Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
File:                     Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json)
Hash identifier:          qGaowWuSVWN8oSaajcAiz6glAXNYP1vnyvzwigXGdCM=
Subject key identifier:   C3:54:02:3C:FE:FB:5B:36:B7:0C:29:82:AF:EF:91:9A:8D:49:EB:43
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Certificate issuer:       /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial:       01962DF3DCE7175F1EBDBC246224A3A7FA20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
Manifest number:          0981
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: CuRKjqD2BZuSS/zN7qkAovshkLTbNVjsFMc7WZiyaWY=)
                          2: tnIMWehV7-s3YFdByca6v2OZEG0.roa (hash: NWfOiZrn7Md8Y/fglpHdXuMUMsLmCrcIFNvYQcevZ/0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:dc:e7:17:5f:1e:bd:bc:24:62:24:a3:a7:fa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=c354023cfefb5b36b70c2982afef919a8d49eb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:95:88:16:66:0e:c9:da:2a:78:8e:41:70:c5:
                    8f:40:0c:ba:6c:b8:be:2d:c4:f5:40:4f:54:f0:86:
                    e3:55:ac:f6:1d:03:42:b7:85:28:be:35:75:2f:fc:
                    07:ff:b1:29:f0:cf:b2:53:e2:24:1e:0f:92:5f:9f:
                    2b:e4:13:52:cc:d4:64:b5:d9:49:93:16:9d:01:34:
                    25:da:29:c6:51:c3:a0:33:10:59:ce:ce:36:42:ab:
                    6f:ac:e2:9d:f5:59:5a:74:6a:4b:0b:e0:09:fc:31:
                    c4:16:c6:17:9a:dd:ec:e9:3e:c4:ad:69:a5:b8:eb:
                    87:fd:2e:bc:08:d4:c1:42:dc:56:e6:cb:a1:90:6d:
                    09:4c:89:a8:f6:98:4e:37:4a:46:2c:a5:bf:5f:07:
                    35:33:3f:de:b4:cf:93:a2:8e:41:96:f6:4e:cc:cb:
                    eb:c0:73:3f:5a:38:cd:1a:73:11:d8:e1:9d:da:31:
                    38:a5:55:be:cb:3d:23:a5:76:dd:d7:fe:6b:77:36:
                    72:a3:48:17:0f:75:d7:38:23:14:a3:5f:2e:80:34:
                    64:a2:65:07:31:aa:a9:7d:9c:f6:68:ba:19:47:3e:
                    e0:18:06:f3:2a:f7:15:b6:3e:7b:2e:ce:f5:59:e6:
                    88:a9:bf:67:18:e9:71:e0:9d:66:29:b8:60:0c:d0:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:54:02:3C:FE:FB:5B:36:B7:0C:29:82:AF:EF:91:9A:8D:49:EB:43
            X509v3 Authority Key Identifier:
                keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:62:bf:9a:2d:18:60:a9:b9:24:4c:34:2b:be:89:f2:a6:c7:
         7f:d4:19:0d:1b:05:76:3d:10:06:9b:1f:e3:eb:fd:72:80:b6:
         62:73:76:3d:7c:65:bc:d1:32:a3:4c:82:13:a7:99:61:5e:56:
         55:af:5b:e6:f6:30:8c:7f:94:2d:37:17:2c:e2:f7:1a:e0:4e:
         49:7a:8e:d7:86:18:44:47:da:62:c8:13:1a:90:60:d5:41:61:
         dd:c2:1d:d2:90:89:23:51:1d:03:cd:2f:25:95:5a:b9:bc:e6:
         f3:78:70:19:08:5d:9e:27:b7:e8:8f:40:81:da:9a:3c:a8:e5:
         be:31:91:2a:5b:21:b5:2c:ce:1b:cd:96:42:c9:0a:d9:34:af:
         a9:17:ef:05:e6:cf:d9:c3:f1:34:64:b6:a2:d1:f8:55:a5:f3:
         48:55:11:35:8a:9f:7f:86:c3:06:8c:18:46:52:1e:09:0b:5b:
         74:70:33:c2:c9:37:53:78:f0:0a:be:a6:50:df:70:ad:6b:c5:
         e8:35:b7:40:a4:b5:49:f8:b5:b2:a2:f2:32:c6:89:ef:08:bb:
         5f:a7:a9:a2:d7:16:0e:69:78:de:f8:97:31:48:bb:9f:0f:9e:
         80:ee:1d:3b:b0:44:2b:86:ab:18:e4:71:bb:f7:79:41:fa:d0:
         5d:ae:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----