Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File:                     DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier:          IgM5UuCBfoPagtlOfD0n4GlKjatL+CDnYCubtdn7CR8=
Subject key identifier:   C2:5F:D5:08:EB:0D:1B:0A:3E:B5:B0:C3:A0:19:E5:B6:92:37:A4:F3
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer:       /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial:       01962DF3E74642FC5D99A418ADC62471F2B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: kJrhC10WFjOCEcHnIHTe9MQS8nMp86/YzSo7jqcuUsU=)
                          2: Fa4rtvztLobT1gePEYyc0DRCu2Y.roa (hash: C1CnICPh2LaUpEFyvXsX8GWWmclYO2wcMr6Jq76RYVQ=)
                          3: n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa (hash: M/0C5qRusrhAnj6tAMLK/NHBLWKiMm5trd2xt/8UodI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e7:46:42:fc:5d:99:a4:18:ad:c6:24:71:f2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=c25fd508eb0d1b0a3eb5b0c3a019e5b69237a4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fc:16:41:69:76:0e:cb:6e:d8:01:03:fd:2b:
                    54:69:ce:92:5d:8e:4d:64:9f:38:f9:f7:75:33:eb:
                    07:3c:e1:b4:b8:dc:10:50:e0:c1:3e:5f:bb:86:a0:
                    57:45:8d:c3:2c:7b:1d:f4:b8:d3:81:c0:89:50:69:
                    73:bb:7d:aa:3b:6e:c3:02:ac:ba:68:ed:75:43:a3:
                    e4:c8:ae:1b:4d:5b:38:a2:92:3d:16:7e:65:c4:4e:
                    0c:ac:14:7e:32:b4:3e:48:97:ef:da:ca:24:22:30:
                    e7:a9:cf:f4:19:47:47:aa:41:64:d4:b8:6b:77:e6:
                    ea:7b:ce:55:5f:3b:65:d6:fb:a9:06:c9:c8:29:3f:
                    18:42:71:be:78:33:62:ec:0a:a7:2f:81:bb:85:11:
                    89:11:a9:52:82:19:7e:11:e9:b1:0c:40:46:7c:63:
                    fc:a5:f4:22:55:de:fb:a6:b1:2d:6d:d2:72:6e:0c:
                    ee:92:89:ee:3f:d9:64:fa:f7:62:bf:d7:c2:2a:36:
                    6a:dd:cb:20:cf:68:b7:d6:e2:1a:4f:01:ce:95:4b:
                    a8:29:4e:96:85:0e:e4:b8:0c:4e:c0:58:53:90:50:
                    95:bc:c1:7c:70:eb:6b:ce:45:2d:3a:aa:d5:5c:80:
                    ee:2f:11:af:b9:13:1d:de:5f:68:88:78:29:43:e0:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5F:D5:08:EB:0D:1B:0A:3E:B5:B0:C3:A0:19:E5:B6:92:37:A4:F3
            X509v3 Authority Key Identifier:
                keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c6:04:95:21:ca:31:75:14:de:a8:fe:86:63:13:e4:0c:0c:
         06:39:67:2c:c1:70:88:33:e6:9e:5f:20:58:5f:9a:c3:85:6e:
         de:96:46:f0:35:cb:30:14:82:c8:ac:1c:5d:ea:89:61:71:9c:
         77:a3:87:7f:b4:e4:40:22:b6:3a:92:e3:a5:ae:57:28:71:bb:
         86:4a:45:1a:10:e0:52:1f:6f:d9:06:3e:0a:a5:e7:ff:12:43:
         78:e2:45:9c:76:19:0d:b3:9c:84:60:39:86:a9:91:4f:7c:60:
         ae:85:a9:a8:b0:f9:62:e2:93:88:7f:f1:05:3b:8e:c9:5d:cf:
         42:82:78:a2:1d:95:a2:18:29:83:2f:bb:8b:55:0c:02:59:ef:
         10:a0:ea:a9:f4:1a:07:e6:61:6f:98:c2:86:61:d0:dd:e6:c4:
         23:95:02:4e:21:24:7f:e9:7d:5d:68:18:5c:81:f0:46:53:c2:
         be:83:9d:78:32:be:27:3f:7d:17:65:9d:d2:49:25:93:8c:7e:
         c6:dd:ca:aa:a9:24:e9:1f:d4:82:0e:79:15:87:ca:e1:63:6d:
         01:f3:91:eb:14:43:1d:67:2a:c1:f4:d2:de:99:5d:67:4a:77:
         6a:54:7c:9c:3d:a7:f1:10:1a:14:61:d3:d1:3d:40:54:05:a9:
         57:73:06:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----