Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File:                     0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier:          O1P4qQOR4yRTIvWWsGkk8yEPPfZRYWHj+MX7oVzN8pY=
Subject key identifier:   D3:EB:13:CE:28:B3:08:36:A3:DF:0C:CB:C5:6F:70:F7:6D:00:5B:40
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer:       /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial:       01962F74EEB3CF5F198EB438C98F2D1AC853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number:          0843
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: wx7s34CvMuHwgS3LxaDBqj2r8hOVuqy8vZzUdcgtU10=)
                          2: 8LyQu6M29k1339l_CEp2NXxrXCM.roa (hash: sefzNsDqr2VAFaOlXDNefpIYjAbww43X8pxj4t3RtgQ=)
                          3: TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa (hash: lpAiG+1V0l8l8KBHMEE2mx4+9kmKvUMXZxyrbPf7z7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ee:b3:cf:5f:19:8e:b4:38:c9:8f:2d:1a:c8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=d3eb13ce28b30836a3df0ccbc56f70f76d005b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:fe:b7:a7:e9:65:8b:20:07:6b:45:65:be:
                    1c:14:89:79:ce:44:d4:52:eb:2e:e1:9d:7f:45:1d:
                    51:8b:10:48:61:75:2c:aa:cf:ab:b9:5f:17:9f:49:
                    01:26:25:df:8d:44:30:d9:ce:1b:1b:d9:c6:61:1e:
                    ce:b1:bd:1c:fa:e6:bd:4b:02:fa:51:df:d1:eb:f7:
                    4a:2a:64:3d:4a:24:58:27:7b:70:1a:b0:e7:eb:8c:
                    c3:0b:0b:b2:bf:53:dc:7a:37:61:5f:b8:6a:09:54:
                    39:e4:53:43:1b:57:50:fa:4a:91:b6:7a:6f:f8:1a:
                    21:67:dd:81:91:87:c3:14:b5:bf:90:12:6d:b2:04:
                    70:c7:0e:4d:6b:99:e4:99:e8:71:4d:af:f7:9d:76:
                    d1:d5:87:a3:1e:16:6c:24:be:25:e6:84:1e:66:0d:
                    37:00:00:44:db:a2:67:12:3b:b3:5d:8c:41:ca:9c:
                    4c:4d:88:87:81:4a:2f:5d:d7:d2:e5:9d:f9:66:88:
                    8d:94:d0:e9:12:29:63:9f:1f:0b:d1:e5:0d:5d:df:
                    c6:51:c8:98:4b:0a:bf:1b:2d:df:8c:95:ec:87:5f:
                    45:85:42:17:2b:78:2e:8c:1a:1c:ea:bf:12:69:bd:
                    ff:bc:27:08:c3:a1:7e:8e:5a:01:01:99:1c:32:19:
                    55:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EB:13:CE:28:B3:08:36:A3:DF:0C:CB:C5:6F:70:F7:6D:00:5B:40
            X509v3 Authority Key Identifier:
                keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:eb:cc:9d:7a:8e:7d:9f:0f:dc:70:ec:56:93:6f:2c:48:2e:
         b6:45:7b:b8:a3:8b:e7:ab:f4:61:6d:94:6b:56:92:b6:83:1b:
         d3:fa:95:1a:5e:91:40:4a:94:38:d9:98:9e:0b:1a:2d:1b:8e:
         de:93:af:d4:c4:55:e7:35:19:71:bf:4c:38:26:c3:e3:6e:ec:
         95:c8:c9:0f:46:47:36:26:30:cd:f4:5b:14:63:13:17:ed:a0:
         05:3d:9a:47:51:8b:ed:16:f9:d2:5b:83:e0:ed:93:ff:c6:e6:
         06:71:91:73:89:2a:bb:2e:6d:66:57:61:1f:f1:a8:54:6d:3a:
         74:85:0e:2a:23:63:7f:50:d4:b5:1c:97:69:1c:e0:11:34:a2:
         ef:3e:50:0a:e5:d9:db:a5:08:ca:22:b6:0c:2e:15:c1:ea:13:
         da:7c:ff:01:e8:b7:69:05:47:b1:b4:45:ae:52:11:2c:b3:29:
         d9:0a:8f:75:29:71:c2:a7:39:27:ff:c7:b5:79:5b:be:8d:52:
         ec:fb:ff:90:e9:e6:4a:af:2b:0f:ee:22:e2:94:fc:bf:c8:c2:
         26:ac:da:27:d0:3e:17:33:04:0a:d9:ec:bd:b3:93:d4:93:bb:
         dc:58:ee:a6:12:39:c1:39:aa:3c:09:22:77:7c:20:23:41:3f:
         d9:66:e5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----