Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File:                     0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier:          cenSGTF9tB0NQWzthG/ZRM+UvYcQLDYeIhDV+qd7Pbs=
Subject key identifier:   DC:AF:01:D2:48:EC:65:F6:80:F3:16:55:4F:F0:EB:B2:2B:65:30:75
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer:       /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial:       01962E2ACA82FBB368A60CE9166DB6ECBF8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number:          1011
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: HcOiviqM1wgYAzL2C28uzDZTY+IZT4HQr64GRU0J89k=)
                          2: ickIIpxDa66Zw5SNhJ159yjnJm4.roa (hash: Ip9TbNQZyJFwTGktaixn0vXs7mVP4NezsqJqAycz9sc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ca:82:fb:b3:68:a6:0c:e9:16:6d:b6:ec:bf:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=dcaf01d248ec65f680f316554ff0ebb22b653075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:78:ce:a6:65:5a:b1:3f:20:79:a1:01:4e:eb:
                    b3:4d:83:4f:b8:c0:37:07:d1:86:79:e7:02:05:8f:
                    3c:f7:f3:f2:59:7a:92:12:37:b3:89:52:37:fe:aa:
                    c1:a7:e0:d6:28:18:14:58:71:b2:5f:39:a9:b8:24:
                    5e:84:0b:c7:52:79:50:1a:92:86:c1:4f:86:32:10:
                    f6:41:d8:b8:cf:b8:6d:a0:02:c6:84:4b:58:34:e0:
                    e9:1e:e9:f0:11:46:d7:25:35:9a:ca:8c:83:01:a4:
                    c9:f2:a1:29:30:57:7f:d2:6d:c5:23:15:d1:a6:ec:
                    14:73:05:c7:eb:f6:6f:37:10:79:ed:1d:7b:5a:6e:
                    db:74:d3:2a:61:5d:46:21:e6:4d:e3:25:a4:ab:39:
                    02:d8:82:b9:da:ef:4a:8a:e8:74:9e:c1:68:68:06:
                    38:0d:fe:e3:47:07:be:3c:8f:7d:c3:4a:d2:dd:d9:
                    22:4d:8c:47:00:3d:3d:38:2d:37:d1:c1:2a:1e:89:
                    f9:e2:62:85:ec:e6:0f:7a:de:d4:2a:67:ea:e2:62:
                    0e:43:19:41:fa:65:5d:64:89:18:74:4d:d4:a5:68:
                    f5:cf:d2:53:67:d0:9b:28:49:4d:df:ef:fe:53:b3:
                    30:1d:0b:67:ad:a0:1e:18:87:65:ea:ab:63:d1:4b:
                    ba:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AF:01:D2:48:EC:65:F6:80:F3:16:55:4F:F0:EB:B2:2B:65:30:75
            X509v3 Authority Key Identifier:
                keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:3b:ee:17:05:56:23:52:17:40:fd:be:3a:c2:00:91:04:79:
         3e:c1:50:db:96:7c:8b:7a:48:e3:f3:c1:25:2a:7a:53:3a:6e:
         dd:38:ad:2b:7e:4b:6b:96:92:53:98:ed:69:5d:d7:b1:b0:e3:
         33:ca:06:45:f1:78:16:ec:cc:ef:3a:16:be:c3:6a:eb:51:4e:
         43:d3:e9:22:8a:76:8c:32:9a:85:79:bb:52:25:8b:33:d0:dc:
         36:90:b5:99:05:30:54:4c:09:3b:f9:ac:76:2d:bf:c0:41:43:
         5b:ad:a4:4d:72:cb:d9:ca:ce:6e:e7:04:b8:bd:a9:65:55:39:
         db:51:f9:5c:08:15:41:58:ba:bd:61:67:5d:12:ea:68:02:8f:
         32:2c:0d:0f:5e:f9:64:2d:e1:25:fe:ad:cd:3b:c6:37:6f:f8:
         11:c2:5c:df:19:aa:4c:85:a1:3b:16:7f:f9:f4:ec:15:60:f4:
         21:a0:56:00:4d:9a:9e:db:a4:60:53:c2:11:e7:46:1b:fd:d9:
         5b:52:9c:bc:a4:7f:fd:90:54:86:9b:a9:27:df:4f:b3:d1:9f:
         51:89:b2:25:74:36:82:07:1b:8c:7c:4f:5e:38:c1:12:46:f1:
         c9:8e:c3:54:29:28:f3:39:06:75:d1:3e:53:90:9b:69:35:c5:
         69:a6:7c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----