Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File:                     Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier:          KEQEJhLOEydOP+BNqMh8PQKFpu5ACzd5HuQByMEHEPU=
Subject key identifier:   20:A4:C4:EA:E5:0C:52:B1:96:E8:2D:5C:B1:8B:23:F7:96:4B:06:BC
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer:       /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial:       01962E98A14C50CC934E0AEAC17AA2B3F285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
                          2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: xkcXTpIqlDQgUf2i7uWlaHJYqyAZ7E7ZdQOD/BjqTrg=)
                          3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a1:4c:50:cc:93:4e:0a:ea:c1:7a:a2:b3:f2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=20a4c4eae50c52b196e82d5cb18b23f7964b06bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b3:88:d2:63:c0:22:ca:60:f3:3a:df:38:69:
                    26:25:3b:5d:a1:22:30:c4:89:01:c7:47:51:39:79:
                    6b:47:f2:aa:e6:0f:af:10:cd:d6:4e:66:1a:e6:dd:
                    a8:a0:05:5e:6e:33:a3:cf:5b:a8:7c:a3:8a:06:d4:
                    f4:2b:b8:bb:7c:60:23:dd:0f:b2:3e:6a:40:eb:28:
                    f9:4c:2a:34:95:c5:f1:d0:4a:30:b1:dd:ab:69:f7:
                    23:32:1a:27:63:52:f4:5f:95:74:a1:27:cc:e4:33:
                    f0:48:96:82:56:0f:95:08:49:27:1b:cb:88:30:9b:
                    10:62:86:71:b5:b4:5c:07:a5:1d:9d:87:ba:fc:e4:
                    c4:8e:6a:97:be:81:52:f2:68:89:08:5a:fb:eb:4a:
                    ed:75:22:b0:b5:2a:60:a0:e6:18:cb:51:05:d9:aa:
                    eb:69:27:f0:1d:82:32:2b:a1:1e:3b:03:2a:fe:21:
                    5b:6a:b6:77:a2:a5:9f:cf:eb:4d:83:f7:e8:fb:7c:
                    9c:db:48:d8:71:18:23:4f:d3:2d:7b:06:03:08:17:
                    e2:b6:bb:f2:84:a9:42:0d:40:81:18:31:b3:2c:3f:
                    84:e7:67:61:af:5a:15:9e:cc:54:8f:42:56:49:fb:
                    68:6d:0b:c4:45:b8:98:87:0e:cd:8f:3c:36:a6:97:
                    64:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A4:C4:EA:E5:0C:52:B1:96:E8:2D:5C:B1:8B:23:F7:96:4B:06:BC
            X509v3 Authority Key Identifier:
                keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fa:98:9f:f2:59:16:a2:1f:09:74:17:35:54:c3:ee:1e:51:
         d8:6e:a1:83:8f:43:ff:13:7f:89:7e:40:33:6c:38:cd:30:b2:
         89:29:6f:61:1c:bc:5a:f5:ee:bd:b8:57:60:2d:72:62:fe:ca:
         20:d4:99:7f:02:65:e4:8b:7a:a4:e3:11:c5:85:7a:ac:4c:3a:
         89:3e:48:3e:fe:20:2f:dc:30:09:3a:89:ce:8a:12:2a:b1:ac:
         8e:49:61:6d:32:2e:08:b0:2b:33:76:f6:b9:9b:a8:21:9c:44:
         1e:e9:a1:b8:31:b9:65:b5:85:73:65:69:b5:58:36:5d:55:18:
         77:fb:32:28:a4:5f:80:24:4e:fa:f1:24:8b:aa:3a:c0:87:6b:
         75:a4:cc:de:98:8f:a7:a5:40:e6:0c:65:15:b1:57:63:c2:60:
         65:de:34:d2:54:a5:63:d4:b4:b2:21:2e:49:66:50:93:9e:a3:
         fe:2d:35:5d:33:b3:05:82:e9:29:16:0a:e4:8e:ab:81:f1:1a:
         1b:6a:02:86:d8:7d:f7:13:ab:22:31:bc:5b:04:42:56:ea:a7:
         fd:02:e1:16:93:70:c2:42:0d:b3:ba:c4:8f:04:89:37:af:ff:
         72:7d:27:82:c3:80:28:3b:33:8f:ab:72:1f:4b:ca:8c:ed:2e:
         5f:80:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----