Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
File:                     DhI9xSvlTkcrv-N18u1B5JqHg-c.mft (raw, json)
Hash identifier:          TJpXhZK2UKXH1DHnf4dzKMG+65MlG84GTd2u8Hbsetk=
Subject key identifier:   1F:6C:98:51:97:ED:9E:9E:C2:10:F4:2B:97:FD:89:E6:3C:33:26:55
Authority key identifier: 0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
Certificate issuer:       /CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Certificate serial:       01962FAB3E1D1DE9671D26E0BC0A2197EF7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
Manifest number:          0519
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: DhI9xSvlTkcrv-N18u1B5JqHg-c.crl (hash: 9O97NCTpTkMe+mkjfjja0ZqrZWL27wMNDcQASE77+v0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3e:1d:1d:e9:67:1d:26:e0:bc:0a:21:97:ef:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=1f6c985197ed9e9ec210f42b97fd89e63c332655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:53:41:80:ef:3c:7b:44:ce:19:52:c2:76:
                    22:af:ec:b3:4b:f0:8f:1f:81:ac:ab:2a:4d:c3:e4:
                    95:05:bf:b7:11:32:e8:f1:c1:16:df:48:a9:c7:60:
                    3c:54:cb:e7:38:30:a3:45:11:ca:80:63:f7:f1:b0:
                    88:42:1f:dc:f2:51:a9:10:22:c5:9f:0a:69:39:0b:
                    57:64:69:21:ab:75:29:33:81:55:1e:8c:0b:d2:55:
                    ba:86:81:cd:ed:5f:86:89:2b:50:09:e5:08:7d:f7:
                    f5:77:5b:a1:b0:fc:d8:9e:f0:ae:17:c4:41:19:49:
                    d7:c6:ea:2b:0a:f2:78:59:96:ff:12:d6:56:df:43:
                    a1:11:56:a5:44:86:31:1c:69:c3:52:c3:fa:91:9a:
                    a8:a8:fd:32:be:57:d8:cc:27:35:74:6d:93:e1:42:
                    9a:2e:86:77:8f:bf:2b:95:a9:5d:16:96:90:2e:a4:
                    51:18:81:c1:d0:59:46:c5:41:99:6a:ec:70:6a:e7:
                    01:6e:89:44:67:0f:e4:5c:03:83:a0:18:c7:86:6c:
                    83:a6:41:64:ff:b5:b7:0e:40:38:51:c7:37:23:f2:
                    cc:7c:65:58:1e:f1:5c:d4:83:7c:d8:8c:97:99:9b:
                    1a:f2:36:12:f4:36:f1:87:6c:eb:08:42:b9:a5:15:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6C:98:51:97:ED:9E:9E:C2:10:F4:2B:97:FD:89:E6:3C:33:26:55
            X509v3 Authority Key Identifier:
                keyid:0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4c:ce:bf:e3:e6:e4:96:c8:12:6f:76:6f:c6:27:0b:fb:39:
         d1:7f:8b:ba:b7:57:df:6a:3a:88:cd:76:29:55:fa:ad:90:83:
         5a:95:32:e6:d8:d5:56:fa:c9:33:b8:02:85:cf:72:4c:0c:a2:
         2e:e4:ba:50:9d:f6:dc:7b:f1:28:49:f9:36:b8:a5:1c:4c:99:
         67:b6:ea:59:0f:b3:94:6e:65:c3:af:ed:cf:33:a3:6a:cb:bc:
         54:cb:a0:52:44:26:31:a4:50:86:8d:54:5b:48:1a:06:78:1c:
         2a:8e:35:df:01:36:6b:af:79:25:ab:1e:96:b7:57:fb:67:50:
         11:3c:f6:29:75:af:2c:00:c8:9e:35:ac:37:dc:87:42:9b:49:
         21:4f:72:75:16:b6:4d:66:b6:2a:b6:9c:80:77:21:34:5c:99:
         d9:a0:aa:ed:35:22:24:cf:5f:55:55:33:65:ff:1f:6c:c1:e9:
         71:cc:32:de:a6:ac:1c:f3:f6:04:f0:21:27:1a:93:1e:c6:c1:
         c4:52:e1:bf:67:1f:f9:e7:83:bd:a2:d8:fd:36:78:0d:ff:25:
         a0:f1:77:a8:22:8a:ba:6d:b8:bc:02:9e:0c:ff:ad:b0:c0:cd:
         de:11:a4:25:c9:de:9f:a9:1a:51:9d:ee:7f:42:ee:3b:6c:f0:
         44:93:86:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----