Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File:                     De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier:          fuXI5md8LPOaClxA/MzB7WFCmOsARtvW1oLeRI89o28=
Subject key identifier:   8E:45:2A:4F:F7:6E:42:24:A2:D5:2D:18:2E:B2:21:43:D9:EE:F5:D8
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer:       /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial:       01962E996ADCA10608417142E9C1FC0AFE17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number:          08D7
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: 7XdSGfevcJJsevy7fOceWvja7nc.roa (hash: 738FMMf7Atyvq/JMYg2GIhaCbgWHQKUbxrDxkyANCA8=)
                          2: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: 41j2Rgl3i4ENq4EAkRynOrjg6yqYim3v/TYHrSeUefU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6a:dc:a1:06:08:41:71:42:e9:c1:fc:0a:fe:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=8e452a4ff76e4224a2d52d182eb22143d9eef5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:72:ff:5e:60:a3:75:9b:57:13:31:92:49:06:
                    cf:ef:10:f5:0b:61:71:cf:fb:a2:94:b9:7e:7c:ee:
                    27:1f:21:df:29:b5:0a:d7:99:f9:47:41:b6:78:6f:
                    7e:56:73:5a:01:06:a2:0f:7a:d7:b8:22:ef:ee:aa:
                    54:bb:c6:53:6a:75:85:26:cd:95:bd:c0:e8:59:b2:
                    51:54:b0:2f:80:c1:36:9b:15:c1:16:d0:1b:25:cf:
                    31:ca:01:8f:37:73:95:1a:15:9f:05:4d:21:04:88:
                    b8:c2:d6:61:a0:92:b0:f7:d5:28:71:14:08:e0:03:
                    68:3e:f9:66:2f:20:fe:c2:fc:07:b3:92:73:83:fd:
                    dd:22:f1:e9:9b:ff:f4:39:5a:47:cd:d3:cd:ba:05:
                    72:d9:d2:ad:2b:da:8d:90:eb:5f:ed:e3:26:6a:61:
                    87:30:e6:6a:bd:6f:02:e5:87:16:c9:e7:b1:bd:9d:
                    df:1a:ef:98:ae:69:3c:c4:38:a4:c2:e1:72:0c:72:
                    7b:0f:db:de:e4:7c:f4:d0:76:e0:7b:ad:0e:15:e6:
                    45:86:45:1d:dc:d3:79:35:88:2a:14:43:7a:e0:5b:
                    0c:d1:63:6c:1f:20:42:75:26:df:ee:ce:da:23:09:
                    07:8f:45:63:46:09:b1:38:e5:af:5b:5e:15:86:2d:
                    2d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:45:2A:4F:F7:6E:42:24:A2:D5:2D:18:2E:B2:21:43:D9:EE:F5:D8
            X509v3 Authority Key Identifier:
                keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:bc:a8:12:26:ce:d9:dc:9f:2b:f7:c3:a3:6f:df:42:23:e1:
         30:a4:d3:f8:20:2a:1e:18:e4:74:f6:c9:52:e6:a5:1b:e2:e0:
         b2:ae:5b:d1:4a:73:d5:c4:6a:a5:6b:b7:aa:8c:49:19:f2:e7:
         37:2b:1a:b0:50:05:c2:72:e0:59:7f:f4:d0:73:1b:c1:86:f5:
         6c:9b:be:eb:81:fa:fe:bc:26:0b:c1:51:b9:60:9e:4b:ba:fc:
         35:7d:6d:90:50:7d:6d:b8:b7:3f:52:4e:51:de:98:33:11:a6:
         7f:ff:e4:76:36:d5:d5:b9:6a:a3:01:41:f4:a4:2f:e3:71:03:
         7a:a2:03:e3:de:35:3a:63:c2:2d:c4:33:cf:20:79:27:77:87:
         df:26:0e:57:22:17:ff:7e:0c:44:ba:b6:58:51:7d:2c:cc:a0:
         2d:7f:8c:82:90:23:c6:cd:de:73:bc:43:2b:79:52:3a:bf:f0:
         86:95:56:bd:54:82:0a:b9:49:30:18:c5:73:61:5e:5e:97:19:
         9a:b3:d0:f9:e7:72:44:55:bc:97:4f:6d:c3:34:a1:eb:86:43:
         f0:9c:b3:a3:19:f8:f2:94:63:59:6c:be:a2:6c:dd:b4:5a:1b:
         53:99:3b:90:68:e0:0d:f6:11:a8:66:fc:0b:88:27:7e:7c:1d:
         1a:b3:f4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----