Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File:                     0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier:          OzPB2xA3uv/48BXJRa54oqdBj1bIz8A9sV1LdK/IHvk=
Subject key identifier:   D7:D6:3D:26:F0:A3:40:87:96:40:AE:0D:F6:A0:F6:69:7E:BC:C9:B5
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer:       /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial:       01962E61BC59A4A4052037C4778595BC61E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number:          0FD4
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: Ci5q4EVyhXIzhXlIUwIhhrPpPRIhC317YLFfOYY3w+Y=)
                          2: oYfn-XKrvi8qPxxQpXw6G0ZQv_I.roa (hash: XlHaPnUqiYpT0LQiKW0OJf8RSsswldbENWW7FfjNUtc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bc:59:a4:a4:05:20:37:c4:77:85:95:bc:61:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=d7d63d26f0a340879640ae0df6a0f6697ebcc9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:df:92:8d:a5:64:76:15:f7:e5:89:2b:be:39:
                    c1:3b:60:2a:60:52:67:9a:29:67:f6:ec:87:85:46:
                    e2:2c:15:a7:cb:00:4a:b4:cd:20:7c:8f:6c:26:25:
                    d6:d2:6d:ea:95:70:eb:a0:12:8f:63:82:9a:20:07:
                    04:3e:65:33:14:18:da:a9:91:16:e4:2e:94:d4:ee:
                    e8:59:6b:7f:e2:19:8a:3e:9c:e3:12:1b:0d:d0:14:
                    e5:de:9c:1b:fd:42:d1:54:f4:62:42:d9:a5:ec:19:
                    90:9d:57:02:67:41:26:3d:49:6d:ff:b3:92:d5:c5:
                    cc:12:19:9e:20:de:4b:ae:c5:d5:6f:3b:69:a7:97:
                    b1:c3:89:3e:94:d1:08:ea:21:01:6a:f8:c8:87:55:
                    4b:2a:6c:ad:85:90:20:be:50:ea:06:7f:58:04:6f:
                    b1:52:54:d4:6c:8c:b1:89:5a:eb:46:6c:fd:8e:d0:
                    43:e8:ba:41:6c:10:9c:ca:da:55:cc:0c:ee:45:2a:
                    e1:56:18:04:de:6f:0d:64:2c:eb:cc:64:ca:9c:55:
                    50:91:2f:7d:b2:24:89:7c:bb:bb:e3:e8:02:1e:3d:
                    5c:0a:87:e4:c3:42:81:fd:b5:e6:47:fb:d8:10:a0:
                    95:24:eb:4a:1c:f4:93:bf:76:4a:fd:c5:c6:51:fd:
                    05:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D6:3D:26:F0:A3:40:87:96:40:AE:0D:F6:A0:F6:69:7E:BC:C9:B5
            X509v3 Authority Key Identifier:
                keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3b:e2:11:4a:a6:0b:04:27:c2:b1:f9:38:d8:b1:fc:34:00:
         d3:90:2e:b1:9d:a9:4d:54:9f:55:c3:42:2f:a2:4b:e6:90:76:
         af:ef:e7:c4:81:fa:2e:2d:da:b3:db:75:a1:d3:f6:ac:a3:2e:
         68:bb:b7:82:e3:29:c2:d6:a7:72:74:26:2f:9d:7c:08:23:31:
         6a:54:63:c8:31:5f:6e:56:3b:cf:8a:0e:ba:05:97:9c:d0:87:
         e6:17:97:64:49:50:db:18:ec:18:50:fd:14:bb:2b:8d:34:23:
         c5:45:1c:4f:6a:e5:50:06:cc:d2:f4:5e:c7:4a:fc:ba:7d:0f:
         8d:e1:80:d5:e6:54:bd:15:e6:dc:24:1e:42:23:dc:05:50:06:
         b2:96:81:90:79:b1:f8:4d:46:92:0f:44:05:fd:df:5a:59:48:
         1a:8e:35:48:d5:8a:99:66:b5:fe:42:bd:c6:07:7a:88:37:9a:
         93:82:36:6b:88:e6:9c:e9:a5:8b:6b:95:43:04:2c:98:e3:3a:
         46:a1:39:80:5b:d8:57:0c:f4:a7:f7:61:f3:e6:a6:b8:c9:df:
         8d:df:31:0d:5a:72:56:9e:0c:71:96:05:c3:08:af:da:a6:0f:
         23:50:6f:8e:30:f0:8c:58:6b:5c:7e:2a:75:25:65:60:a1:d7:
         24:fd:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----