Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
File:                     0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft (raw, json)
Hash identifier:          1Hqdk2D3PskeFvGWEuOMlEPb23a2DNaHWHlryJGaf/A=
Subject key identifier:   00:73:C7:44:E7:88:4C:70:E0:0D:F0:06:84:A9:89:F8:90:A3:CB:5C
Authority key identifier: D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
Certificate issuer:       /CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Certificate serial:       01962E61DD4EC48C27F0331BB80294A5C42A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl (hash: Qo8XocbK9+ObdutaJMpilfhMRJC9hDkPsMtVQqYCFlo=)
                          2: 4RiMrm8aaExTJ5NxhFCCQc-LTfQ.roa (hash: xT77mBm76fvxQ/4syBVoQsoquUiDMD7RefgDewlMNII=)
                          3: O84I_LAanBtJYvSSTZhnAsP3iQA.roa (hash: 6ivMoGITrJjRBuEurkZGNP+0M6whX3cvNI3NRDFJ7b8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dd:4e:c4:8c:27:f0:33:1b:b8:02:94:a5:c4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=0073c744e7884c70e00df00684a989f890a3cb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:8b:66:25:8d:40:c2:6f:53:31:5f:a3:45:
                    53:d8:87:5c:11:96:c0:41:b4:d4:1d:2c:30:83:0f:
                    2f:29:97:55:9d:90:b3:3a:ff:aa:39:5b:c2:6d:9d:
                    8a:00:f9:44:59:c8:cc:5d:88:2f:a5:9f:7a:c6:48:
                    4b:94:b2:7d:82:d5:e4:a4:31:c9:dd:61:5f:ef:53:
                    f1:01:35:b3:a1:5d:80:2c:f2:59:47:41:55:d4:21:
                    4e:91:11:7f:14:24:f7:41:8a:1e:b7:2e:50:96:06:
                    9c:b4:e4:ba:f9:ed:68:f6:6f:ea:53:ba:ed:ad:a5:
                    d7:fb:0f:39:4e:06:b4:7c:53:34:e1:51:e8:ff:3d:
                    1e:bb:ef:97:21:b7:2b:e7:7e:0f:dc:1e:ec:fb:3b:
                    47:7a:86:06:48:ca:4c:c0:26:b5:0c:77:82:15:95:
                    9e:67:c8:ec:f3:24:a5:75:07:a7:46:62:74:78:f8:
                    4f:6b:40:90:30:cb:a1:f1:c6:8b:fe:ec:4c:97:55:
                    f5:4a:3f:75:f0:9b:63:98:3c:c3:7d:b0:09:b7:44:
                    22:1c:fa:68:bc:6b:cc:5c:ca:29:a8:3f:74:be:c5:
                    ee:06:e6:7f:03:e9:2d:ba:36:6d:aa:92:c9:13:26:
                    e8:2a:50:53:81:78:eb:57:c6:8a:02:83:70:be:81:
                    ec:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:73:C7:44:E7:88:4C:70:E0:0D:F0:06:84:A9:89:F8:90:A3:CB:5C
            X509v3 Authority Key Identifier:
                keyid:D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:98:8f:1c:c0:96:fa:b9:21:06:8a:69:f0:1f:86:cf:10:df:
         90:f9:db:6f:b5:a7:36:96:4f:c4:ce:6e:a7:01:71:31:21:a9:
         7a:84:36:57:eb:f0:30:6c:13:1a:20:35:79:4f:0e:7f:5f:e4:
         31:7a:ce:1d:90:af:e3:b8:16:30:df:ce:a8:09:b0:03:88:90:
         d8:7d:1b:71:2e:d1:71:e9:0b:e8:d0:5c:ca:01:97:be:68:16:
         80:97:32:b0:64:9b:1b:6d:68:5c:89:e4:7e:d1:80:53:a2:3a:
         95:64:73:48:c9:34:79:86:6b:5d:b7:bd:db:1a:a7:4e:30:30:
         85:15:50:c9:e1:1a:02:1e:ca:b9:e6:5b:59:09:b5:c5:c5:c4:
         dd:f7:36:1d:36:31:c4:7b:cf:97:5d:db:34:17:f2:70:38:3e:
         27:c6:18:05:b7:e3:52:9c:63:7c:d8:e3:9a:00:56:1d:31:36:
         ef:e9:99:58:d1:7b:e2:1e:c8:b9:9c:a5:fd:f9:40:b3:24:fd:
         f4:4e:e9:41:89:ae:da:cb:2b:49:5a:0e:e1:8b:5b:28:e3:9e:
         1d:3e:c6:e9:a6:b0:a0:f1:be:23:e1:d7:ca:8b:9e:69:4a:96:
         d1:de:04:4e:c8:20:a1:00:02:04:d2:1b:0f:ae:71:67:48:f7:
         9b:fb:0f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----