Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
File:                     DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json)
Hash identifier:          gsUMQtFfDp53nP/P8ftddzKxqFu9iGiu5LutSh7RKsk=
Subject key identifier:   88:FA:01:38:18:3E:74:7C:A7:A5:D2:33:6A:78:24:96:14:33:A8:FA
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Certificate issuer:       /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial:       01962E61B253AD47B4DC198B8AD338ED6D7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
Manifest number:          07F9
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: Pe8vfnbE1tMCJbg9V9sTH/uFbbXmujwYkPLNEAJ+AiY=)
                          2: YHsr6f8s8uWfm3H2AkqO-6gTKlA.roa (hash: PDEXeDLtvF2svWu3SCyyV71qYzP5SqM0o8kxhwdjSR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b2:53:ad:47:b4:dc:19:8b:8a:d3:38:ed:6d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=88fa0138183e747ca7a5d2336a7824961433a8fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f3:02:8b:1c:c9:57:35:cf:b5:1c:0b:2c:5d:
                    1f:e3:39:0c:91:e4:e8:22:9f:5f:9a:2c:33:59:59:
                    73:7a:09:72:e7:8d:dd:a8:2c:1e:0f:bd:f7:c1:16:
                    14:eb:88:fb:dd:e8:e7:b0:39:b8:01:05:4d:87:c7:
                    e0:46:30:e3:79:f6:31:d0:a8:1a:15:02:23:1a:eb:
                    26:12:36:3a:5e:27:a5:61:d2:6d:c3:38:90:19:6f:
                    2d:8e:86:95:43:63:64:2a:88:5b:5a:2a:b2:a7:de:
                    2c:56:0b:06:be:12:65:e4:79:d8:62:ff:27:2a:d2:
                    f8:96:8c:b7:52:6a:cd:92:df:7e:4f:05:3e:16:23:
                    6a:7e:ab:e7:ef:f7:21:21:d6:4d:5c:82:82:72:f5:
                    41:ea:00:98:3d:be:b8:e1:43:41:1e:69:d1:0c:aa:
                    0d:9f:c7:d4:08:e1:22:d7:fb:33:ef:08:33:d6:ec:
                    f8:2e:24:e0:94:ae:26:5c:03:40:1c:c8:20:46:6f:
                    b5:e7:28:74:3e:98:3f:23:9f:ef:27:fb:66:69:09:
                    a5:49:ce:44:a2:30:75:11:29:85:79:8d:86:55:79:
                    08:34:76:e4:e7:cc:47:5e:7d:ee:da:2d:54:13:b3:
                    fe:b9:7b:4d:ad:c3:67:8c:92:94:ef:ba:f2:38:d4:
                    87:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FA:01:38:18:3E:74:7C:A7:A5:D2:33:6A:78:24:96:14:33:A8:FA
            X509v3 Authority Key Identifier:
                keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2e:fe:ee:2a:d5:6a:c3:c9:34:b0:e7:17:4b:10:1c:e4:c0:
         46:b2:20:ff:ed:99:c6:bc:48:46:93:89:72:cf:ad:9c:cb:27:
         2f:b0:f5:95:43:14:15:0f:f0:bc:88:df:6f:21:59:f8:ec:30:
         8f:64:f9:87:26:cb:4d:da:25:7b:9b:b0:a6:7a:3a:65:23:4a:
         86:74:a1:3a:83:73:66:47:e8:14:0a:19:61:43:fd:41:7e:cb:
         54:0d:7c:31:95:31:05:64:6b:2a:43:66:c8:3c:76:46:f4:92:
         51:1b:f0:4f:19:81:45:92:08:31:99:41:7e:dc:c0:73:e8:c5:
         f4:3b:e1:42:b3:78:43:2c:24:46:14:69:4e:17:60:2b:00:94:
         48:71:8d:7b:41:9b:84:3f:b6:ff:da:9a:52:a5:b9:5d:e3:a4:
         84:13:6b:e5:18:0a:b5:8e:dd:8d:2b:45:71:2f:7d:bc:22:10:
         f5:11:87:e1:59:50:b8:30:52:8c:f7:7a:1b:86:42:1e:a5:dc:
         0d:e3:ce:4b:6e:b7:c6:f5:e5:8c:28:d5:bf:d9:0b:6c:a3:2e:
         55:f4:b4:51:06:9c:14:28:92:78:ff:67:e8:08:ae:fb:c8:af:
         f1:c6:d9:70:a9:80:36:4d:8d:2c:e1:c6:7a:ad:e7:1f:70:25:
         92:2f:6d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----