Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
File:                     0cpnYQKGq3OPhs6TX99e1iDwLZY.mft (raw, json)
Hash identifier:          wLEze7j6Z05eZ0aL1WNCYMO03W/2mPQ7GQ3OtsnlwyU=
Subject key identifier:   58:6A:51:FD:72:D9:90:31:FE:70:F6:30:71:C1:E0:EB:A8:53:FB:5A
Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
Certificate issuer:       /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Certificate serial:       01962ECF8098A9E5A2C198FBED38B058A3AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
Manifest number:          03E0
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: 0cpnYQKGq3OPhs6TX99e1iDwLZY.crl (hash: xjJMHTtbRcTkw2FBKK/4oPOSZZfc3/4SYN9RjY89Zfk=)
                          2: y5znuwpLKZ8JL_6tjS8ThMPHHLE.roa (hash: Ff9QtDrzEqE+YPfo1QrUfXElhWcFkl8EJxj88BmOBUY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:80:98:a9:e5:a2:c1:98:fb:ed:38:b0:58:a3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=586a51fd72d99031fe70f63071c1e0eba853fb5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:28:e9:fe:68:07:6b:25:0c:1d:18:bd:d4:b4:
                    e9:6c:63:7f:94:c8:9a:76:34:ff:c3:ba:4c:3c:8e:
                    9c:8f:50:3d:66:26:4a:fd:52:16:cf:b8:ea:16:43:
                    88:17:64:fa:0f:62:28:bc:28:45:03:3f:67:80:a7:
                    e7:85:47:24:89:df:61:aa:08:86:77:58:b5:00:c6:
                    04:1d:43:5d:a9:68:8e:57:9b:b7:c2:0c:94:28:00:
                    17:6c:38:30:10:5f:b8:4d:ef:6c:14:63:9a:d4:25:
                    bb:d9:d6:56:8c:35:af:0c:82:59:29:4e:ff:d3:a4:
                    60:c7:b6:38:d8:4e:4c:41:b6:62:bf:30:87:9c:a2:
                    aa:97:d5:f3:3b:1d:f4:7c:69:61:63:bd:ff:4a:56:
                    62:b7:ea:92:40:22:e6:95:1a:ed:7f:c7:a2:d9:47:
                    25:a6:38:50:ba:a7:a2:85:bf:a4:af:5d:21:01:de:
                    4d:91:82:99:97:29:63:a3:07:16:cc:87:25:2d:85:
                    57:20:0c:7d:db:00:0b:22:09:ba:49:51:ba:62:0d:
                    02:08:4a:56:37:6c:46:b6:0d:89:94:f4:8b:6e:8a:
                    9b:06:66:a9:1d:6c:69:d0:03:56:f5:11:8a:6d:b2:
                    1e:7a:bb:58:05:31:1b:07:d0:b6:61:d6:89:7c:83:
                    e1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6A:51:FD:72:D9:90:31:FE:70:F6:30:71:C1:E0:EB:A8:53:FB:5A
            X509v3 Authority Key Identifier:
                keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:42:76:f3:bd:dd:e1:62:61:f0:3c:97:b7:d1:58:9a:db:27:
         b2:5d:1b:30:77:de:cf:97:e6:3d:63:4e:eb:3f:93:0b:86:5d:
         f1:67:a5:21:2d:aa:23:e3:da:b8:69:7c:1c:9f:e0:3a:79:39:
         7d:93:2e:80:aa:85:8c:92:5a:b9:33:35:14:78:4c:57:01:ae:
         22:64:ed:da:d7:a2:75:5c:7d:59:a0:b7:c3:5a:73:65:a9:d3:
         60:90:f2:d5:de:28:5f:99:6e:e1:c8:ad:63:69:24:e1:1a:0b:
         ed:40:1c:d1:d5:35:66:92:06:a9:87:1c:c7:f6:94:5f:34:e1:
         7c:1a:65:9d:47:31:4b:dd:f4:6b:80:d6:83:49:c1:f4:eb:23:
         8b:ba:03:5e:a9:7a:54:d6:f2:e3:18:ba:f6:89:d7:30:3a:8b:
         ba:8c:c7:dc:1d:b6:4e:bd:c0:e5:e6:f0:ca:26:78:8a:c1:da:
         d2:51:80:f4:10:f4:9a:7b:12:d4:c1:d2:01:60:c4:58:84:c6:
         90:39:7d:23:8f:87:14:5f:9b:bc:03:a3:3b:6f:a0:d3:8d:ad:
         02:17:5d:cb:7d:11:cc:91:69:8b:66:21:f5:53:9b:0c:45:f6:
         bd:9b:86:93:49:1d:a7:dc:74:96:7e:27:a0:a9:13:d2:a2:02:
         3a:e9:79:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----