Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File:                     DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier:          bv4HR+qjjQyENklDgx+XXUMJGXfv//hTPhs4LGdhHc4=
Subject key identifier:   74:CC:5C:45:B9:F5:A5:08:04:57:68:A4:65:3C:75:24:95:CE:A9:C8
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer:       /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial:       01962F74CFDD2DA04C023CCAA74CDDA3F4A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number:          12DA
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: 28XK2LntrxapfWOiuemErSbP0S4.roa (hash: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=)
                          2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: sWEFfseqhvIR9/qVBYGv96X+sFIrTGzCraI7NmxOlD8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cf:dd:2d:a0:4c:02:3c:ca:a7:4c:dd:a3:f4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=74cc5c45b9f5a508045768a4653c752495cea9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:b6:d9:c1:0d:3b:47:eb:91:db:fc:01:52:
                    c1:19:34:25:93:98:e7:fc:23:45:c8:e4:b5:38:41:
                    37:d4:be:8f:bb:55:e1:18:04:3e:19:c2:36:3c:3d:
                    8d:5f:75:e1:ee:c6:28:c8:ab:e8:26:0c:c9:8b:3c:
                    bf:46:1c:04:5b:d7:0c:ac:37:bb:b9:c9:6f:1a:b0:
                    60:ea:d1:34:76:17:b7:79:1d:64:c1:ba:b5:f4:c3:
                    77:ab:45:40:51:79:9a:83:e9:b6:92:56:3d:e0:19:
                    42:e6:ec:2c:2c:b5:b1:64:95:d9:f0:3b:3c:bf:f9:
                    72:db:0e:fd:c3:57:12:0b:10:d2:de:81:01:d0:4e:
                    35:c0:62:2c:13:a8:64:f5:d0:4a:8e:61:50:fb:02:
                    47:91:8f:ac:20:83:97:34:47:cf:0c:cb:22:02:b4:
                    8d:2f:2d:d9:01:e9:e2:80:ea:80:4a:c1:eb:68:4c:
                    28:25:ad:73:37:5c:7f:07:67:4f:98:99:e6:0b:d5:
                    3c:7f:75:40:e6:cb:8a:31:d9:84:7b:6e:64:d7:42:
                    7f:ba:c1:7c:68:44:e8:27:7f:57:51:e8:2e:bc:ef:
                    5d:74:bd:8a:73:d7:a7:fc:f3:be:a7:af:94:da:4e:
                    31:73:e3:d7:b5:47:27:48:bf:b9:94:b4:68:75:05:
                    72:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CC:5C:45:B9:F5:A5:08:04:57:68:A4:65:3C:75:24:95:CE:A9:C8
            X509v3 Authority Key Identifier:
                keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7b:4f:d3:b4:33:8b:e0:53:e8:8e:b8:a3:6b:3a:2e:b0:d7:
         5b:bd:4b:a2:a1:6a:8d:21:da:90:ba:b6:67:f8:21:72:e6:51:
         2e:5a:ea:eb:d2:e0:33:43:7e:fb:6d:ae:79:df:40:e2:a1:df:
         d5:a2:90:a4:36:2f:47:b2:b5:99:8a:30:4f:2a:fe:82:1c:d2:
         d5:46:a5:9c:e0:4d:29:35:87:90:f9:c3:32:34:5b:a4:4e:ed:
         75:5a:08:77:8b:39:31:9c:f7:d9:29:81:e9:4a:04:8f:c0:c5:
         c1:23:83:16:12:6d:2e:39:b6:0f:fa:fe:93:fb:8b:c3:07:ba:
         38:c2:a0:1b:42:c7:03:6b:7b:2b:97:e1:b2:df:5f:c7:c4:37:
         9f:6d:0e:6a:29:a2:3e:23:14:d3:6a:ad:29:58:e5:77:ff:e6:
         cb:7b:40:2b:1b:e2:21:2e:65:9e:d4:75:a2:1d:ab:14:38:84:
         99:6c:ee:91:fa:15:05:b4:4d:d5:dc:97:af:87:b3:62:37:de:
         94:af:5f:3a:68:6d:68:e3:20:e7:fd:0c:f5:64:4b:a8:1f:cf:
         d3:96:b5:07:6c:b1:91:57:97:43:11:43:95:91:e2:58:a7:b6:
         3b:f5:5b:09:72:5b:b2:16:b5:2d:25:db:26:a2:93:c7:a8:fe:
         96:f8:ac:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----