Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File:                     Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier:          AakASrbXcaFXwgd+3XKepz1eYl6ihJ0tXN5LcImKj2Y=
Subject key identifier:   A6:42:E4:CD:86:D3:EC:C0:D2:0F:B1:D1:7D:7E:A2:31:2F:6E:9D:84
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer:       /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial:       01962F74DD660B5CBC771E4626ACA95294BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: 2SJSV1UZAaWIljMFlKRGo/Ni3hhVDHoysfs8SVE3hyc=)
                          2: I8ss4EzfBc_E6Ebc96KtodwkTNg.roa (hash: AiTv5W+AlPuM/j/7wO8LKQb21Yhuyp4ro3rVouKC/1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:dd:66:0b:5c:bc:77:1e:46:26:ac:a9:52:94:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=a642e4cd86d3ecc0d20fb1d17d7ea2312f6e9d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:f2:4d:1a:4c:6a:81:70:ec:4f:69:68:38:
                    54:ad:96:ec:26:4e:17:b0:b9:2d:a5:be:5d:fb:db:
                    d1:60:86:55:fc:35:05:e3:59:54:1e:a2:c2:35:27:
                    84:ed:c0:09:7b:bb:5d:09:8a:21:48:a7:dd:a6:1f:
                    d1:94:f3:7c:fe:c6:5a:6e:c4:74:e9:11:0d:ff:a0:
                    ca:42:25:ac:66:67:6a:c0:8b:14:8e:1b:6a:8f:dd:
                    48:19:ab:cd:b6:60:78:18:7e:98:a5:7c:22:5b:c7:
                    b5:f7:90:eb:cd:b5:19:95:31:cc:17:a4:d2:e5:43:
                    6a:f3:6a:82:d5:e9:c1:7c:c2:34:5d:08:88:a8:00:
                    75:5e:99:a1:36:3c:57:85:62:6c:a8:57:7c:09:b6:
                    05:62:11:18:77:d8:bc:83:0b:b8:2e:96:8e:48:15:
                    2c:fb:38:2c:d9:c3:94:69:70:4d:52:a4:95:4b:c6:
                    c2:5c:15:db:5d:44:5c:8d:61:f2:d4:a1:28:96:a7:
                    c6:42:e1:c7:ce:c7:b0:fd:bd:e3:8c:de:13:4c:f8:
                    cd:b7:b1:06:2a:75:fe:eb:5c:59:f6:ed:f5:47:09:
                    01:6d:89:f7:75:32:4a:06:3b:70:1c:3c:5f:40:bf:
                    1b:65:59:90:c9:0b:78:35:de:b6:e5:a0:d4:b1:36:
                    b9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:42:E4:CD:86:D3:EC:C0:D2:0F:B1:D1:7D:7E:A2:31:2F:6E:9D:84
            X509v3 Authority Key Identifier:
                keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:08:d5:f9:8c:72:33:d8:65:22:b0:ae:c0:3a:df:b6:90:bd:
         a8:a1:3a:79:0e:41:f1:1b:5d:75:e8:8d:28:10:63:ca:82:65:
         0c:b4:2e:78:ba:f6:8e:ce:01:00:07:f4:32:0d:16:6c:76:7a:
         c1:ad:52:11:1d:4d:b0:a0:81:86:bc:9b:b1:d9:61:60:af:bd:
         c9:2f:a9:35:2a:30:d2:fd:04:ed:95:f8:6c:6b:17:8c:5b:0e:
         8d:3c:14:54:11:17:35:06:75:63:d8:7d:e0:42:23:db:a7:cf:
         64:32:c6:61:e4:bd:a6:09:1c:c7:81:4e:c4:3f:da:84:18:c4:
         6b:c9:a9:be:72:30:83:62:7c:ff:fe:cb:46:aa:21:6e:85:10:
         c7:e9:0d:2c:d4:9c:25:bd:45:8b:95:3b:69:9c:99:ce:de:80:
         e0:b9:70:fd:ce:d7:3d:2b:5b:7f:a0:79:fa:6a:5d:64:69:bb:
         b2:a9:91:29:f4:d1:52:66:79:fb:e2:71:48:5e:08:d7:b6:de:
         a1:aa:43:c0:9d:30:3a:e4:9d:de:d6:3e:a0:a8:9e:22:86:cb:
         7f:3b:bf:51:66:82:40:ed:22:b0:69:ce:44:82:78:17:49:6f:
         e9:9c:8f:ad:59:7e:e6:f7:3f:d5:b4:8c:f6:65:95:10:6a:95:
         08:6a:3d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----