Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
File:                     DuPU2BDyR3hBqLhVk7jzDors1Ak.mft (raw, json)
Hash identifier:          Y0OrrWYt5UAXYlXLNogHwePAByrAM9dFuxAFbcHD4tQ=
Subject key identifier:   3C:4B:46:36:6A:7C:8B:29:8B:AE:24:A6:A6:FC:97:A6:B1:5B:7C:69
Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Certificate issuer:       /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Certificate serial:       01962F069C0AAFBE282ED38B3E5581C0AEA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: DuPU2BDyR3hBqLhVk7jzDors1Ak.crl (hash: mO+XyuBLlikI+0Q2H+JZBWPosPqigQg929S0FgcMky4=)
                          2: kT96Syix82Ksegk49TAUeSUGMVc.roa (hash: d9BAb8ybDMu+8NvAhemfJFOhiARZSFEf5iHfB6YfEWg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9c:0a:af:be:28:2e:d3:8b:3e:55:81:c0:ae:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=3c4b46366a7c8b298bae24a6a6fc97a6b15b7c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bc:d3:bc:7d:92:de:f0:9f:2f:0a:40:30:23:
                    b2:00:2e:59:84:bb:87:95:9f:f8:73:65:dc:f2:ae:
                    f3:7f:cd:1f:5f:a7:0a:95:b3:fc:07:ad:ca:e5:f0:
                    78:6e:4f:e7:33:4e:2e:9e:3f:19:bf:c6:5a:55:80:
                    c6:89:ba:5b:e5:55:dd:16:73:90:c3:87:e1:96:34:
                    31:54:8d:b3:71:e1:5e:8d:cd:1b:3e:9d:96:e2:19:
                    06:88:5e:d1:86:25:d5:94:1c:3d:ac:5c:df:ff:8e:
                    8e:01:3d:b6:4c:ad:fb:e9:8d:5f:d5:48:a1:42:0c:
                    df:5a:8c:e7:60:ff:91:0d:84:24:f6:f6:eb:a9:6a:
                    44:22:4a:c9:67:88:7b:51:d5:0f:68:67:d0:17:1b:
                    d4:c4:fc:bd:6f:4a:c6:b6:34:8a:a7:43:b6:72:ab:
                    f1:79:31:b6:90:5c:20:cd:b5:0b:fc:65:a5:4b:9c:
                    e3:01:e5:10:85:1c:1e:33:94:07:71:eb:59:82:7e:
                    0b:3d:63:f3:09:62:fb:8d:14:42:a3:8a:15:8c:76:
                    e4:f5:78:d4:12:bc:13:c1:ea:07:80:2a:15:bb:40:
                    52:56:19:c4:2d:c7:74:ef:45:8f:d8:39:73:45:6d:
                    72:a5:6e:af:03:ed:2c:3d:ea:99:f9:39:6a:b2:31:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4B:46:36:6A:7C:8B:29:8B:AE:24:A6:A6:FC:97:A6:B1:5B:7C:69
            X509v3 Authority Key Identifier:
                keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:fa:53:ac:a9:2d:01:2f:a7:77:c1:7e:44:20:db:4a:bd:67:
         5a:f7:00:95:74:2d:3c:4a:f8:53:f4:ca:29:a0:a9:0f:04:ed:
         17:aa:24:f5:1b:75:3d:30:85:af:b8:f9:42:02:33:58:a9:45:
         9b:89:42:6d:68:1f:35:08:82:7d:48:72:72:bc:81:95:c0:54:
         4c:b3:0c:20:07:09:61:23:17:8d:ba:8e:2f:51:c0:eb:00:78:
         1a:c9:98:fe:5e:8f:18:8b:ee:a5:67:d6:14:c2:2b:95:3b:10:
         c5:c9:c8:92:77:9a:dd:a0:53:f3:fd:08:aa:14:8e:44:e4:9c:
         b1:23:c2:84:f6:35:d2:13:15:38:33:ec:1c:01:10:df:6c:97:
         a1:7d:93:4e:d7:c4:f3:6f:3e:59:36:17:32:c3:dc:16:dc:15:
         bc:ec:31:37:7e:b6:d8:d8:44:80:8b:2d:9f:c5:ca:a0:7f:cc:
         1e:89:d2:11:aa:af:d2:68:8a:82:a7:45:a9:c3:d5:6d:a6:05:
         88:2b:be:88:2d:11:30:11:1a:9e:79:cd:a8:3e:37:78:b9:0a:
         ed:4a:aa:e8:69:38:3a:cc:b3:33:52:ca:6e:49:d7:a0:6f:2a:
         7d:e9:a2:2d:87:34:69:a4:25:6b:74:01:7f:cb:4f:44:c4:34:
         a4:b2:f1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----