Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
File:                     DLvQEU2XGWdQ1IxeElbtBVpeniw.mft (raw, json)
Hash identifier:          h0RJaleLRWaxLOkULm0ykPI5aB3KWNy3pqIghjoiKAo=
Subject key identifier:   B6:26:2E:66:91:0C:8E:B9:67:84:5B:F5:34:7A:03:A0:06:4E:EE:1C
Authority key identifier: 0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
Certificate issuer:       /CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Certificate serial:       01962ECF7069695C7DB8144A861427CF80F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
Manifest number:          0942
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: C1pdtFvgr0xoHUm63plkKuj-C_Y.roa (hash: b/y/wC9aBMLG4uCve6DdHlmgdXRsPrspZQT4HGYlIp0=)
                          2: DLvQEU2XGWdQ1IxeElbtBVpeniw.crl (hash: I7/L6CjmLUfaTIq21ISsTUVrCycV0okfDuaim1itBPo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:70:69:69:5c:7d:b8:14:4a:86:14:27:cf:80:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=b6262e66910c8eb967845bf5347a03a0064eee1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:27:06:87:75:57:80:10:ba:ac:39:d5:f2:
                    74:4d:74:40:35:39:98:79:bc:bd:7f:03:42:1a:e8:
                    3e:83:08:4b:01:da:49:36:d8:cf:90:f6:9a:74:62:
                    1f:35:5f:bb:92:11:47:5c:36:a4:6f:58:94:13:b2:
                    2a:21:5a:48:76:63:d2:6e:6e:3e:08:9c:c2:39:82:
                    bb:b4:60:66:70:eb:56:b4:0f:b4:65:92:9a:60:10:
                    25:28:5f:86:f1:be:21:23:33:a1:86:20:ec:8d:32:
                    b5:b8:73:7a:c7:2f:3f:35:bd:b6:a5:a3:e1:81:96:
                    a0:8d:05:f3:d3:27:c0:74:83:7a:b1:95:a5:05:8e:
                    0c:b2:c2:83:48:4e:0b:ca:58:47:4e:7b:17:d9:eb:
                    42:b5:02:79:77:07:6e:01:c0:f9:30:e7:aa:1d:b4:
                    36:74:27:b2:d0:69:77:19:bc:59:62:99:c9:71:a1:
                    2d:18:8b:4c:4d:0a:67:c6:81:b2:be:b7:b2:3b:e5:
                    bd:cd:c3:fd:af:94:27:7c:65:7c:59:4c:88:bf:df:
                    26:45:29:e6:78:fb:44:6f:b9:86:a1:2b:3c:bc:9f:
                    63:89:91:bd:9a:31:fd:ab:fc:44:fc:7d:de:21:54:
                    bf:23:76:6e:80:f1:c1:4f:0a:a9:04:7e:fc:91:48:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:26:2E:66:91:0C:8E:B9:67:84:5B:F5:34:7A:03:A0:06:4E:EE:1C
            X509v3 Authority Key Identifier:
                keyid:0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:4a:51:cc:f4:b0:d4:7d:04:54:23:ae:d3:ac:62:05:f3:48:
         bd:32:a5:5d:89:fb:06:32:71:71:e7:c0:dd:fc:79:52:90:c2:
         f9:63:87:ae:66:73:1d:76:bd:4e:b0:bd:12:65:01:ab:8b:00:
         69:4e:08:20:fb:d1:58:74:93:20:21:91:c9:3b:fd:09:63:21:
         1d:41:f7:41:44:73:d8:f7:a3:67:1e:06:21:fd:b2:28:1d:f9:
         02:be:84:ec:90:44:94:a1:b2:c0:93:f7:8b:e5:3d:10:fd:f4:
         0d:5e:43:91:4f:67:72:7d:6d:ef:c4:30:6a:4d:c9:e9:3c:8b:
         c7:8b:95:a1:7f:34:28:a0:f8:87:57:30:78:38:8a:f9:ed:d2:
         d1:c6:3b:f2:fe:8a:42:ea:50:92:9a:75:6f:1f:23:09:23:e1:
         65:ba:4d:6a:ab:12:37:39:ef:a6:d0:5d:bb:2a:57:c1:45:b0:
         fb:76:a0:af:89:89:97:fb:a3:3d:72:e1:f2:1e:dc:79:5c:33:
         d7:21:2d:f7:ca:0e:af:8c:0e:80:fa:15:13:b7:3b:6a:e9:07:
         3f:88:ac:6e:af:d3:cf:57:48:eb:17:c9:a7:4f:88:b6:b8:af:
         6f:c6:96:44:99:3d:43:97:2e:20:83:2b:7b:6a:68:68:16:00:
         8b:6a:c8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----