Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File:                     DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier:          DzrEacl+CWhfArVajJi7+1rWRwJLcZvOtV3bCvnCWzA=
Subject key identifier:   F0:FD:58:13:36:3D:64:55:3F:D6:F4:0C:EE:38:33:38:AE:68:FB:E8
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer:       /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial:       01962E61B275F60CB9E906F94538E66D19DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number:          0DF6
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: HZPPwE5JtEoc0OWbtz6Qb1E7xSKxbh2K49DdvT/Fi+I=)
                          2: KSFH2iX9DZf8Q-50ramqag80LYo.roa (hash: N6tvxRZU5FhCXYfq+gSSvyO+LQEuT5uPy32KkqFgDN0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b2:75:f6:0c:b9:e9:06:f9:45:38:e6:6d:19:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=f0fd5813363d64553fd6f40cee383338ae68fbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8b:ae:d3:dd:73:a1:c8:08:d9:d8:2c:2f:30:
                    88:cc:f7:0d:ff:9a:0d:a8:59:1a:d6:e8:13:71:36:
                    71:ae:0f:47:d6:b8:e8:5e:b1:fa:b3:ea:a3:41:c6:
                    c4:9a:30:20:e6:85:b6:8f:64:03:87:52:ed:62:fe:
                    9a:4e:03:23:a7:7e:e9:cf:c3:0d:3d:a6:17:c2:57:
                    61:55:0a:54:51:c5:c3:b9:6d:5a:82:e4:a0:b8:0e:
                    27:99:fa:b5:5f:9f:ff:a0:39:ac:38:58:60:2e:35:
                    b5:83:95:fc:0e:e1:a5:9b:84:d6:42:9e:fb:7b:2f:
                    2c:13:1d:4c:1d:3e:36:43:00:b2:01:e1:83:4b:ff:
                    46:38:26:61:b8:79:28:6f:ea:e8:11:f3:81:28:1a:
                    5c:fb:f8:e3:a4:2c:6a:87:97:54:bf:8b:9e:81:2d:
                    4e:b3:05:4a:0e:c6:18:06:49:96:1b:fc:b6:c7:96:
                    43:0f:87:1a:1f:e5:11:22:3b:1a:19:8a:2f:01:c5:
                    cd:2a:89:8a:6c:2b:b8:b7:22:88:81:6c:ce:c3:fc:
                    f6:23:e9:00:3f:a2:f4:0f:85:00:47:a4:89:e0:d3:
                    e4:68:11:70:bc:71:91:e9:d4:ad:b3:f4:ff:1d:97:
                    55:40:6d:26:c9:bb:dd:61:51:49:70:58:7b:8b:0c:
                    a1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FD:58:13:36:3D:64:55:3F:D6:F4:0C:EE:38:33:38:AE:68:FB:E8
            X509v3 Authority Key Identifier:
                keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5a:ac:fb:48:b7:b2:c8:55:39:37:a1:7f:b9:9f:ee:79:09:
         d2:70:6d:03:67:04:0a:ac:f4:c9:58:16:5a:53:39:fd:a7:69:
         b4:96:32:93:d4:a7:3a:d6:9d:38:f9:fd:1c:69:74:36:ec:a1:
         51:12:cf:61:b2:6b:e9:db:ae:3f:27:1a:8b:59:ff:e8:87:41:
         40:c6:70:57:37:82:d7:1f:08:07:fe:3a:d9:43:6f:f0:35:d0:
         b9:59:1b:6c:c6:a4:0f:5f:bf:0b:0e:28:b7:d0:10:8f:f6:7b:
         c7:80:5c:6e:52:5b:da:28:b9:96:ac:a8:04:4f:ca:0b:38:67:
         01:10:99:52:cd:e6:db:68:9a:43:5a:48:dd:20:ab:f0:75:ad:
         28:22:eb:5e:f9:46:b1:ee:ad:fe:34:ab:f5:51:ba:24:5b:1f:
         86:53:64:dd:64:81:7b:de:c7:12:82:5d:50:c5:3d:39:99:05:
         0c:ef:b0:ee:0b:64:9d:a7:99:f0:b2:10:db:db:b4:61:fd:57:
         03:2b:32:02:12:ab:0b:a9:77:e8:78:2b:94:1b:fc:33:0f:13:
         31:83:de:b5:b8:e1:df:4b:dc:43:52:9a:8f:7a:e1:c9:59:3d:
         44:26:26:44:bb:63:08:f9:98:57:d2:5b:b3:2e:f6:fa:48:34:
         18:4e:39:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----