Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File:                     0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier:          Nhgrywv8Nyfa1LYvEm6W88hZUEgNk/79oGA6jy7rBP0=
Subject key identifier:   49:0C:9B:ED:B4:EA:C0:25:04:F0:6C:3B:3C:26:CB:B3:EE:61:91:BA
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer:       /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial:       01962E6171EB2C40D961610444B695243597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number:          0AB4
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: FFLeEuhwzHLYWDgB53SXU75BRy585er87dCbvQZ5W5Q=)
                          2: 1qLqqTllve4zCxVAYOzBHvpeKI4.roa (hash: vb9EDboxZKlgHYFjRAGPCvT6HrDSb4Ej+FgPnOTiZKQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:71:eb:2c:40:d9:61:61:04:44:b6:95:24:35:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=490c9bedb4eac02504f06c3b3c26cbb3ee6191ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6f:bc:8b:65:2c:0a:53:c7:a9:79:40:c6:c4:
                    09:27:b4:ce:26:cb:c9:fd:92:ae:55:ed:6c:db:ee:
                    92:c0:1e:12:44:71:71:6f:17:70:03:7b:3d:91:34:
                    aa:d2:50:53:da:09:24:03:e9:13:47:fb:2a:f7:d5:
                    55:de:06:88:39:2c:21:1e:a7:ff:2b:85:b8:04:a0:
                    bb:b3:a1:cb:e2:c9:e6:88:ed:1b:e9:67:39:ac:49:
                    9a:02:8f:9f:af:6f:7e:27:fd:e0:cd:ac:54:cd:6f:
                    4f:c8:c2:76:46:eb:dc:e1:bb:ba:cf:9b:5c:49:d7:
                    b9:22:4f:92:68:21:3c:4f:b5:6c:06:d3:53:31:ef:
                    16:79:01:b6:66:1c:90:b3:81:1f:eb:65:08:5b:2a:
                    58:b7:f0:88:25:2d:2a:cf:86:6a:eb:93:d9:70:69:
                    15:1c:8b:65:7a:38:c6:fc:4b:de:87:70:40:22:fc:
                    83:b9:f9:19:d8:b0:14:3a:09:5e:96:5f:8a:e8:75:
                    2c:02:c2:14:77:9a:74:d3:ef:d4:4d:ac:46:c9:d4:
                    a3:04:1f:30:0e:47:74:8d:e5:5b:88:06:80:13:67:
                    4f:7b:43:0f:cc:60:55:bd:db:06:09:a5:87:7f:74:
                    ef:3b:01:31:71:0f:63:81:b7:f3:ec:25:8e:89:01:
                    bf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0C:9B:ED:B4:EA:C0:25:04:F0:6C:3B:3C:26:CB:B3:EE:61:91:BA
            X509v3 Authority Key Identifier:
                keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:be:3a:5a:cc:60:0a:e0:1f:76:d6:8e:97:6d:35:3a:85:58:
         08:4d:84:e8:6d:29:0c:7c:00:11:54:95:d3:43:d1:7a:5a:81:
         9e:3f:f8:a3:38:9d:a5:95:f7:f5:9a:d2:a9:c1:54:2f:f2:86:
         0b:a9:4e:b4:55:e9:7f:ff:d3:61:b6:17:67:e2:40:e6:0f:16:
         fc:9d:be:91:21:65:6f:5a:91:55:32:d8:39:32:4d:55:01:83:
         a3:fa:2d:29:20:0d:ad:f5:7b:0e:ba:ee:f2:80:6a:15:32:23:
         15:74:59:24:62:ae:33:9b:05:0b:2b:8d:da:44:13:2e:e6:05:
         6a:b0:b8:ea:41:eb:d3:a6:2b:1e:b1:e9:01:11:4e:f0:ef:28:
         c4:33:e9:5f:85:4a:81:50:49:ad:a6:bb:e7:c0:15:b4:1c:09:
         09:96:c6:0f:0a:81:2d:d9:9b:b3:69:1d:70:01:b4:5c:e2:7c:
         72:af:1b:50:bd:80:92:cb:52:32:fc:ec:a9:44:c6:16:53:5f:
         22:17:5d:11:80:f9:6b:66:83:6c:89:1a:dd:87:f9:3e:3a:5d:
         dd:47:a9:16:0a:b4:ea:08:27:c0:d3:fc:29:db:33:8c:39:a1:
         3b:4f:73:d0:7c:1d:04:a4:36:56:2a:50:1c:cb:7c:59:c0:af:
         e5:ff:a8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----