Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File:                     0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier:          qU1d2p7tI156g1OwUG4AntcTw/x3JCyj0Ll+6qTDAAE=
Subject key identifier:   F2:B8:2A:64:07:A9:67:F6:10:5F:8D:D2:73:A2:95:CE:C8:F0:0A:7F
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer:       /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial:       01962E61AA8A7A636A1BAE5B7F4F78AFCB1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number:          0380
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: 00FQiMdjUQle4zFwKcr67i8rD5o.roa (hash: vAwK94aBbQ1WLXSLlow/JuiTreizX+JgqV5lHzwa2Js=)
                          2: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: IB6ITG3zObKHUTaVO8KOT5tsfe03fWwDdPkpNCbHTeE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:aa:8a:7a:63:6a:1b:ae:5b:7f:4f:78:af:cb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=f2b82a6407a967f6105f8dd273a295cec8f00a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:73:1e:75:53:41:82:b3:61:84:24:bc:b2:
                    b7:ea:4f:c0:35:e1:03:43:0a:3f:29:1c:21:8d:f2:
                    0d:0b:67:1a:ce:37:3b:4b:f2:8b:23:3d:e9:6c:a1:
                    d8:98:5c:46:2d:e1:3c:06:aa:4f:a7:d9:c9:84:28:
                    f6:31:1f:c9:1e:67:c2:38:27:34:44:93:24:a3:9b:
                    94:86:4c:49:be:48:d6:fd:cc:c7:b0:f9:b6:10:31:
                    7a:8f:a3:a2:55:bd:73:3c:71:a6:b2:b5:0b:94:f5:
                    d6:7e:97:77:ca:50:ac:03:ce:42:91:4a:a3:85:d3:
                    f1:17:85:8a:ef:64:68:19:e6:67:bc:19:02:e2:cc:
                    39:62:6d:81:96:a6:e3:94:27:96:a2:a5:84:47:0d:
                    9e:f1:a1:c5:6c:52:44:f7:d3:c4:85:b2:ef:9a:a0:
                    6f:6e:2c:04:88:a5:ec:18:cd:a2:30:f2:8b:1f:66:
                    cc:17:39:a0:e2:c5:60:7f:b8:f0:30:4b:b0:3a:b1:
                    2b:51:c9:e8:a4:23:01:57:ea:9e:a5:23:4c:aa:fb:
                    d1:41:a2:7b:1d:d7:c7:66:e6:9c:de:eb:ac:dc:73:
                    7e:fe:04:cf:85:58:4e:ec:81:d5:07:01:d0:b5:a2:
                    d8:dd:68:a5:59:7d:72:c6:03:1e:2f:1f:50:14:0c:
                    f2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B8:2A:64:07:A9:67:F6:10:5F:8D:D2:73:A2:95:CE:C8:F0:0A:7F
            X509v3 Authority Key Identifier:
                keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:44:f2:dd:ea:6b:ef:22:b0:13:2a:64:e1:23:b3:82:07:a7:
         a4:28:5e:8f:de:e7:51:4c:79:d6:1a:21:cb:a2:cb:4c:c8:4f:
         1b:91:7f:71:20:1c:e7:42:e1:7e:c1:3a:cc:c6:51:24:ec:ba:
         fc:8c:9e:53:f7:06:21:a4:4a:ba:90:e3:af:1d:63:fa:af:4c:
         97:ad:5e:a5:35:75:31:fa:a5:61:cb:f0:5b:e7:ca:d9:eb:3c:
         48:16:12:ef:4c:12:e6:b1:43:2b:d1:c2:d3:be:32:92:e9:ed:
         f8:44:4a:79:f0:e8:df:fc:3c:cc:b7:28:c8:15:8f:9f:73:19:
         1f:e0:ab:1b:ba:6c:75:ea:d4:44:d3:e3:40:49:20:7e:7c:61:
         fe:16:52:87:f7:d1:c9:de:a9:c7:25:c3:96:34:0e:da:76:53:
         6f:23:84:b5:ca:42:be:7e:82:0d:ce:20:66:f8:92:a4:85:33:
         40:a9:eb:7f:c4:c0:03:ea:6f:99:c8:5e:7e:b0:71:8a:51:54:
         d7:de:0e:1d:74:88:2a:86:8f:6a:ee:ea:dd:84:c5:2f:c1:93:
         0f:3f:e6:6b:46:40:6c:f5:df:69:9c:2c:3f:be:0a:c7:10:88:
         2d:0e:40:28:b6:27:1c:2d:0e:d1:68:85:a8:59:94:6d:db:39:
         18:6c:c8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----