Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
File:                     DigOW_CXDHM8w0vBvnkmdZrDHe0.mft (raw, json)
Hash identifier:          m0oQZcttSC9KRXnmXFjBEY4AZK77fxtZHSe8OjFI8gY=
Subject key identifier:   82:99:9C:12:78:E1:AC:4E:03:FC:0E:CD:53:11:ED:FF:1B:85:1A:4A
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Certificate issuer:       /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial:       01962E991E100C05EC805B77DB359CB62F84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
Manifest number:          1201
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: DigOW_CXDHM8w0vBvnkmdZrDHe0.crl (hash: GTaeiSxio0mhRHIWWZmJ4wM3rfiunw7FdOhQTIOf+w8=)
                          2: nitfhwT5zdpxb50hXlk4jgWzdQE.roa (hash: Cnmglk4tBEqztiio9IkWbUek+XEbAwr0Bjp+MAHYUSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1e:10:0c:05:ec:80:5b:77:db:35:9c:b6:2f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=82999c1278e1ac4e03fc0ecd5311edff1b851a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7c:af:8a:37:17:b5:43:35:b3:0e:30:b6:59:
                    38:66:73:12:41:5a:76:2d:dd:18:ac:19:91:57:f4:
                    b4:be:bd:3a:09:84:29:17:c9:3b:bf:5d:ee:6c:72:
                    fe:26:ec:cf:1e:4f:bd:d4:31:d9:0a:39:df:16:95:
                    fc:ee:31:a0:4a:14:fa:89:88:fa:25:02:73:1d:1d:
                    de:0f:6b:ed:07:a3:c1:c5:e1:93:f2:4e:65:54:d8:
                    31:35:40:b3:37:ae:d2:86:e1:85:dc:b9:ed:0c:94:
                    47:84:20:07:f2:63:5d:c5:a4:5e:c6:99:06:f4:d5:
                    5a:74:79:13:12:44:ee:d6:ce:c8:d7:26:ba:70:c8:
                    8c:d3:9e:e6:e6:c6:24:bd:73:09:45:4b:60:f9:15:
                    c0:fd:8a:ca:d2:2d:95:80:0d:8a:24:1b:ee:cf:d1:
                    f6:bc:4c:b7:62:ae:2c:2d:f1:00:59:20:e7:f5:c5:
                    b6:43:f7:e7:9e:89:69:86:72:d2:88:23:a3:8a:21:
                    2a:a0:9b:6e:2e:0a:75:40:b7:32:0d:3b:0a:f3:7a:
                    68:9f:22:c0:8f:ca:e2:49:8b:53:49:8b:84:db:63:
                    0f:1a:07:a8:f1:99:bd:22:33:79:51:1e:04:36:e0:
                    f9:c7:4d:98:d3:0f:50:48:10:4a:8f:a0:18:63:eb:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:99:9C:12:78:E1:AC:4E:03:FC:0E:CD:53:11:ED:FF:1B:85:1A:4A
            X509v3 Authority Key Identifier:
                keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:02:21:ad:7a:ec:77:af:fb:e6:5d:18:34:cd:f3:21:e9:c2:
         62:d1:bc:5d:0e:40:bc:ac:55:d8:02:06:ed:ec:00:d7:89:e2:
         81:f9:cd:71:65:6c:54:72:26:cb:6b:bc:72:ac:65:3f:93:77:
         b6:d3:d7:27:81:eb:b1:85:bd:b7:4b:8a:7d:2b:38:0d:e3:09:
         8e:d3:69:c4:cc:04:14:04:38:0a:e0:86:7e:54:f4:0f:89:59:
         99:b8:e1:df:f0:09:21:f6:3c:9b:f2:05:a2:51:d2:6b:82:72:
         63:f2:28:55:19:77:3c:b2:9b:27:e1:1a:6f:70:93:f9:f2:2b:
         7d:b5:d5:aa:1a:80:58:5d:0c:91:71:13:c4:15:e0:92:55:cd:
         a7:bc:87:7f:e7:df:8c:65:36:24:75:9d:00:94:ba:23:c2:17:
         43:b8:49:32:f0:97:a0:34:8a:06:9a:09:0f:01:c6:3d:90:43:
         e0:99:61:3f:f9:6f:39:f4:d0:4c:1d:9f:9b:43:c1:a8:cd:32:
         2e:a5:12:27:d1:52:26:b0:d8:6d:be:25:d5:30:16:a9:17:70:
         55:00:12:4d:cf:87:87:cd:25:8f:d5:d7:ff:f7:38:e1:33:77:
         df:99:31:68:0a:91:22:bc:d2:05:54:c4:b2:36:fb:f0:2e:60:
         b7:53:09:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----