Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File:                     0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier:          q8ryKK2dr1Cp8lxZ8gZkbs43HemoxxTGDf0BPBodUIU=
Subject key identifier:   35:A0:4E:8C:8B:65:14:C4:F1:6C:55:2E:A7:65:5B:BC:D0:63:ED:7C
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer:       /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial:       01962F06E68150FC2F71AC1683C859D266F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number:          0DC2
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: wEkYLGVFXc6GbJHWco8L5pgc97uAwecQLQrk2ntGYmE=)
                          2: H6uSFDtLoI4YQD04FkS4VSFpIhw.roa (hash: hv1JnxHOhWB0hv+54xUCZyY9gAEBPU8rdk2117x7KVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e6:81:50:fc:2f:71:ac:16:83:c8:59:d2:66:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=35a04e8c8b6514c4f16c552ea7655bbcd063ed7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:22:3f:8d:7a:8c:8b:db:f7:35:7c:61:98:2d:
                    cb:d2:40:5b:c1:a4:a4:a4:b0:c6:5b:e2:86:25:b7:
                    69:a1:60:1e:0b:17:65:80:da:0a:82:36:35:13:aa:
                    7d:ab:08:2a:32:d0:5b:86:60:4b:a6:32:6e:4e:ef:
                    e5:84:9c:8a:28:26:99:22:03:4e:ef:e6:3b:48:07:
                    6b:9d:01:85:71:81:5b:1d:52:1b:c5:1f:43:8b:cb:
                    76:32:e9:c2:84:7e:74:ff:84:42:03:6c:35:06:e2:
                    f2:1d:02:1d:85:81:fc:4b:43:cb:f4:5d:b0:38:6f:
                    16:4d:21:42:ae:58:e5:13:2a:4b:de:00:46:3d:db:
                    85:4f:d5:6b:b1:2e:fd:0a:d0:b4:94:43:e1:ad:48:
                    b4:7a:56:d9:44:3f:76:e7:95:98:46:0c:81:85:83:
                    d0:c2:03:31:8a:67:4e:34:be:51:9e:f6:a8:7e:5a:
                    dd:60:56:d6:34:0d:10:f1:f8:ab:74:b7:f1:fb:1f:
                    98:c3:e4:2d:ed:68:0c:2d:25:78:65:27:af:94:8c:
                    22:b1:0c:7b:59:cd:96:34:3d:51:5c:22:e7:73:f1:
                    11:f4:24:c4:5a:d9:5f:cc:61:f4:06:3f:78:ba:75:
                    0d:e1:48:c9:b6:67:c9:15:78:d9:2c:56:09:df:89:
                    ec:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A0:4E:8C:8B:65:14:C4:F1:6C:55:2E:A7:65:5B:BC:D0:63:ED:7C
            X509v3 Authority Key Identifier:
                keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5c:ae:4e:86:41:f2:39:2d:e6:0c:3a:9f:38:2b:fe:1a:f5:
         dc:3f:e9:e9:3c:98:12:8c:34:4a:89:cd:da:6b:59:4e:f4:0b:
         bf:f4:e3:e8:cb:5f:d7:6a:ef:7c:61:b5:d2:16:84:b9:7e:a1:
         6c:ad:51:43:ac:95:59:4a:82:d2:bc:55:c3:76:85:76:0b:26:
         ca:d1:89:6a:02:e5:64:71:52:c5:55:22:fa:72:9a:ab:9d:03:
         ee:71:e5:9c:ab:f0:a8:dc:3b:98:43:64:9f:df:26:03:a5:29:
         48:3c:08:f4:16:aa:43:1b:08:a4:f5:bd:c4:5c:52:a1:cd:65:
         37:da:cd:18:ef:1a:5f:6d:58:a1:6d:d3:ab:a7:51:e3:cd:07:
         ad:8f:25:8e:45:f2:00:f0:8d:20:bd:df:bc:20:06:d6:36:5e:
         ff:0c:36:e7:ba:e2:e3:c5:c2:e3:07:04:8a:6f:2a:fa:c4:ca:
         b2:44:52:a8:57:5c:ab:32:cc:d6:53:b9:ea:d4:f8:53:b3:27:
         be:93:9e:21:47:40:7f:8b:d1:7a:a7:34:2d:35:a9:2e:da:1d:
         4e:0b:ef:14:c8:35:22:93:2e:08:62:05:bb:b8:5a:c9:d2:b3:
         06:e0:7f:fc:bf:cc:0c:03:b0:26:b0:c4:b4:4e:d7:c2:12:a3:
         4a:75:d9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----