Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
File:                     0dMLd0soDDfhxe1dimnLmvZIsGU.mft (raw, json)
Hash identifier:          S+TM4qO61k9Ax3eF2VU+0ep/zQEZaKH5iniNjWl3zIs=
Subject key identifier:   80:6C:C3:38:55:A2:39:B6:3A:4C:35:91:85:69:DE:D2:86:17:42:C3
Authority key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
Certificate issuer:       /CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Certificate serial:       01962E985EE545734829573DF0422DD84AAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
Manifest number:          0957
Signing time:             Sun 13 Apr 2025 10:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:00:59 +0000
Files and hashes:         1: 0dMLd0soDDfhxe1dimnLmvZIsGU.crl (hash: HhFAIC48fcl3nNjLddoYCNv16eEPT/7fREaCGAUiKx4=)
                          2: Z6jijp-NqGecwIu65j-qEMAm0nw.roa (hash: 19TQbomnm0YTugnf3c9Z0fKykpuT1EtKWHuZ0GsZG+A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:5e:e5:45:73:48:29:57:3d:f0:42:2d:d8:4a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
        Validity
            Not Before: Apr 13 10:00:59 2025 GMT
            Not After : Apr 14 10:00:59 2025 GMT
        Subject: CN=806cc33855a239b63a4c35918569ded2861742c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:5f:e8:da:1a:0b:d1:cf:f0:dd:98:3e:b4:
                    ed:4f:b3:45:c9:a6:59:97:74:e5:d0:f5:a1:bf:d1:
                    34:43:dc:0a:b4:61:7b:84:59:9f:2e:a4:ac:a6:82:
                    96:f8:0b:b7:56:70:4d:de:a0:f9:0d:a2:7f:f9:81:
                    1b:19:c6:b5:db:2f:98:0d:11:be:f5:b1:36:07:2b:
                    f4:5d:d3:63:28:13:0b:95:b4:f3:c6:b9:41:b8:5e:
                    27:d3:81:56:8a:24:8c:e0:0b:8b:6f:22:e6:8a:43:
                    3c:76:0a:1a:b2:ed:5b:b4:68:7c:17:b9:f6:4d:3c:
                    ca:52:80:99:51:85:89:3a:c8:30:cc:3a:c9:bf:73:
                    43:07:72:4d:2a:8e:a8:81:86:de:ed:9d:49:36:89:
                    85:e0:82:3c:d5:fa:df:e1:fa:84:be:df:43:22:00:
                    89:83:2f:0b:3b:57:47:95:93:b9:c7:db:f6:5f:02:
                    0e:3f:79:3d:49:33:aa:34:db:39:15:34:68:fb:dc:
                    b2:c4:36:c9:bb:b5:36:74:b0:12:78:bf:d1:d6:59:
                    2d:a4:24:4e:c1:f5:3a:fc:2f:9c:53:6a:29:1c:e5:
                    7f:45:8f:a9:ae:c7:59:55:aa:21:24:15:c9:ec:11:
                    ad:13:26:a4:e0:d9:38:55:f0:51:7b:62:bd:d4:3d:
                    07:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6C:C3:38:55:A2:39:B6:3A:4C:35:91:85:69:DE:D2:86:17:42:C3
            X509v3 Authority Key Identifier:
                keyid:D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:6e:7c:49:49:a9:b9:70:2d:5f:9a:29:c4:3e:33:ca:9e:
         70:a0:0e:a4:b9:1c:9a:bd:5e:18:66:8c:a8:07:fd:c2:ef:02:
         b8:d4:d8:13:d9:37:43:2c:d8:43:74:82:ad:a1:8a:99:41:4a:
         55:ee:7a:53:7e:84:90:22:21:24:ad:7c:7a:8c:76:79:03:a5:
         4d:ae:00:d9:2b:4a:6d:11:8f:61:11:5c:43:ef:ed:8c:f0:4a:
         bf:39:04:e0:dc:7f:47:94:82:60:82:1a:aa:77:9b:aa:87:55:
         3a:3e:ca:a3:cd:06:51:86:ef:a9:cf:19:fd:9f:28:c3:97:84:
         d9:55:69:e7:14:26:57:8f:6d:93:52:8f:87:43:73:13:79:02:
         30:99:1b:35:7e:ac:c8:07:e3:2d:68:f7:27:a3:20:90:72:2b:
         90:d5:b5:1a:38:9c:47:be:13:08:ce:58:fe:0c:06:6d:55:de:
         bf:15:11:ac:f9:ff:ce:0d:25:e9:a9:d8:00:e1:74:cb:4a:a8:
         70:c3:ac:cf:49:5a:0e:fc:cd:93:87:7c:9b:54:b2:18:75:31:
         d4:12:a0:15:9c:36:11:6c:55:ed:c3:8f:1a:0d:01:da:bc:94:
         7d:63:dd:07:4b:ba:2f:b3:ea:73:50:97:e1:bb:e2:82:20:b5:
         62:47:95:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----