Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File:                     0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier:          /thNnDW34UEBSAHncCu0/ik/UL0mZv4pK+cqUxjO8/E=
Subject key identifier:   A0:B4:37:52:46:47:DD:B3:0A:07:CE:55:31:36:13:BF:D7:91:DB:D8
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer:       /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial:       01962ECF8243060904E51593DBECD3BD51FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number:          05F7
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: ua7aFs5TYp6yl83lvWBqp75zk4ycPYUsSaw4qNOObig=)
                          2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:82:43:06:09:04:e5:15:93:db:ec:d3:bd:51:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=a0b437524647ddb30a07ce55313613bfd791dbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7d:c8:d2:22:27:53:3b:57:0d:f0:16:fc:86:
                    12:39:af:5d:86:d6:8d:42:28:ef:d9:0c:71:8c:c4:
                    56:eb:12:9b:3d:49:cb:a7:2b:9d:e8:f2:f6:6c:1a:
                    1b:1f:3c:aa:59:df:cb:f5:2a:3c:a1:69:f9:6d:d3:
                    f9:ef:4a:7c:bf:21:ff:08:fa:df:63:1f:12:cc:b6:
                    d9:52:c4:78:98:da:a2:c3:37:80:fb:9e:22:64:98:
                    99:fc:52:29:3d:74:eb:a1:6a:49:a6:58:51:cd:9c:
                    87:e7:7d:37:ac:d6:00:d6:ad:d4:53:5d:d9:97:cf:
                    3b:7c:3e:39:e4:58:ee:1e:12:08:5c:97:a8:ad:26:
                    c1:6c:22:9d:79:70:f3:1f:1b:f5:4f:ec:bd:80:43:
                    12:ce:98:38:93:0f:38:ff:d5:50:6b:b3:80:05:d7:
                    71:d6:90:30:10:49:60:40:49:47:b4:00:1e:5b:e4:
                    e4:2c:ab:60:c3:72:d4:bd:fa:b9:bd:40:35:a4:1c:
                    81:41:ed:a1:f3:9f:9a:3d:fa:30:20:d2:20:87:b2:
                    75:67:36:9b:c4:8f:83:a1:10:fa:c7:19:94:02:f8:
                    9a:af:c8:3b:6f:10:83:24:22:0a:71:8c:bb:8b:6d:
                    91:41:1a:59:58:24:75:98:2a:8a:65:3f:9f:bd:c4:
                    8e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B4:37:52:46:47:DD:B3:0A:07:CE:55:31:36:13:BF:D7:91:DB:D8
            X509v3 Authority Key Identifier:
                keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:fc:c6:4f:7b:ab:e8:46:ae:31:45:eb:95:ad:de:df:db:8d:
         6e:c4:cd:1f:5f:c8:8c:ce:83:4a:df:70:2a:46:48:95:c1:59:
         a2:22:75:d0:e3:ef:95:81:06:5d:57:aa:1c:fa:6f:32:56:1d:
         a7:1e:70:a6:9e:6c:db:9c:dc:b1:88:d0:9f:58:94:99:58:1a:
         e4:3b:82:10:48:30:18:e9:7d:6e:01:06:05:2c:5b:63:69:ab:
         70:61:2e:2d:67:6b:87:02:70:b2:8f:08:57:8e:54:c9:68:f4:
         fb:8c:7a:ed:a2:75:37:bb:b1:db:94:a8:a8:81:b5:ba:ed:48:
         43:ff:6d:bf:72:9c:a5:10:92:0e:38:4c:55:01:70:fa:92:53:
         54:b8:dd:54:d8:99:d9:0b:e3:b9:0b:58:76:8d:e1:35:89:be:
         1c:ff:d1:6c:bd:44:bd:88:01:5f:39:10:59:da:c6:11:17:11:
         2a:d2:76:7b:10:8e:6c:3a:42:18:05:cf:0c:0f:7d:57:a9:62:
         b2:67:a4:a3:a2:28:69:0a:0a:38:bf:9f:a7:af:94:3d:f6:8e:
         9a:c1:ba:79:c0:23:47:c8:ad:c8:26:b1:99:bd:05:8c:51:1b:
         f2:cc:88:38:5d:28:7f:63:58:6d:84:ba:0e:2f:b1:3d:57:b7:
         c9:2f:ca:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----