Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
File:                     kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft (raw, json)
Hash identifier:          BzF/2j+/HqhtTNuiisLSeWNEb3ISYXXizgGPeWHHIvk=
Subject key identifier:   57:D6:E1:91:65:AB:46:63:8F:CC:95:03:7B:93:F7:62:DD:98:81:9F
Authority key identifier: 91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C
Certificate issuer:       /CN=91dd0e48d9011adf376665ad4d62cf31ce63058c
Certificate serial:       01962FAB469ED35E46B2A2D2BAE9F25F4E99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
Manifest number:          0C0A
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: O0T2HbDDLXToVBgQvakFVm0WBM8.roa (hash: j4M5mhMKjocJHlnRMyKx/Jo55Alu9WqNqQzzA+GKZ+8=)
                          2: WPrYk3ZFYryhbXNF2_g_QVCy5G0.roa (hash: 1/VFn2v02knd9dSenNmn42s5XXg6Yfw+0bFY3ogbnpY=)
                          3: kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl (hash: tzjeXmerAYKQ9XDMd77jNso7x9wng6eqNC7Z196xt4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:46:9e:d3:5e:46:b2:a2:d2:ba:e9:f2:5f:4e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91dd0e48d9011adf376665ad4d62cf31ce63058c
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=57d6e19165ab46638fcc95037b93f762dd98819f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:fe:b3:91:74:ae:6f:4b:bb:e4:72:9e:c3:
                    1b:ec:15:ff:e9:d3:be:14:22:36:b9:80:3c:ec:d4:
                    f6:d9:5c:76:95:bf:0b:91:e4:db:fd:9d:c3:f5:a0:
                    a4:ae:8e:5b:24:04:28:5f:e9:2e:90:74:f8:69:96:
                    f9:00:ca:e5:63:a0:0a:db:17:c9:5d:e0:4f:c1:95:
                    78:41:aa:3f:4f:9a:30:42:fb:8d:04:3b:cd:bb:f3:
                    7e:97:31:74:87:c5:ba:b9:9b:17:36:8c:a6:a8:5d:
                    42:b8:1d:d0:01:01:b5:4b:3b:e3:fe:b0:08:b2:bf:
                    a9:e4:c4:61:61:ba:5e:aa:83:b2:3a:94:d2:7a:54:
                    0c:b6:08:df:37:ba:8e:75:04:ca:fe:d1:9b:b8:03:
                    11:d1:04:66:25:04:d4:50:a1:27:f3:18:d9:2b:8b:
                    05:1d:8e:e6:f2:30:af:4b:27:e4:05:6d:f4:73:2d:
                    57:76:69:7f:72:09:9d:af:1a:cf:34:85:02:51:a2:
                    10:69:6c:db:bd:8a:24:2d:b6:ab:1f:56:3c:ca:83:
                    bd:72:03:3b:a0:87:01:5f:52:47:de:de:99:39:d1:
                    35:61:b1:c4:f3:c8:99:6b:cb:52:20:66:e7:fd:94:
                    2a:16:34:f4:98:7d:98:60:48:8d:b1:95:c1:e2:43:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D6:E1:91:65:AB:46:63:8F:CC:95:03:7B:93:F7:62:DD:98:81:9F
            X509v3 Authority Key Identifier:
                keyid:91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:28:7f:01:f8:08:31:ef:1c:55:da:a9:5b:e4:73:6c:7a:70:
         03:0b:73:d0:dc:24:24:eb:a1:eb:20:70:7c:81:13:7e:45:f1:
         3d:3e:b6:dc:7e:1f:49:d8:d7:06:9b:e6:5d:b3:0f:64:3b:af:
         f7:de:54:e7:6d:20:e4:c7:b9:e2:2a:5b:b2:0c:e9:d5:a8:cc:
         c5:28:7d:c6:1f:cc:e9:cc:43:ba:d9:cf:01:69:74:18:d9:f6:
         ea:25:4a:46:f3:9f:43:66:f0:d0:d1:9a:f7:3b:f2:f6:bf:b3:
         7e:82:bf:0d:a4:68:41:c4:66:cd:30:06:45:cd:d4:b7:e9:4d:
         31:4b:3c:d6:ab:63:78:5b:fa:02:18:c6:91:5c:5b:83:92:4d:
         40:1b:42:f3:68:13:72:8b:d9:11:88:92:b2:4e:53:29:84:4a:
         df:69:f1:a4:01:fc:68:a1:f9:15:ee:f8:76:92:3c:49:b4:72:
         3b:f9:a2:41:21:57:45:42:24:d4:77:71:91:a0:d5:26:9e:89:
         a3:f1:34:58:5b:5a:a8:2f:17:2c:9d:bf:78:53:5c:84:da:12:
         75:f8:bb:c4:db:1f:e9:ea:8a:45:a3:fb:bd:ba:e5:f4:b0:a8:
         08:ee:8b:16:ff:69:b1:22:ba:3e:2a:73:69:25:3d:78:4d:2e:
         0a:c7:3d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----