Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File:                     do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier:          OrUOXDTLEkqob52Ft0pmovMjAUs908W4bXA0LSwEiTY=
Subject key identifier:   B3:1F:98:07:A3:A1:04:29:CB:85:0A:CD:68:02:C0:A7:3D:B9:92:31
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer:       /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial:       01962ECFAAD5C712324DC30F218FE379E2FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number:          0BC1
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: KH_j-0tZP7kZGa_RGAqb8KjeOKE.roa (hash: nJQFit94GD/cIbI8GNPP+c6lmHYIPdofJMVeQt5hkQ4=)
                          2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: Me/+cHPJRWgWQUyV1fuFyAl84EpeXbxKIDt0l4n8lFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:aa:d5:c7:12:32:4d:c3:0f:21:8f:e3:79:e2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=b31f9807a3a10429cb850acd6802c0a73db99231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8c:7e:fc:6c:80:7b:46:71:61:ef:bf:4a:62:
                    0e:cd:85:c2:25:e9:b2:6b:b5:86:34:59:7a:5c:9c:
                    ab:e1:6d:72:9b:c3:38:b1:df:bb:9f:77:50:25:40:
                    18:15:3d:46:3d:92:5e:8b:d1:ee:47:a4:52:24:9b:
                    54:c8:b8:af:37:93:92:c0:24:39:c2:6f:6a:d0:49:
                    f9:bf:e9:e2:53:21:b4:a3:21:b7:af:d6:04:5f:c5:
                    75:d2:ec:76:62:47:3c:60:ff:21:49:5b:e3:42:06:
                    8e:42:b7:bc:ad:94:da:42:5f:ac:4f:18:3c:6f:f5:
                    b6:61:56:bc:70:2c:99:eb:4f:35:74:73:1f:9c:76:
                    9b:cd:c1:6b:7c:b4:a7:cf:39:ed:19:48:fc:c5:bd:
                    a0:e3:fc:76:2a:65:c9:d1:47:3d:55:be:3e:77:a9:
                    6a:78:39:5a:40:33:5f:27:47:b6:2a:d9:fb:55:29:
                    36:e4:84:63:b0:e9:3b:f1:6b:46:f6:7c:7b:66:d2:
                    7f:0e:a9:bf:0d:b3:7e:56:1c:5e:7d:b2:e0:c5:22:
                    cc:10:b3:c0:b8:8d:60:67:56:1b:15:a2:f2:4a:40:
                    d0:a7:e9:0f:07:1c:2f:80:be:60:8e:4a:1a:a1:27:
                    35:29:5e:f3:9a:5c:3a:49:68:2f:47:07:f4:9f:4e:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1F:98:07:A3:A1:04:29:CB:85:0A:CD:68:02:C0:A7:3D:B9:92:31
            X509v3 Authority Key Identifier:
                keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2e:3e:13:2a:23:a9:4c:c8:ac:6c:b2:3d:a6:ca:47:c2:2d:
         b3:2d:43:3a:2d:25:5d:51:7c:5c:da:70:9b:5a:87:d3:3f:da:
         6c:53:fe:81:09:06:7f:bf:65:f5:d7:2c:02:ff:c1:ef:40:21:
         c4:f3:5c:78:50:03:02:fa:4f:a7:03:a4:0a:0d:b4:84:d4:db:
         3a:1e:02:e7:ab:9b:c0:cb:0f:c3:7f:8f:48:e7:23:f8:25:03:
         1a:87:42:5a:d4:d2:85:96:2b:9d:00:b0:82:98:6a:e9:30:9b:
         fe:7f:1f:0c:0c:ef:9e:9e:18:d5:07:91:b0:06:cc:52:11:08:
         d9:a9:d1:13:59:4c:8a:5b:b3:44:c0:4a:59:77:f3:1e:10:0e:
         d7:e0:0f:74:4e:79:8a:7d:58:b1:01:21:13:b3:da:dd:df:d3:
         22:34:08:0e:0f:cc:a7:04:05:41:3f:59:a3:8c:da:77:b2:74:
         1d:4f:59:53:54:f1:22:a2:28:f0:d0:eb:74:2e:05:01:a0:18:
         75:12:5d:e6:26:9c:3b:9c:11:98:b3:80:19:bf:65:66:54:61:
         f9:56:72:94:ba:95:3f:79:74:a5:66:0f:d1:f7:17:9c:56:cc:
         30:b7:54:fc:96:35:f6:38:9f:f4:81:5a:76:3c:2e:fc:3b:3a:
         19:3f:c2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----