Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File:                     DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier:          2/prFT9MjLiBVy130EbXMAmEjvnbp+AXROM8N6HrPyE=
Subject key identifier:   CC:AE:0D:42:1D:BF:B5:A5:AF:A1:16:C1:1B:EB:17:91:53:89:0B:EF
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer:       /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial:       01962E2B4454AE2C61DA965BCAD96DB218B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: efGb3laes4UolonbNtLFxDm+mDJpk26XM3lJQIpEIk4=)
                          2: Z6E4tQnRvUpfPcdYuFNVxcJ0ync.roa (hash: xKAWINx5skT5zUOU5FUOicB7VLSOKSuOkc+JGT8/lwg=)
                          3: icdzN3903U-G6DI4zKp6RZE4flA.roa (hash: kshaHbPYaGNmmaMCwtIlRpH9RaK824cfmas4wivc8R4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:44:54:ae:2c:61:da:96:5b:ca:d9:6d:b2:18:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=ccae0d421dbfb5a5afa116c11beb179153890bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:11:cf:a3:55:79:f4:99:24:45:5f:93:90:
                    cf:78:11:24:e3:95:41:55:a6:61:07:54:46:7b:38:
                    9d:2e:dd:a1:b8:c2:8a:9d:38:ed:13:a3:d2:a9:54:
                    d3:84:19:65:fc:81:02:aa:fe:b3:39:5f:c4:6a:03:
                    6d:04:54:58:44:4a:eb:73:5f:70:91:f4:ab:45:62:
                    ed:84:57:19:0a:14:2b:b7:49:33:7f:87:32:bd:20:
                    67:14:b9:45:f4:d4:8c:a4:f6:d7:4c:a1:ec:60:b2:
                    64:59:df:8c:5d:d1:c9:61:14:64:cb:76:05:6e:4d:
                    9e:6d:17:fd:25:46:38:f6:b7:52:5b:85:ec:f0:13:
                    b0:ab:fa:99:dc:f4:87:7c:52:79:44:a5:2b:27:79:
                    d6:e9:bc:27:ca:e0:56:11:ca:a9:24:0d:8a:d7:ed:
                    e8:44:3d:f6:1f:4b:68:e3:12:73:9d:d8:7b:7d:6c:
                    3e:34:bf:a5:14:5f:73:67:55:65:d5:df:23:55:b8:
                    9e:a1:de:2e:04:d6:fe:72:c6:11:68:72:18:ec:92:
                    67:25:12:a1:45:00:f2:7b:f4:fe:31:ab:a5:35:0e:
                    37:59:73:c2:01:e1:40:2b:89:af:ef:92:08:fe:56:
                    75:73:ff:9f:98:a4:93:63:5c:78:e1:16:4b:f9:b2:
                    55:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AE:0D:42:1D:BF:B5:A5:AF:A1:16:C1:1B:EB:17:91:53:89:0B:EF
            X509v3 Authority Key Identifier:
                keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:6d:09:4d:e6:13:36:a7:a8:c9:85:bd:3b:86:c8:80:e0:33:
         80:64:27:4e:03:49:fb:fa:66:0e:18:65:1f:ed:30:96:07:1a:
         48:bc:46:91:17:aa:ff:f9:c7:81:2a:33:9c:06:eb:00:b5:b1:
         e9:cf:b2:95:b0:1a:a9:f6:81:f0:ab:30:09:ca:76:56:46:84:
         08:54:ac:60:66:51:d6:f4:7f:f5:06:e8:32:8d:30:40:34:93:
         51:62:db:b1:2a:a4:06:59:e2:45:49:98:f9:8e:5f:15:71:43:
         60:1f:28:12:bb:6d:bd:48:b6:c6:98:12:ad:f4:4b:90:20:72:
         79:36:a6:78:94:48:32:b1:9c:43:a8:7f:48:3f:1e:e2:73:69:
         20:ff:ba:4e:21:92:46:07:f3:f3:1b:5e:68:c7:87:6d:84:46:
         9d:70:74:5b:36:ca:30:6f:57:96:8e:27:a3:a9:4d:24:58:58:
         43:37:9d:c4:b3:a8:3f:f6:6d:d5:ce:e8:e8:2d:3c:d6:ab:f3:
         57:0f:1f:47:e0:c7:46:35:d7:0b:42:2d:4b:e6:a8:f1:19:70:
         31:a3:4a:32:dd:b3:8f:8b:50:41:53:42:03:df:0a:88:37:12:
         fe:a5:97:be:f1:42:bf:b8:46:36:4e:eb:15:18:b0:90:08:fb:
         23:a4:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----