Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
File:                     DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json)
Hash identifier:          EbfEN+LflN64G5v1wXrSULoIT+ETP4oCPiakf0AiNao=
Subject key identifier:   CA:0B:57:DA:FE:28:1F:BB:68:2A:7E:DE:D3:A0:4C:40:83:07:01:FC
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Certificate issuer:       /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial:       01962ECFA33ABDE4E412CD56F844BD31FF6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
Manifest number:          CE
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: ZwLqENN30ywwK8GkOzmpqZPbaTXb9ueuVg6iaWUMNww=)
                          2: F8pRiEheQa10SQdkNWvS99cZXUQ.roa (hash: ECJYqiZw6ZmZtQ04HHTXu/7XAKbIZCgVHRvo7AY0E6A=)
                          3: _rfOVyo7DuPsLTQU__hvST7kgv0.roa (hash: uPbFY4d1NRbHScZUPpEXzuR0hfWtaapZ5VL4DMx2+zU=)
                          4: iX_xELZoVhjZx2tmfK6PH-R4qfg.roa (hash: 8Md57/s7g7icy63N7gSiYrFS0c7WsDeTkry4vuIPhFc=)
                          5: ihZ66_FRP1ZEi9NozSdwfCGel-M.roa (hash: wFOQHVX1zMY4YtBKixW4VOsy+9ZxuzYcQZi+JYB6nWA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a3:3a:bd:e4:e4:12:cd:56:f8:44:bd:31:ff:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=ca0b57dafe281fbb682a7eded3a04c40830701fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:13:28:99:f2:64:c8:c3:40:3c:a1:f0:13:f6:
                    27:f4:4b:f5:59:41:5e:15:bf:3b:a4:21:49:13:28:
                    4b:e1:0b:ea:97:61:3c:aa:50:66:c8:b1:c6:06:d8:
                    56:d7:b6:69:a4:2b:0e:b4:24:6a:e9:2e:98:a4:d4:
                    a2:ed:af:78:ae:72:7f:d4:dc:06:b9:2d:1c:9a:0c:
                    1e:20:53:92:0d:a3:6b:8c:ca:6a:6b:01:74:01:20:
                    a6:75:1d:73:97:42:52:d3:e9:18:10:55:24:2b:62:
                    11:cc:ad:36:47:68:50:54:d2:47:e4:c5:c6:ef:f1:
                    34:ca:d1:c9:8d:38:8d:48:8e:0b:6f:51:2f:49:09:
                    00:d4:5c:57:ba:a9:b3:39:7b:82:8d:d0:dc:ea:d6:
                    9e:8a:87:56:93:50:c8:d8:91:c8:bd:b2:d2:b7:0a:
                    06:0e:05:67:f5:7f:e9:6f:71:83:77:65:75:e1:39:
                    7e:37:a1:46:50:b2:ce:ee:cd:01:a3:d1:04:8d:4f:
                    cf:eb:d4:c3:c7:9a:4c:7f:32:d1:0e:22:3f:c7:a2:
                    66:c1:35:5c:ff:c2:e4:dc:4e:73:8a:10:a0:3b:dc:
                    4e:35:ff:14:ad:e7:b9:84:f4:d0:d0:d4:ed:e5:fc:
                    3f:b1:fb:48:8c:61:57:cd:be:35:2e:46:10:87:80:
                    b2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0B:57:DA:FE:28:1F:BB:68:2A:7E:DE:D3:A0:4C:40:83:07:01:FC
            X509v3 Authority Key Identifier:
                keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:32:b4:95:68:da:09:72:6f:52:4c:b8:52:b2:54:32:66:5a:
         5e:9d:65:6c:98:50:70:74:19:41:96:b7:65:b2:e1:31:6e:f5:
         76:2b:0f:ff:2f:85:50:65:13:91:a8:8f:fb:0d:14:73:45:f0:
         94:1a:02:31:53:3f:06:92:78:13:53:37:20:98:4d:6d:0d:0e:
         97:8c:c7:52:d1:68:9e:d2:a6:62:6a:91:b5:9f:eb:4d:87:0a:
         08:eb:da:99:fe:95:26:89:5e:43:f2:3c:cb:71:1e:48:52:75:
         5e:79:b0:d9:43:b4:e2:67:c1:b8:18:85:ec:1b:f9:f3:c6:81:
         1b:6f:2b:02:25:fc:8c:31:a4:58:53:65:c1:bc:e4:e2:4c:6f:
         69:07:75:9f:de:be:3c:7b:0f:4f:9f:9f:60:a0:5a:3f:f4:ff:
         1a:b0:a0:11:bd:fa:47:54:e8:35:b2:30:bc:d1:a9:d5:39:eb:
         43:2b:b0:2f:5c:7d:77:6b:78:d4:e3:9f:67:5b:82:6f:2b:a7:
         e9:54:ca:81:d1:48:23:dc:ae:7f:4a:be:7e:b0:0c:73:b1:42:
         55:50:91:a5:a3:42:f7:79:17:db:63:6d:c3:99:87:f2:f1:08:
         d5:e4:18:5c:e2:e7:d1:b0:fa:15:71:12:5d:ec:84:bb:64:7f:
         e7:70:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----