Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File:                     0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier:          9Y8cNoqBXHmOkrQFxTiH1WYPVWzc/YE3Sy5HUXujOVU=
Subject key identifier:   03:20:A2:7E:40:2D:71:6B:74:1A:BD:20:E8:0A:F3:EF:8D:BF:6A:87
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer:       /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial:       01962ECFC450A19E5296D4F64334636F8F05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number:          07DC
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: PXGRO89byrgzW6+ZDtLNTG7NLRNveuV4npUCk+AI4dM=)
                          2: 3t2rbtcOEw5sD7uRjCXTPR4SMU8.roa (hash: oLSU3YNaGRS7ljQgete6uiDJRLwSKNoaWdOvOIOXxdI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c4:50:a1:9e:52:96:d4:f6:43:34:63:6f:8f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=0320a27e402d716b741abd20e80af3ef8dbf6a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:15:81:02:80:4e:bd:02:95:00:a4:30:a2:a5:
                    56:14:ac:c9:26:a6:5d:e9:16:b5:80:7c:87:fd:5c:
                    c0:64:bb:92:b0:9b:35:2e:b9:9e:e6:6c:e6:c5:80:
                    f0:b1:94:23:63:51:a5:dc:68:e3:a4:51:57:8d:c8:
                    06:b3:6c:86:e4:3e:66:42:10:2c:89:a5:11:ac:22:
                    aa:1a:87:69:3f:b1:92:9c:49:b5:13:52:eb:c0:5a:
                    44:36:af:e3:41:af:a4:9c:cd:2f:82:87:7f:da:b6:
                    93:48:8c:54:55:9d:03:53:ad:ac:31:f8:d1:ad:9d:
                    69:0a:f1:5c:f4:82:22:a6:22:e2:e3:78:b6:7c:5e:
                    a8:83:97:31:35:d9:81:63:d5:a8:14:ec:0b:05:71:
                    5a:f7:e4:0e:c2:de:af:02:9b:5b:dc:1a:f9:84:4d:
                    d7:ab:ad:a3:e8:9c:3f:56:a6:f7:c9:e9:91:78:e6:
                    43:e8:6f:25:71:47:68:b5:1a:ca:31:7b:a2:1f:71:
                    c0:12:78:75:cc:c8:0b:5e:ca:3b:11:23:13:49:23:
                    94:f1:18:3e:5a:d6:7b:44:3c:a0:49:06:9f:a4:f0:
                    9e:39:44:7e:f2:63:15:75:a7:5a:de:06:cd:d9:91:
                    a3:5b:49:c7:21:22:33:f6:16:5c:18:5c:40:5c:6a:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:20:A2:7E:40:2D:71:6B:74:1A:BD:20:E8:0A:F3:EF:8D:BF:6A:87
            X509v3 Authority Key Identifier:
                keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:dd:ed:33:f1:29:9b:e5:c7:a9:5b:2c:72:4b:1e:a1:42:
         50:bd:94:22:cb:88:13:6e:80:b8:6b:d2:c7:9b:bc:f5:14:1c:
         d3:fb:cb:cd:11:e4:55:1e:15:85:b4:44:0c:62:ac:ef:17:03:
         2a:70:ec:1b:d3:fe:bc:16:59:63:96:99:71:39:da:06:37:f3:
         fd:75:96:4f:54:69:6e:18:7b:94:e0:a6:ab:81:20:23:93:c4:
         95:17:3b:76:29:c3:b2:d1:74:df:9a:5c:4c:07:ad:0a:0e:31:
         fc:37:81:96:d5:80:45:05:b6:07:10:bd:db:45:68:10:aa:b9:
         a0:dc:40:f3:7d:45:f4:5d:6a:d9:e0:f3:66:83:60:7b:8d:39:
         e2:8b:04:ae:be:68:87:49:96:f3:e8:e6:71:95:f3:4f:70:59:
         8d:ce:d7:d3:76:91:76:51:ee:28:42:81:f0:57:99:bf:a7:97:
         dd:3d:7b:ea:9c:a8:41:7f:9b:fc:41:07:df:9b:87:a5:22:c0:
         a8:63:e8:3f:08:fc:dc:a7:fc:53:3a:cb:24:1c:97:65:0d:fe:
         9d:45:01:67:ed:1d:58:48:06:99:cd:74:9d:b4:a6:93:12:84:
         bd:cf:11:e7:9a:0e:00:89:71:74:6a:b2:32:e4:f1:9e:1e:2a:
         1a:00:a0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----