Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
File:                     DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft (raw, json)
Hash identifier:          tR05UXeH/fLQlGm92lNzGtYFvojSI57Kc4eniHtOBGM=
Subject key identifier:   79:E1:6A:85:A0:43:D0:58:EA:CD:30:4A:28:95:56:CD:53:0F:BE:0A
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Certificate issuer:       /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial:       01962F3DD0765E912FCB48081EF6B9434171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
Manifest number:          08E0
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl (hash: WzRjYSCpDsozllBCWIEk1QafoLJUb5sHp+hQVaMLU38=)
                          2: IoDHlDbNXO3jlcqfipIcULBON5A.roa (hash: KOgCTDaSahbElR1Ol4oBVrEjOtYhS4W0VzXtKth8BeM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d0:76:5e:91:2f:cb:48:08:1e:f6:b9:43:41:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=79e16a85a043d058eacd304a289556cd530fbe0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:71:0f:7b:b4:5a:41:2c:c5:76:27:16:b0:
                    18:81:51:28:6e:7d:df:e1:23:02:18:87:43:1d:b9:
                    6c:51:02:36:41:8c:0a:3c:83:d8:95:f2:81:60:48:
                    37:a7:42:8f:4b:eb:46:f0:ce:b5:70:85:aa:ba:c3:
                    ef:38:ab:b7:78:74:8e:18:5b:ab:0f:7f:72:9c:a5:
                    c7:99:b4:49:1b:17:48:62:6f:90:b8:e4:e2:32:eb:
                    7f:b8:0b:58:b3:52:14:29:17:ca:da:21:fa:df:a0:
                    e8:19:70:e9:0b:58:47:a6:3d:f6:4c:95:1b:c9:66:
                    20:41:6e:05:23:5a:b1:8f:96:d0:cd:f4:ac:d2:d0:
                    72:ac:07:82:0f:d5:45:31:14:cc:6f:ab:61:4b:b2:
                    e3:9a:3f:57:7e:6f:9a:2c:26:d9:f3:65:a4:41:1a:
                    3e:f0:56:5c:a3:19:fb:fc:7f:97:45:d5:1c:a0:88:
                    b0:5c:3c:d7:ce:6b:f9:6f:97:89:de:9e:65:29:6d:
                    4a:ed:30:58:c5:94:d3:ab:73:e1:20:4a:80:fd:6b:
                    f8:73:58:8c:28:06:37:71:af:df:f3:46:1c:87:0d:
                    a9:49:0d:eb:46:dc:66:4e:09:a7:49:3f:8c:92:c8:
                    cc:76:14:7b:e8:78:91:f1:6e:ff:7e:dd:c8:d5:9b:
                    6c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E1:6A:85:A0:43:D0:58:EA:CD:30:4A:28:95:56:CD:53:0F:BE:0A
            X509v3 Authority Key Identifier:
                keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:bf:67:5a:ef:90:e9:89:99:ce:1f:7a:c7:cf:64:c0:fb:ea:
         cb:7d:4c:23:c8:9d:09:65:4a:cf:6e:12:d0:67:b8:e6:cc:1c:
         c1:40:af:d6:d6:60:95:ab:8f:f7:46:f7:b4:ac:b3:e9:ae:f7:
         bf:40:8c:14:73:d9:e1:99:32:a3:a8:5e:f3:dd:9b:b5:d9:eb:
         cd:eb:26:83:4a:2d:ab:9e:5a:fd:23:0e:e6:48:cb:bf:ae:89:
         50:4c:e8:80:6e:a4:5c:f7:b6:8e:e0:ea:29:05:b5:ef:95:bf:
         5e:8b:ff:57:ed:2d:5f:6f:ee:7c:f0:9c:d8:37:6d:78:71:f6:
         34:dd:81:9d:c2:30:23:62:c2:cc:7b:b6:74:2d:e4:cb:33:c2:
         05:f2:a7:d8:57:9f:85:d8:e9:f6:3b:bf:12:b7:95:f3:4a:67:
         76:bb:1c:c0:12:d7:c9:18:15:ee:18:f7:a3:bf:ab:7d:9c:56:
         cb:3b:9b:30:07:2d:05:62:a0:65:8b:22:ec:8e:31:0b:94:05:
         12:90:6c:24:83:d2:3d:26:39:0b:30:4b:37:65:65:84:c2:60:
         fe:75:48:ca:24:a0:d3:2f:3d:1d:18:19:4d:25:d4:c2:e6:61:
         3f:3b:48:74:ee:d5:47:35:d9:f3:fd:8b:f3:08:2a:18:fd:64:
         4c:5a:a5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----