Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
File:                     0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft (raw, json)
Hash identifier:          YpFqDpoCW/lyi+42fbGphXVKeFssds6rhyFsq8TTgnQ=
Subject key identifier:   9C:01:EC:E7:C5:B6:C4:F7:82:07:62:BC:D9:A4:7C:FD:30:6A:B6:F5
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Certificate issuer:       /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial:       01962E61B7E37DDCDB93CBBB8E8DADE108D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: 0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl (hash: qTOjO9KX5eNiBKJdKKblHwDxjMYwurLeSg1d4xEOs6k=)
                          2: 9e9KE2F8zCrYqsOR0ocKB3uWC0g.roa (hash: xWmWZ6mNV40OXaNhlTROFGFnywkkEouFvFZTD1JJjZc=)
                          3: MXxh0YHPMrk5arTCf3q6sfloz_s.roa (hash: N+z7kc9squE6rbdRMbjpnb079oubXEpLhtNwZjifRAU=)
                          4: PJMpQm9gwngY8P3_lMKl-7kl_Jo.roa (hash: kW2DqnWjgsO28lEW1wrqQlb2aOCM46/dPtOZpgqTEW0=)
                          5: q6I6gf2csqwaWg3RJJBU3r8Ww9s.roa (hash: TuJ+a/fTT9f6d+FkeMmzYXOZB23+5zFwPl6nA0Nxjxw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b7:e3:7d:dc:db:93:cb:bb:8e:8d:ad:e1:08:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=9c01ece7c5b6c4f7820762bcd9a47cfd306ab6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5d:be:dd:0a:b2:3d:ff:56:a9:ee:3f:d4:32:
                    82:20:8f:26:85:28:b0:75:37:c1:f6:ad:5f:e4:05:
                    42:05:5c:94:8f:35:c1:65:54:43:fb:34:d6:eb:ab:
                    b9:e7:a2:ba:f7:82:1c:44:6b:d6:3a:c7:bc:d6:a7:
                    1d:38:1e:d7:cb:06:b6:c1:b4:b2:0e:c9:2c:23:bf:
                    c4:1d:39:1e:82:ed:34:b4:e3:95:fb:93:b9:44:0c:
                    94:41:b8:4b:3d:b2:c1:04:ae:a9:d8:ce:67:0d:56:
                    4d:11:3b:21:11:fa:68:14:e3:9c:14:73:53:98:97:
                    2a:f7:24:9c:af:c2:10:f8:9f:63:39:01:0f:b3:e0:
                    e7:31:68:e1:e7:d7:65:cf:06:25:82:7c:15:71:cf:
                    10:77:3d:6e:6b:93:22:1b:ff:2d:74:47:9f:9a:97:
                    ab:25:d4:93:d0:81:47:70:98:39:86:be:19:4f:3d:
                    dd:0f:33:01:df:f5:5e:65:b9:ac:8f:e8:cf:cc:75:
                    0f:48:78:5e:c4:36:36:f8:26:64:9e:a3:59:2a:08:
                    fc:0f:ad:0f:76:fd:a6:34:68:98:0d:ac:e5:fb:51:
                    54:73:aa:5b:6c:62:97:d4:d4:d9:e0:bd:53:6f:dd:
                    30:3f:86:5a:12:b1:76:24:0b:03:cf:6a:56:a9:d9:
                    6f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:01:EC:E7:C5:B6:C4:F7:82:07:62:BC:D9:A4:7C:FD:30:6A:B6:F5
            X509v3 Authority Key Identifier:
                keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:24:48:0a:7a:c6:c9:9d:ad:5f:63:69:fb:af:5c:8b:19:00:
         54:7a:0f:a3:e9:e2:12:d7:de:b7:e9:cd:0d:88:89:27:e4:de:
         60:a4:01:8d:a2:72:d9:a1:3a:ec:54:6b:7b:36:00:2b:b5:24:
         69:7b:24:6b:73:58:10:66:53:66:23:3f:93:e1:c9:38:e3:5b:
         30:f8:2d:7e:5c:8e:27:46:35:9c:6c:aa:a9:1b:42:5b:6e:be:
         55:6f:b3:b9:02:f4:03:e6:cc:2f:30:1f:29:96:37:36:b0:51:
         cd:2a:0c:37:83:81:46:97:ad:67:f7:d7:02:f7:bc:53:9b:d1:
         5d:b6:7d:84:71:36:ea:6b:7a:e3:93:41:e8:63:62:ef:87:f2:
         c2:aa:03:d1:84:ad:d5:4e:6e:f5:f4:31:12:fc:d5:f3:15:34:
         d9:9a:d3:6d:4e:be:f3:b5:c1:e4:83:b2:1b:08:c8:58:8b:e0:
         8a:95:5d:53:b8:fb:ad:ea:4d:fd:a0:5b:7f:e8:4d:ea:f6:62:
         a2:8f:02:a6:58:96:a7:43:17:ea:8b:30:bc:ff:ec:fa:4e:44:
         1d:d3:58:15:e9:fe:d4:59:95:7d:53:34:78:e1:6d:9c:4b:11:
         e1:8a:f8:68:81:3a:f9:08:d3:04:2c:3f:4b:07:d1:3d:b8:67:
         60:39:34:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----