Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File:                     DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier:          1jVT9TQn3F5A5Wv3eT5zNEIEQRrVXL0aku5bbaSU9ao=
Subject key identifier:   96:62:5F:4C:96:25:04:D6:75:6B:52:D5:D5:33:FA:40:98:8C:F8:ED
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer:       /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial:       01962E2AC1A40C979E36FB89ACAE4C44B2BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number:          0C4D
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: LL6abDc8qt3xBMlweDlEN+biMeYYYoNcureiaSOJQEM=)
                          2: zo9Y2aPXtg0v5rw18Mi_WOQc36Y.roa (hash: v9STSvD6P0pmUA0gxCp1HPZofea00hykboqUh1BCCCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c1:a4:0c:97:9e:36:fb:89:ac:ae:4c:44:b2:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=96625f4c962504d6756b52d5d533fa40988cf8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f2:d7:9b:20:bb:c9:8f:f7:1b:dc:63:69:2a:
                    a8:97:6e:d6:80:90:5d:61:8a:c0:7a:07:62:2e:c0:
                    d5:4e:b3:48:12:39:4f:87:39:e8:ae:95:82:57:95:
                    80:fa:10:73:e4:64:78:5d:2b:4f:0f:a9:a6:0c:3e:
                    4d:3d:63:95:f1:01:5a:b2:fe:24:53:e9:9f:2b:0d:
                    93:a0:52:0f:03:d1:fb:5b:65:75:5a:19:be:58:41:
                    e6:b1:b0:0e:a0:ba:32:53:84:95:a2:ef:8d:22:b8:
                    d5:64:6b:f1:6c:bb:e9:07:e7:93:e5:99:45:97:a2:
                    29:cb:6e:63:09:5c:84:06:d4:e6:69:c9:ef:b6:5e:
                    a2:1a:19:38:0d:ba:f2:37:0e:c5:0c:79:94:35:f4:
                    ff:4c:2a:fc:b5:0a:76:ee:c4:db:10:f8:44:87:e8:
                    35:08:1b:21:54:b6:f6:d8:be:bc:52:9f:43:87:2c:
                    3e:fe:41:08:77:3e:b6:19:5e:9d:6c:b4:32:b2:98:
                    4f:66:ad:57:d2:1a:cc:e9:65:1b:23:4f:ea:30:ae:
                    d5:d3:6a:14:fc:da:72:91:34:98:ff:43:dd:c5:55:
                    ef:b6:45:e6:72:b7:de:c3:b7:a1:df:0b:8a:67:c4:
                    0e:91:19:8d:88:9b:9b:1b:70:10:cc:f3:fb:6d:c2:
                    2d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:62:5F:4C:96:25:04:D6:75:6B:52:D5:D5:33:FA:40:98:8C:F8:ED
            X509v3 Authority Key Identifier:
                keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a1:59:d6:99:1e:7d:6b:4b:4e:74:f7:73:89:1b:57:59:2c:
         90:3b:0d:68:7f:c6:36:41:42:83:3b:e6:64:5d:6b:bd:05:c4:
         5f:4d:76:0a:14:49:03:ec:c0:f1:d9:34:45:cb:9e:4d:0c:74:
         f6:6b:75:ec:30:b3:de:fd:b7:d4:14:a4:83:77:ba:6a:96:e8:
         a0:27:90:bc:fa:50:18:2d:33:a7:6d:33:85:55:c1:ff:3f:aa:
         e8:36:dd:22:eb:2f:fb:dc:56:21:79:e4:25:4d:1c:cc:2d:8d:
         19:64:a8:7f:0a:7e:58:77:8a:53:88:bb:55:dc:6c:40:32:a1:
         37:6b:0c:e9:41:0d:e7:20:ab:ad:fc:75:4f:a1:ff:ee:97:19:
         7c:1a:c6:5f:c8:3f:e1:02:04:db:dd:c8:17:42:db:b5:56:5e:
         9d:b3:1e:42:ad:1d:57:3e:0a:6c:b7:49:31:e4:7e:25:29:fd:
         ca:dc:fa:ad:7f:f0:d4:18:c4:24:b8:ca:22:6a:56:45:f7:e3:
         cd:cf:ff:ee:61:10:53:ad:37:41:43:86:df:a3:20:88:9c:b0:
         08:e0:c9:c7:df:90:5d:cf:58:ab:fd:41:28:45:d5:55:a5:c6:
         da:b9:4e:3d:bc:64:06:67:e6:ca:52:f2:04:dd:6e:22:f1:ba:
         be:69:1d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----