Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
File:                     DigqFcGl0VS72ocrNXYHqR-VCqU.mft (raw, json)
Hash identifier:          KLymODRp9k2mWgfdXQ39pZy8uTkLgziitb4Wtf/X/RA=
Subject key identifier:   53:CC:56:D4:4B:1D:B8:86:43:D7:6C:7F:7F:6C:64:A4:CD:B0:3E:5F
Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
Certificate issuer:       /CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Certificate serial:       01962DF3B7ABD134EB7E95CA054C94386240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
Manifest number:          1110
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: DigqFcGl0VS72ocrNXYHqR-VCqU.crl (hash: mXikRF6ItdL/zJ87xAZMjb+8C9aOEXUfyJsnmgWev9g=)
                          2: to47JCc_e9Qrrg2tVbeiwG63wsQ.roa (hash: tHKJZVV0X66uh963WSmhjzD4IRWkIMFnLIgcHV2NkJM=)
                          3: u3O0A5kbS_BKPuygQ5bEuCuWEmM.roa (hash: EFUICxjgOr4/W3Yre79DXYxTO7h614siVS4H6ARHwaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b7:ab:d1:34:eb:7e:95:ca:05:4c:94:38:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=53cc56d44b1db88643d76c7f7f6c64a4cdb03e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6b:cc:1a:57:03:2b:c2:46:ee:53:c5:76:72:
                    80:0b:62:28:22:36:88:7c:6e:39:ef:db:e1:39:c0:
                    64:af:83:9d:d0:d2:31:a4:fc:bf:4b:ba:9f:05:5d:
                    c8:b0:97:dd:a9:0f:76:8d:27:2f:9f:85:b3:2f:8d:
                    d5:af:6a:04:33:2f:3a:23:ff:2e:6a:c6:80:b3:d1:
                    8e:39:69:4a:49:b5:e9:9b:8c:98:f9:6f:c6:91:4f:
                    c6:ac:57:f9:aa:d6:54:7f:d0:b4:29:7c:b2:44:bb:
                    bd:86:0c:2d:91:e3:1f:48:4e:40:5c:cf:4b:61:b6:
                    11:43:22:9a:f0:51:a3:a0:8e:37:c8:20:67:94:6f:
                    5b:f1:b4:15:c2:14:16:b8:3e:a0:da:a4:4f:7c:0e:
                    ae:fb:ee:bd:5b:e8:16:7d:74:b8:c0:75:60:45:f1:
                    ab:0d:db:b1:4e:69:ab:3a:df:03:f9:e3:4a:b5:61:
                    f8:d7:ef:08:93:36:ff:8e:24:56:c0:14:86:5a:cc:
                    f8:94:d7:f5:c4:ee:89:67:30:a7:62:bc:bf:2c:3d:
                    5b:d2:23:4b:7f:79:c1:fb:3c:f9:6d:3a:ff:61:f5:
                    8d:69:53:83:e3:a4:98:30:b7:3c:78:35:fd:35:56:
                    4b:ff:df:f2:53:0f:c8:c8:c3:2f:e9:bf:7f:3e:ab:
                    c8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CC:56:D4:4B:1D:B8:86:43:D7:6C:7F:7F:6C:64:A4:CD:B0:3E:5F
            X509v3 Authority Key Identifier:
                keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:31:b1:a3:57:20:4e:82:c6:81:76:28:04:26:bc:fa:b3:
         5e:fe:6f:f9:e1:de:5e:94:2f:f1:09:16:05:83:bb:87:e0:60:
         e2:e6:fd:5f:3d:b4:b7:64:a5:43:5e:c6:4d:9e:4a:5c:06:fe:
         af:54:77:a4:4e:8c:60:9d:2a:c2:55:79:a5:fa:d3:d9:a4:9e:
         be:8e:2f:60:03:d5:86:db:cc:ff:98:50:09:dd:94:40:a3:0c:
         d0:19:5f:0d:27:cd:d9:00:a6:22:5e:bc:93:94:ec:dd:d1:fb:
         3d:e5:5b:c1:41:ad:19:a6:f5:dd:89:17:df:87:6a:1a:12:86:
         2f:12:0c:ff:02:85:6e:c6:a1:69:15:f0:22:0b:85:3a:2f:cc:
         c7:3a:af:a3:bd:36:20:60:5b:35:b2:47:c4:a6:45:8a:a7:eb:
         2f:65:29:09:6d:47:bd:a3:49:13:34:a9:63:02:1c:44:4b:4b:
         41:ad:92:7e:70:83:83:ff:f9:11:b2:f2:ad:52:a9:54:e9:b5:
         63:03:dd:0c:40:7f:79:7f:93:c2:cf:ed:9c:45:93:1c:9b:83:
         a8:56:2b:7b:e0:fd:00:08:35:f0:29:c3:6f:d0:1c:c3:d1:9b:
         73:84:ad:98:89:e9:90:81:4c:da:bf:b3:fd:96:23:e5:5b:2a:
         78:26:cc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----