Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
File:                     0BE91dB1nAMAk4AUDGaOu9H5wWg.mft (raw, json)
Hash identifier:          KsteJEiGG5NmJxFQaI1zxtyteWeyU+7JO7D6ihzf1PE=
Subject key identifier:   70:00:23:29:8F:CF:F2:83:E4:67:77:CC:B5:6B:B7:B7:56:C6:8F:D8
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Certificate issuer:       /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial:       01962FAB70A691BB1E8D35A29241ABD77E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
Manifest number:          065A
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: 0BE91dB1nAMAk4AUDGaOu9H5wWg.crl (hash: UlYmK+WHDeXlRY+26j598n1EkNcj2tUf354FERQied4=)
                          2: Bx50PRq6KcDkdxbj0-_pFidcJWw.roa (hash: YY2WvnOzjX98gUiJi9jeyqU66NYG8yYekvXH8i5CTIo=)
                          3: U5cqWkNYnX_IKXRLiqWhPWLnj30.roa (hash: rOJ0i9MLtk8hwnYB2wL88M/HGe+Y/PZ5cxU/VSesy7g=)
                          4: qiRRCoLxoqoPkxabLfDyCC_ddgo.roa (hash: PHrnZaBjRsNXJj/q3wfcCyeQ30fafauER7XzOTQ6umk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:70:a6:91:bb:1e:8d:35:a2:92:41:ab:d7:7e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=700023298fcff283e46777ccb56bb7b756c68fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:25:0f:8b:a8:28:2d:c3:e6:68:65:2f:55:
                    26:0f:04:11:c7:df:40:ef:f0:22:04:48:3c:9d:63:
                    79:f7:16:6d:29:8f:68:a4:4c:cd:d8:89:c8:58:c0:
                    d1:46:f0:18:a6:ad:02:e8:8e:42:3b:f5:67:a7:5e:
                    00:b4:36:5f:8a:d6:c5:c4:ef:b6:33:9b:30:1c:d4:
                    32:b5:96:ba:7a:2c:32:0a:ba:95:ef:2e:28:33:b6:
                    39:36:53:08:7c:f8:3f:4d:bc:31:56:a9:d9:b0:21:
                    84:c8:1b:96:ad:b9:0b:13:f4:07:e5:cb:18:c8:16:
                    9c:f6:b1:5c:12:b2:2e:b5:d8:81:0f:ac:41:94:cd:
                    08:47:f1:70:41:a1:a9:6b:a3:d2:0c:c0:e2:0a:17:
                    4d:21:50:4e:f2:39:d1:d5:34:58:48:86:c4:b7:a2:
                    54:de:86:da:88:72:1c:c7:b0:1a:45:06:11:7a:8f:
                    66:9e:81:c3:4d:a5:fe:f9:56:41:02:f0:0d:3e:67:
                    7a:03:3b:03:a5:51:db:2b:bf:4b:b2:29:e8:26:69:
                    b2:31:8d:9f:bd:9d:1f:3b:a4:a1:5b:94:fa:7e:dd:
                    95:20:73:84:71:cd:a1:21:fa:d1:e6:d1:5d:a8:21:
                    ed:88:46:b1:ff:2b:49:26:a5:ac:6b:ad:1f:4a:c2:
                    3a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:00:23:29:8F:CF:F2:83:E4:67:77:CC:B5:6B:B7:B7:56:C6:8F:D8
            X509v3 Authority Key Identifier:
                keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:75:4e:9e:c0:cd:3c:53:02:04:35:ff:50:3f:47:7e:d8:81:
         d7:5b:1c:7e:19:02:6b:1a:89:db:6a:c2:3b:09:e3:56:ae:af:
         cf:0d:cb:86:53:2d:0a:7b:1b:ef:7b:37:f0:2f:9b:82:19:b5:
         ed:31:7b:33:07:4d:c8:02:37:d8:27:2d:47:b3:46:4e:07:30:
         d4:54:b0:c5:b8:e8:59:cf:32:3d:5f:3e:83:6d:af:87:f9:20:
         1a:5d:3d:dc:c8:f8:30:2f:77:73:76:f5:a0:c2:bb:ce:09:0d:
         29:81:90:d2:85:6e:bb:7a:6d:a8:16:14:fe:41:a8:7d:af:34:
         78:0f:ad:69:df:5a:82:f5:34:f9:3a:f7:2d:42:3b:6b:cb:de:
         25:0b:ef:d8:cd:1a:91:c6:35:6d:4b:da:15:45:46:75:c9:89:
         f4:53:ac:72:77:c0:ab:f4:f5:b1:1a:ad:07:08:7c:fb:6d:9e:
         42:9d:78:06:0a:d9:b2:e8:16:9e:61:00:ed:eb:a3:2b:05:6e:
         51:e0:8c:64:f5:69:e0:92:2f:c2:00:4d:3d:4e:5c:f5:34:e2:
         8e:b1:ba:33:da:57:92:b5:07:e8:db:cd:5e:19:97:78:e4:7d:
         0f:a9:b1:68:5e:20:79:01:03:1b:d5:29:c9:95:61:4e:b3:40:
         0b:07:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----