Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
File:                     DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json)
Hash identifier:          vwD23bjUH54bvimaqUymLZlJJrFhZ2B80uwSf/GAKAQ=
Subject key identifier:   AE:F7:ED:FF:24:B5:E6:1E:42:6E:D4:CA:EA:4A:67:8B:FA:CC:5F:73
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Certificate issuer:       /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial:       01962E993FAD5299DCFA358C782273C1E719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
Manifest number:          07B1
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: 14zwDeevV665vThCzKXbBOpzwbvdrJAbBWYpmH+cD+c=)
                          2: RmJWhAxRco_E7xVjUFT03f6Xzf4.roa (hash: fQ9hdhF3VEd9Q8e/aZRy085yRuISqh5rUOV7wWDjEP0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3f:ad:52:99:dc:fa:35:8c:78:22:73:c1:e7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=aef7edff24b5e61e426ed4caea4a678bfacc5f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:49:d7:e5:b4:b4:72:d4:2b:2f:26:5b:89:
                    35:b1:f5:40:5e:00:9e:ee:ff:81:16:0b:21:2b:de:
                    ce:48:8c:60:95:e6:0f:c8:da:8f:a8:75:de:09:03:
                    5f:a0:88:65:dc:ea:84:aa:02:68:76:c2:6a:e7:cb:
                    68:8f:81:75:4a:06:eb:a4:20:60:7c:2d:04:42:85:
                    e9:c0:3c:d1:91:90:22:55:bf:79:e6:ee:55:25:a8:
                    2f:ff:aa:e5:a1:8b:ea:8e:97:4e:f8:46:ff:c1:30:
                    f5:e7:af:01:3f:74:4e:76:12:b9:09:90:db:47:d2:
                    6a:99:29:de:3e:10:7b:a3:6b:7f:94:ad:3b:73:4c:
                    95:0b:32:52:b4:de:46:15:c7:cc:d4:ab:26:ee:26:
                    7e:10:d5:1e:8d:38:9f:0d:8a:51:aa:bd:e4:1c:80:
                    55:19:bb:b4:c5:20:50:1c:a9:88:7a:53:b6:a3:20:
                    1a:ef:fd:9c:0a:15:d3:13:40:63:f6:8a:af:f4:33:
                    24:1c:f2:91:5d:3b:a0:26:2f:26:94:58:70:c5:1c:
                    2d:7e:dd:e7:cd:ca:d5:b1:39:f6:7b:75:29:08:61:
                    66:e6:21:28:b2:74:bb:75:7f:18:26:e6:29:4b:b4:
                    be:ec:1f:e3:6a:8a:07:f7:1a:bb:1f:85:8e:fe:64:
                    ba:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F7:ED:FF:24:B5:E6:1E:42:6E:D4:CA:EA:4A:67:8B:FA:CC:5F:73
            X509v3 Authority Key Identifier:
                keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fc:18:40:dc:b8:3d:f9:a6:60:96:36:43:19:51:db:b9:d9:
         63:20:f3:90:15:45:8c:04:cf:96:23:ef:c0:d6:da:34:a1:03:
         da:47:6d:75:d7:ba:25:98:bb:2c:3b:da:54:b3:8c:a9:fb:51:
         48:64:bf:0a:5c:b1:ee:28:da:95:74:d8:c5:3a:d9:03:07:4d:
         fb:39:48:68:38:db:17:81:d4:20:3e:97:58:f7:a1:80:b8:0f:
         3b:d0:09:33:e8:42:89:57:db:8b:fd:1a:ba:6c:fc:8c:f5:c3:
         55:f1:05:8f:bc:36:65:01:de:31:1f:ee:be:6c:10:da:a3:ce:
         ee:dd:c0:21:4b:a6:62:df:97:ee:41:91:33:6f:38:22:70:16:
         9f:9c:1b:1b:0f:a7:dd:3b:82:8f:d9:22:53:32:5b:38:ce:0f:
         2f:8b:f5:97:2f:e2:54:65:65:93:62:c4:de:8b:6b:66:b4:c0:
         1a:20:9e:f6:98:75:e7:59:84:dd:35:b6:c9:e6:66:20:ca:7a:
         48:07:01:6f:b2:7b:8c:8f:d2:a6:5d:bc:28:2b:53:2b:d6:de:
         ad:95:15:77:0f:13:12:ea:33:3c:e9:dc:0d:d3:55:6e:24:39:
         54:0e:63:bf:ad:9c:0f:e7:3c:29:89:f3:93:cc:30:1b:24:8c:
         5f:d8:70:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----