Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
File:                     DBATeUToh60HVp7U1BKEZzLQr3A.mft (raw, json)
Hash identifier:          3r5J6wvkyWTHpkEB424IhhYnD5Y/+9DlmfGQNl8od0g=
Subject key identifier:   D3:2B:21:AE:F5:99:43:73:0F:9D:BD:3D:D8:BE:86:00:1A:CC:8F:5D
Authority key identifier: 0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
Certificate issuer:       /CN=0c10137944e887ad07569ed4d412846732d0af70
Certificate serial:       01962F06744AFD52584C36C460382EB89835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
Manifest number:          0CC9
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: 1teQs2-Gqr9Ttken-kpobex52GM.roa (hash: JwKmhVt10f03COhT0AoYFXxwUVkj2YdwV7qznRh2SmM=)
                          2: DBATeUToh60HVp7U1BKEZzLQr3A.crl (hash: e079E3JDtqTr8CTUMyN3S8eiUifGdVpv/tUEvy62XvY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:74:4a:fd:52:58:4c:36:c4:60:38:2e:b8:98:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c10137944e887ad07569ed4d412846732d0af70
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=d32b21aef59943730f9dbd3dd8be86001acc8f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:33:05:52:46:a7:d7:10:90:88:54:92:ac:d4:
                    e0:72:64:a8:76:53:51:4d:ff:a2:05:a7:3a:54:4b:
                    4a:93:af:ab:e8:c3:c0:cc:e7:f7:e0:51:a5:5d:47:
                    69:27:87:b6:31:d8:66:b5:7f:4a:b4:29:68:3d:33:
                    a9:d0:73:79:50:c7:f1:cb:42:96:01:c8:fc:17:14:
                    57:12:05:bb:70:24:9e:7e:9c:e6:9c:1a:63:9a:92:
                    d3:b8:a6:f4:e3:67:0f:3b:7f:58:68:94:3a:eb:71:
                    ba:26:ca:d7:eb:7c:ae:0f:f0:06:30:05:16:90:0c:
                    12:c0:32:21:60:06:f1:af:6c:fa:ca:7f:7c:16:05:
                    76:b0:d4:d1:c9:6e:5f:1b:03:c3:a8:bc:56:54:ac:
                    a4:02:42:e1:45:0c:63:55:e0:d4:2d:34:b2:44:73:
                    59:44:fb:a4:50:06:f7:53:41:12:b8:f0:78:fc:bc:
                    77:70:4a:28:b7:9e:21:5c:7a:92:c3:33:d6:5e:a8:
                    60:0e:bc:fb:5a:c4:22:1c:34:7c:4b:87:bc:69:4d:
                    ba:84:bd:24:16:d3:df:a1:8f:45:75:a4:5f:4a:5f:
                    b3:80:fb:82:4c:eb:46:9e:60:c5:3d:b5:34:f3:8d:
                    d9:49:14:3b:82:20:66:65:49:34:1f:d6:62:0f:b8:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2B:21:AE:F5:99:43:73:0F:9D:BD:3D:D8:BE:86:00:1A:CC:8F:5D
            X509v3 Authority Key Identifier:
                keyid:0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1c:6e:a4:04:4a:85:53:ab:02:50:57:2f:18:89:e6:91:3c:
         fa:3e:6a:ff:52:21:97:3b:cc:fb:01:6e:4a:e6:36:70:a1:fb:
         fb:2b:0e:5b:d8:87:53:cb:00:9a:af:91:32:4a:9c:9d:70:80:
         b2:24:fa:58:25:81:c2:80:b7:dd:df:5d:d4:b8:c2:96:50:a0:
         9c:70:02:a2:e9:8e:c0:e0:2f:82:d5:33:1d:a6:28:88:bd:3d:
         73:ac:bd:21:3e:c8:18:a0:6e:e1:83:67:de:77:b8:19:c1:52:
         5a:ec:c5:3c:4a:d5:93:2c:bd:bb:49:9d:f5:03:37:e2:8e:83:
         a5:60:ec:68:9b:17:70:04:ea:71:ac:8b:8a:f7:72:4b:20:6e:
         1e:7b:1c:4d:5e:22:4b:a1:70:49:19:74:48:e0:ce:8e:9b:9d:
         08:20:a6:dd:29:24:be:8a:ff:a4:53:e8:93:3b:77:fd:64:32:
         85:5f:e6:47:af:9c:18:9c:f1:f3:b9:94:01:ad:12:65:90:23:
         67:57:e4:1b:e7:d7:db:cc:08:7f:0e:3d:a8:3d:f2:45:13:f4:
         c6:13:0f:d3:16:56:fa:ec:26:ad:d3:3d:ee:3a:a3:9d:da:f7:
         18:38:3b:ef:66:3e:b7:d2:17:1c:63:0e:ff:6b:11:22:f5:c0:
         6a:5e:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----