:66:52:f6:ed:94:1a:e9:30:
         63:f8:75:a9:71:9b:60:11:fe:4d:cb:db:c1:ba:d1:20:dc:67:
         6d:7a:f2:ab:cf:f8:3e:11:cc:e0:82:54:54:c8:25:fb:0d:9e:
         71:87:6b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----