Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
File:                     DWE_6YRKY0OerooaoMPKjGC0XUU.mft (raw, json)
Hash identifier:          V1ZxLXFwYqHuy7ayZ9ho8fgSfoOZ7KhH3TLwok1oC3A=
Subject key identifier:   92:28:54:35:77:BC:B2:69:83:1D:ED:E2:E8:7F:54:C7:24:BE:74:75
Authority key identifier: 0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45
Certificate issuer:       /CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
Certificate serial:       01962E6194214B2743E45E8B47BD187713A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: DWE_6YRKY0OerooaoMPKjGC0XUU.crl (hash: 4GLONoOov/cbT9BbZ5BHNow3FLkWNg5+lNB64VWvzTM=)
                          2: cAJwzXdTlj0l08klToV51g3reQE.roa (hash: MNtWLrHXizLnpt8hRaJw3axv6PAJCrUS/ztw7WczF4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:94:21:4b:27:43:e4:5e:8b:47:bd:18:77:13:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=9228543577bcb269831dede2e87f54c724be7475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b3:16:f3:34:9e:6c:c9:02:0b:09:63:20:45:
                    6f:e4:49:50:f5:d9:99:11:6b:b8:2c:1c:bf:62:94:
                    10:e8:8a:ed:36:16:ff:7e:a7:b9:60:35:b4:61:ed:
                    a3:74:5a:64:bc:2e:c0:85:aa:a4:48:ed:c6:bc:92:
                    a9:44:44:33:40:d4:ce:aa:2d:04:29:12:6c:4d:90:
                    d6:db:3b:61:91:b4:12:9d:02:1f:5f:ba:b1:5d:4c:
                    a6:f3:39:53:aa:7a:cf:b9:35:c4:62:e8:32:2c:b7:
                    ee:89:ae:1d:ec:21:65:54:29:25:87:47:c6:a9:ff:
                    36:4a:e4:cf:92:fe:fa:fd:3b:d5:5e:2d:fa:f8:89:
                    3d:aa:bd:ee:6c:e5:9f:c6:bf:aa:b3:17:5b:44:77:
                    7a:cc:7f:af:02:2b:69:2f:2d:79:73:ba:a8:57:5d:
                    62:df:05:c7:a4:4f:08:38:fd:96:42:15:ae:d5:de:
                    06:63:71:2d:82:98:45:8b:2e:9e:2a:9b:a1:53:e8:
                    cf:db:3c:3a:cc:9e:64:e3:e3:99:03:8f:e3:56:40:
                    1f:0a:71:97:d7:9b:ee:6c:5e:cb:34:60:b5:9c:4c:
                    ed:35:32:52:c3:3d:30:ad:b5:2f:72:b4:27:74:d7:
                    03:f9:c8:89:e9:de:f7:ed:b9:ba:7d:c7:79:58:18:
                    b0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:28:54:35:77:BC:B2:69:83:1D:ED:E2:E8:7F:54:C7:24:BE:74:75
            X509v3 Authority Key Identifier:
                keyid:0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a6:68:b3:4d:77:31:25:8c:ce:a3:17:cd:46:c0:8b:a9:64:
         1f:a8:50:69:ec:2a:98:bb:48:5a:cf:7f:26:7b:b2:95:12:e6:
         6c:e7:4c:54:90:8d:4c:2f:78:60:3b:3c:24:77:fe:08:b3:20:
         5e:4a:e2:6d:79:e2:7f:79:e6:35:2b:3a:98:9d:c7:42:9b:ec:
         21:b8:a8:0b:ab:20:3c:28:b1:a0:aa:2c:be:85:cc:1c:e3:0d:
         37:f1:7e:19:30:8b:40:01:b0:3a:8c:cb:b1:53:77:e9:fb:cb:
         1e:3a:4d:17:54:9c:c4:4c:fb:15:35:4d:33:7d:b6:1f:9c:b5:
         e1:df:aa:d4:c1:8d:2c:f9:fd:2b:c7:23:24:4c:5b:8d:09:21:
         d0:bb:f4:03:8b:d2:86:78:1d:3f:8b:f6:25:d1:05:5a:3a:f0:
         d1:ba:c9:3b:ac:0a:ef:4f:45:ef:82:8c:3b:d8:6d:36:8e:af:
         1b:5f:b9:ee:59:8b:5b:12:af:31:06:32:27:0a:81:ae:5e:9b:
         56:6a:8d:db:c9:0a:c7:57:fc:5c:06:39:2f:db:ba:21:48:47:
         b9:49:c4:19:15:14:ce:19:75:75:80:00:31:30:ba:fa:46:fc:
         a0:df:22:91:a4:6c:c6:e2:67:28:e1:f4:57:df:10:2a:b8:32:
         a5:25:11:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----