Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File:                     0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier:          wk+nczbKyeOsJFMpmg8Mb2EF2Q+kVFIvZPCx0ue/Slo=
Subject key identifier:   E0:57:AD:43:0E:09:BB:66:8F:07:DB:F8:CA:9B:5D:5D:3D:80:56:12
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer:       /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial:       01962FAB749A812D861A18AAF0E50964F6E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number:          0FD6
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: d+FoA7h+ohvgxrSzN3LgFu+JBPE6K4n2stCpE0zaTNk=)
                          2: dylc3WZzrjgV2VB-T70ps5y7_v8.roa (hash: CjiSp/7ghqmIWPlGrqN52h+3zV23QhuVF2kvnW7CFVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:74:9a:81:2d:86:1a:18:aa:f0:e5:09:64:f6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=e057ad430e09bb668f07dbf8ca9b5d5d3d805612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6e:d4:50:cc:28:68:3e:60:8e:25:e2:c4:80:
                    1b:98:a6:c6:db:59:eb:fd:38:82:ef:61:35:31:68:
                    54:f1:4e:8e:70:6e:fe:da:69:08:32:ff:86:87:3c:
                    33:81:55:84:b1:02:93:69:80:39:3a:1a:47:18:4b:
                    34:07:48:da:df:d0:d6:b2:60:87:12:42:32:52:fa:
                    cc:e9:93:03:c3:4f:cd:c5:41:c4:76:40:75:01:38:
                    39:1e:ff:6f:9e:03:cf:a9:ee:6e:f5:aa:83:2f:ef:
                    37:f6:11:d8:f7:bb:0a:20:1f:80:6d:46:2a:04:03:
                    47:8f:76:8f:6b:f8:e5:56:e7:b6:59:6d:05:e9:6a:
                    11:bc:74:4a:f8:ea:bd:ca:83:c9:dc:08:2a:13:7d:
                    a6:0f:60:1b:ea:f9:6f:df:82:43:07:29:97:03:a5:
                    28:f0:f0:bc:86:db:36:59:14:5a:23:a0:e7:f5:c3:
                    76:70:0c:ae:79:7f:75:72:ff:81:05:dd:b6:cd:38:
                    0a:c6:a9:f8:49:0d:d3:bf:20:aa:46:0a:00:bf:32:
                    4b:04:db:fc:d6:22:91:73:27:c4:31:1e:72:a8:c7:
                    a0:bd:ea:76:22:d8:89:70:ea:4f:53:c8:58:a3:50:
                    07:3a:68:6e:56:58:a4:90:a3:63:e7:70:1d:b1:b1:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:57:AD:43:0E:09:BB:66:8F:07:DB:F8:CA:9B:5D:5D:3D:80:56:12
            X509v3 Authority Key Identifier:
                keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:00:dc:28:92:2c:dc:6c:38:16:60:9d:4e:25:eb:80:ce:8f:
         5a:fa:04:d4:8d:ca:e8:98:a2:0a:5f:23:b6:7a:9e:39:be:b2:
         b1:b6:3e:41:13:e0:71:80:a1:7d:8c:78:08:de:17:f9:63:f8:
         0e:4a:f6:72:4b:82:6b:49:50:a6:9e:1e:6a:8f:53:51:4c:4c:
         44:12:d7:32:cd:64:05:89:48:57:3f:e1:4b:e5:3e:4f:f9:50:
         67:78:53:38:6d:14:06:92:a2:58:fe:e8:d6:b8:cb:74:c2:41:
         c4:0a:4a:41:16:b4:6b:95:b9:76:f4:0f:b5:9e:3e:ce:b5:32:
         9b:20:d9:3d:f6:21:7d:78:ca:b1:3d:c7:a7:dd:be:a1:a6:c3:
         ed:de:8b:d8:bf:c1:c8:25:78:03:2e:c7:5e:35:33:7a:fb:ef:
         77:f2:25:4b:26:69:db:9a:1a:09:17:11:77:f9:49:5b:52:08:
         f0:0d:86:18:7f:fd:76:bc:a2:8e:66:0e:72:30:32:f4:04:56:
         de:ee:b1:7e:74:b0:e0:cc:69:14:42:78:98:7d:f9:b2:03:8c:
         97:5c:28:94:0c:dd:be:88:3b:05:bf:cc:c6:4b:e1:bc:6e:50:
         f4:fc:65:56:05:12:55:78:b6:e3:0a:da:72:bc:67:e3:88:7e:
         0d:55:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----