Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File:                     DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier:          6L2Z9A6Xhc+0f+wtma5TMwnEzZ3Qgh9z8qgRlSoSDOw=
Subject key identifier:   74:1F:95:08:DF:78:31:EA:77:34:9E:D2:08:47:93:D1:AE:21:33:DD
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer:       /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial:       01962F067777892109795BD72AA4EC8F9C49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number:          0886
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 9AG_khzlUq_52M_uwAyAT--X2D8.roa (hash: j5npHva08ps2FjnGO8hTZ3BTaOYOIDt9K8fTqv+VPPw=)
                          2: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: xTTyxtNA+AkSUnMC0RAMcik9Th6X+0QkIrb8CAvk5sQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:77:77:89:21:09:79:5b:d7:2a:a4:ec:8f:9c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=741f9508df7831ea77349ed2084793d1ae2133dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:1d:4f:f8:13:97:fb:15:2d:d7:62:5c:52:
                    60:21:ab:e3:cf:b9:96:96:7e:a1:c3:37:b7:74:d9:
                    1e:d5:d7:f2:eb:d0:f2:3d:d2:00:b7:9d:7d:82:df:
                    6b:ff:b4:43:6a:7c:63:aa:1e:25:9b:ff:e4:e0:6a:
                    3c:25:25:fa:df:07:e1:d8:3f:e8:a8:8a:fe:f8:69:
                    fd:c6:e2:cf:98:c8:b3:e4:cc:c3:22:5a:b1:49:6d:
                    40:37:be:53:97:af:07:2a:28:d9:e2:c0:1a:3e:4f:
                    23:f1:19:84:86:cb:c1:3e:a0:8a:0a:8c:c1:60:c0:
                    7c:8f:b1:b0:8f:f1:69:d1:a3:9b:da:94:6d:6c:99:
                    78:31:ff:ea:9d:c9:0a:45:6f:0b:88:7d:ee:56:09:
                    63:10:ca:9d:74:e8:62:bd:28:86:07:6a:ce:d4:ff:
                    42:0d:2e:00:2d:a9:d5:04:c2:8b:e7:69:2d:55:97:
                    26:9f:9b:8b:b4:20:42:30:43:a5:0e:23:eb:b8:71:
                    6d:ef:cc:09:3d:eb:47:95:5d:79:bf:30:a7:9c:f5:
                    d7:6b:ef:c7:b0:52:13:e3:c5:18:b3:20:b0:f7:dc:
                    ef:7f:3c:57:9b:53:1a:de:77:3c:8b:33:7c:1d:42:
                    33:2d:61:80:b8:2e:d9:05:f6:ad:2e:c0:8d:1b:6f:
                    ca:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1F:95:08:DF:78:31:EA:77:34:9E:D2:08:47:93:D1:AE:21:33:DD
            X509v3 Authority Key Identifier:
                keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:f5:88:33:d5:55:54:1c:24:f8:64:c6:6f:07:4d:9b:8e:88:
         c6:c3:ed:db:01:d6:50:ce:4a:38:67:1c:e0:3f:16:cf:e8:ac:
         14:d5:67:36:6e:d0:59:24:82:cc:f6:96:60:4f:25:7c:8e:0b:
         22:58:e0:c4:fe:61:f8:ef:95:b2:37:96:94:04:ad:51:07:c2:
         87:d1:e1:ef:ff:1b:bf:f6:41:a0:92:f6:85:bf:f2:c2:6c:4c:
         0c:b6:7c:7c:38:4e:98:a0:f6:ac:7f:f5:74:cc:70:09:0b:7c:
         18:51:b8:bd:5e:24:bc:90:cb:2a:00:6f:e6:b8:ac:a7:13:8a:
         d8:95:f0:18:98:fc:54:d0:e2:01:17:7f:a7:f9:1e:f0:6e:b6:
         f0:39:0e:06:56:bd:0b:d8:41:8d:b6:bb:16:70:53:fc:db:7a:
         d5:9f:2a:6b:b4:70:8a:b1:c6:5d:66:1f:44:0b:c4:00:12:17:
         90:68:84:32:15:78:c5:ca:77:a6:09:c8:b8:a1:af:10:67:eb:
         df:20:e4:23:29:e0:ef:2f:2c:f3:f0:8b:b5:7d:32:1a:3d:e0:
         12:23:27:ac:2d:a7:1c:d0:6a:22:9e:ec:dd:9a:e3:96:a4:89:
         a0:9f:d3:11:d2:86:48:3c:40:e1:32:d7:1c:be:22:83:c8:ee:
         9e:51:c1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----