Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
File:                     DZ40sUlHfVXvC1lipeXgDN-1hIk.mft (raw, json)
Hash identifier:          miL9bevEQTnURWEsulIZJJGe8JBfyD9IQePoZLe8608=
Subject key identifier:   0B:BC:45:F6:E1:10:46:1E:2B:0B:FF:6C:86:B0:AA:5B:2A:B6:E8:CA
Authority key identifier: 0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
Certificate issuer:       /CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Certificate serial:       01962E61CBD20203E3926ECE77B9863A5054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
Manifest number:          1226
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: DZ40sUlHfVXvC1lipeXgDN-1hIk.crl (hash: M7tUawnFVhjYP4ezPvPjS7qbnKpnT9z0D4/fg8TCifM=)
                          2: WGiFR-bGPm6J5ZNuq_i5kJB6Nzw.roa (hash: 74v2TFsnggZrqZFnVMwJ7ZEDqgCLlK+dkXL3Ua1EXV4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cb:d2:02:03:e3:92:6e:ce:77:b9:86:3a:50:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=0bbc45f6e110461e2b0bff6c86b0aa5b2ab6e8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f9:9b:df:77:47:ac:01:d5:97:52:9a:4e:1b:
                    55:33:50:25:10:28:cf:d0:c9:df:88:74:54:be:d0:
                    38:21:a3:96:d6:06:cf:4b:f2:3f:38:5f:4c:58:af:
                    f9:0c:dc:f9:af:f4:47:ab:0f:0f:ff:85:fd:8b:aa:
                    a7:5d:1b:47:94:2e:e6:c0:4b:96:7a:91:3c:b4:ec:
                    a1:6a:2a:4c:20:2b:c5:c9:02:72:6e:2c:13:19:e8:
                    79:64:6e:88:81:dc:90:9e:d9:fb:18:3f:81:ad:0b:
                    98:20:c6:1a:a6:96:ce:56:d6:b6:9d:a5:32:43:52:
                    57:40:29:37:db:ac:01:f8:79:b2:7f:83:d9:f6:7e:
                    6c:b8:be:10:8d:66:80:91:a1:87:db:36:51:c1:be:
                    5d:c1:29:25:82:67:1b:92:cf:0c:61:ce:71:0a:b2:
                    80:20:f2:30:ab:37:c8:1c:27:08:91:41:7d:33:0d:
                    39:3d:65:7b:e4:03:7d:60:ef:e3:cb:01:4e:a3:d6:
                    fe:4a:3b:ce:cc:91:bf:d9:32:1d:c5:b1:9a:ac:54:
                    ae:4c:2c:ca:9d:00:e4:69:13:c7:15:a7:3d:c0:13:
                    f7:49:09:85:08:5a:57:84:0a:fb:90:f5:1f:48:10:
                    9b:5f:b6:f2:21:1c:cd:35:33:b2:14:c5:95:ce:a2:
                    7b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BC:45:F6:E1:10:46:1E:2B:0B:FF:6C:86:B0:AA:5B:2A:B6:E8:CA
            X509v3 Authority Key Identifier:
                keyid:0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:cb:8e:f6:a0:79:16:aa:86:f8:33:52:9b:d6:ed:61:f4:cc:
         34:2f:e8:0f:e4:82:a5:43:e7:86:80:a0:56:5a:d6:7b:4c:6e:
         20:b1:12:f8:23:89:b3:42:7a:d2:74:a3:c3:72:72:68:3d:9d:
         8c:0c:39:36:4e:03:3c:3d:4b:fc:09:81:6e:27:0b:11:24:72:
         2d:05:1f:fd:1c:f1:6e:49:81:09:af:ca:1e:f4:01:1b:76:6e:
         6b:94:0b:0e:c6:d9:91:07:84:59:92:8e:4f:e5:df:92:82:ef:
         0c:24:53:0c:49:33:90:f3:4c:ad:d4:ad:1d:1f:1c:94:f6:3c:
         92:21:59:0a:6e:d8:c0:7e:7c:01:f5:5e:32:63:f4:d0:97:fc:
         ae:df:9c:6d:0c:f5:0a:48:54:09:d2:bd:07:5a:46:23:24:70:
         7b:ba:ef:8e:cf:07:a9:8a:fd:5f:63:5e:ec:ae:9d:88:67:46:
         da:c3:ed:17:0b:60:17:26:68:09:71:1a:1e:dd:20:15:7f:a2:
         2f:6f:65:2c:77:17:9e:49:c7:de:d5:dc:b4:1e:ca:35:d9:a3:
         68:3c:d7:bb:4b:39:ac:ce:d3:6d:5d:cc:83:06:48:c8:26:8e:
         55:56:01:3b:55:df:29:57:c4:b2:c1:41:9c:17:e0:16:db:6f:
         08:3c:2e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----