Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File:                     0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier:          3XuFdWv357W03nIyhKSo0N2lBj8bLzH5T9LXKhyCiBE=
Subject key identifier:   E7:27:AE:61:5D:FD:C6:56:9E:75:DB:AB:31:01:19:DE:17:1B:AB:E3
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer:       /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial:       01962F0746B808AD46FBB8F5EB5D7C737737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number:          119E
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: ylLCVdI0InqO+vwftzBEykSfYHL2zuyp8twQ+RV+1tM=)
                          2: AyldtAoWafPHTkmACDxst6jxsP8.roa (hash: 5JuPcS4QOkaO/Jt7b79o9DhsMUfsXTNZilUz8aQXzEc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:46:b8:08:ad:46:fb:b8:f5:eb:5d:7c:73:77:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=e727ae615dfdc6569e75dbab310119de171babe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:1c:3c:81:82:91:fa:b7:a5:aa:3e:75:2c:
                    e1:6e:e1:ca:78:37:34:d6:c0:c7:7c:a5:59:36:66:
                    89:00:74:9c:94:07:79:7d:31:2f:30:bb:52:d1:69:
                    a0:f8:3e:e4:ac:d6:90:7b:04:14:2e:9f:55:3c:ae:
                    a4:ef:70:a2:01:2f:79:39:68:a5:a1:20:0e:b6:01:
                    22:e2:cd:94:d5:f9:ec:94:f5:f3:46:33:a6:a7:ec:
                    0e:fb:e8:0c:f2:3d:be:df:81:15:20:18:bf:7d:85:
                    08:65:9c:10:d2:e6:48:f1:18:15:3e:d4:1b:72:0e:
                    c1:c1:05:d2:16:ff:3f:e5:be:66:f9:d9:f2:ad:64:
                    b8:89:0c:31:4b:2d:0e:e3:a1:43:fd:96:c4:65:4b:
                    45:06:80:76:a0:63:c2:a9:ed:55:0f:36:60:11:82:
                    83:1f:8f:c8:42:a0:8d:92:f6:85:77:79:72:ef:5d:
                    79:e4:8e:75:3d:2f:ad:e2:26:3c:da:e6:ec:7c:89:
                    28:ae:e2:63:5a:8c:41:a4:74:77:4a:1d:17:d2:22:
                    ee:7f:57:53:1a:a6:4a:7d:79:29:f7:5f:6c:c1:13:
                    ed:0b:1d:10:88:cc:0d:7e:af:45:f5:70:1e:1c:01:
                    8c:0f:ed:9d:b4:ef:14:61:84:a0:47:4f:17:45:61:
                    a3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:27:AE:61:5D:FD:C6:56:9E:75:DB:AB:31:01:19:DE:17:1B:AB:E3
            X509v3 Authority Key Identifier:
                keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5d:1e:a4:03:5f:fa:23:42:d6:ae:da:9f:46:df:c4:47:dd:
         2e:38:52:87:87:cb:98:73:89:6c:f5:ad:2c:96:fc:9d:b0:b2:
         ab:eb:74:f2:fe:17:2c:ac:35:1f:68:01:32:66:a4:83:f4:9e:
         2e:f4:f1:40:f7:f5:e7:ad:c8:83:7b:f6:f1:d1:fb:56:08:e3:
         01:a7:89:fd:79:46:00:ca:57:c9:68:1c:a0:af:5a:fa:d9:7e:
         a1:61:44:db:03:fa:a7:00:f1:0d:d0:12:6c:95:e3:1e:35:91:
         b9:14:ad:e5:38:86:b2:af:4e:ee:c8:39:56:c7:6b:df:6f:9b:
         5b:30:b5:e1:84:a1:25:08:99:a1:e7:92:39:1a:87:83:e3:60:
         31:d1:28:8a:45:f5:71:ba:fd:d3:48:b5:6c:77:63:5f:be:4e:
         e2:ff:2d:d1:5f:73:fd:e5:64:88:6e:cc:c8:34:d7:25:e5:c3:
         a4:c3:87:ea:15:67:8a:30:f5:ea:90:c0:3a:5d:c6:18:db:48:
         95:d3:f0:58:95:73:0b:54:41:7b:1b:04:f2:c8:97:00:3a:f0:
         a2:65:11:5e:51:f2:d7:5f:93:25:e4:39:43:37:78:09:e7:f1:
         48:08:d6:0f:1e:cb:e4:9e:a5:ff:03:b1:af:e9:6d:91:5b:de:
         58:cb:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----