Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File:                     DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier:          jVdMkqf78+kRoYWWrDmPQ1CtPlXcEESrZ7seJAgwOrc=
Subject key identifier:   00:EC:91:34:D0:5B:31:99:93:AF:F5:22:F2:A3:38:69:FB:6C:96:00
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer:       /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial:       01962F74681BA7F175484FCA351A96EF09B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number:          0C08
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: 0CytvhJudNwvmE_qIywCHCo6NeE.roa (hash: 88aZ7TRUqfxW9sX6erHIjwQ5v2GdVw5BH0X6fcp/TYs=)
                          2: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: uas+1cBQ+wszlU36B6+Rafyrv1l1GGznrUOEhmhzOzA=)
                          3: KrKK6KlWrbwro0xZGJbZRZAIMbY.roa (hash: mLgmMH2GpuH6gYsfQafOR8wiybY64hDgIvWRNRviit8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:68:1b:a7:f1:75:48:4f:ca:35:1a:96:ef:09:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=00ec9134d05b319993aff522f2a33869fb6c9600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:7a:98:70:63:ab:de:43:de:40:8e:23:92:
                    2b:0d:c9:a7:df:b5:d8:c3:b5:29:dc:51:db:c3:a9:
                    3f:43:06:a7:44:6e:0c:e4:50:7d:b6:a6:39:83:57:
                    cc:a2:1a:6f:11:69:30:8e:98:4d:c3:44:e0:bb:c0:
                    38:ce:d1:f0:21:5b:2e:63:0b:1c:f8:c7:4f:4b:3d:
                    ce:fe:3e:98:00:c5:09:cf:de:ad:2b:0d:34:62:ee:
                    ef:62:00:4f:d8:ff:78:9e:b9:a0:13:a9:85:79:31:
                    68:be:bc:c1:59:3c:63:b5:7b:b9:38:14:0b:90:75:
                    58:e6:86:6c:c4:26:8c:be:bb:fd:e9:a8:9d:11:19:
                    b2:0e:2f:ed:fa:3e:c9:c8:fd:df:cf:ff:87:79:44:
                    9b:34:78:11:0b:39:fa:1c:47:ff:25:21:3f:bd:f6:
                    42:cf:91:e4:e8:1e:5d:97:4f:c2:21:1d:f7:1f:c1:
                    4b:95:10:d5:58:8c:f9:fc:03:50:02:06:91:0d:74:
                    1a:49:47:5f:bb:54:36:d5:d3:ef:aa:83:3f:29:48:
                    b0:61:2e:f6:7c:6c:2e:43:18:1b:46:b6:d0:6e:d9:
                    47:a6:bc:7c:c5:df:97:e7:03:18:5a:f1:9d:97:d4:
                    79:f9:09:f8:ee:78:f8:02:f3:bf:27:ed:7d:40:b7:
                    ab:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EC:91:34:D0:5B:31:99:93:AF:F5:22:F2:A3:38:69:FB:6C:96:00
            X509v3 Authority Key Identifier:
                keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:fd:b1:b4:30:f1:c6:7f:70:49:fa:2c:d1:45:c1:5d:a9:17:
         45:10:cd:e6:5b:62:89:e1:f5:eb:1e:bb:90:d8:b4:28:89:7d:
         c0:d1:12:3b:5f:18:24:0a:5c:98:1e:2e:fd:8c:e9:91:99:38:
         e3:7b:e8:d1:fb:a6:7b:92:06:4c:da:ec:35:96:5b:66:2e:a9:
         64:56:06:74:29:00:14:9b:98:13:c9:bb:4e:17:23:e6:0d:44:
         fc:08:71:5a:c2:5e:cc:33:c9:22:76:62:64:a5:46:5e:fc:58:
         20:98:d3:c6:78:12:cd:ca:5d:be:a0:8c:65:fb:89:df:a4:f9:
         a5:47:33:f8:6a:9a:83:dc:9f:77:28:55:b9:1e:68:75:c2:83:
         43:1a:51:b3:1e:a0:d1:4c:7c:73:78:be:f1:5c:f7:48:12:df:
         e3:76:55:0b:2b:1f:73:59:f2:dd:d3:33:bb:64:0a:48:2a:b9:
         39:d1:68:61:83:ea:28:df:14:70:fa:0f:9f:cc:58:92:f7:6f:
         c1:ab:71:1e:76:e0:9a:09:68:7e:e9:c2:74:43:cc:42:ad:4a:
         94:4c:54:ba:70:53:38:92:8c:09:22:44:1f:2d:2f:a2:65:d0:
         40:2f:63:8e:04:7a:43:f3:33:2c:d8:27:d9:e1:1d:7a:cd:9b:
         7d:85:a8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----