Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File:                     DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier:          NVACWbg8EwtcjI4GPN719loVm0QQUwXjHcXlaPXfcBo=
Subject key identifier:   D0:4D:48:7D:53:C6:08:AF:B6:AD:21:D9:0F:19:82:10:BB:D7:5D:26
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer:       /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial:       01962F3D87691F1DE6EF93BDCA67F87CB63B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number:          0568
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: V0hvOW9+491ZBuLkZwc9CuQmfOTIrBGY4QsjljTmb9E=)
                          2: NfNxh6P1uZhDH6XoBFouc3RXHCs.roa (hash: qkk+5kxxRuEkhJwe+gYaKfgrph8xFe5jspGXDjsvcA0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:87:69:1f:1d:e6:ef:93:bd:ca:67:f8:7c:b6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=d04d487d53c608afb6ad21d90f198210bbd75d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:d7:74:90:f4:bf:28:bb:6b:ea:31:b8:02:
                    eb:21:f2:92:a4:9e:d9:35:87:66:cb:27:32:f9:48:
                    a0:d9:ac:6b:bf:d1:1e:2b:c2:56:f9:61:ac:6c:6e:
                    90:d2:a7:f0:71:0d:09:d2:7e:f0:78:b3:b9:fe:5b:
                    99:4b:98:96:85:32:d1:d2:5e:57:1d:4a:bf:c1:0d:
                    54:12:fc:dc:ec:16:e2:b6:ec:6d:1b:b8:1d:29:61:
                    ea:a6:4e:f7:54:24:7c:61:23:45:e1:67:52:b0:2c:
                    66:f0:5e:8e:60:95:46:92:d3:d4:99:e9:3f:3d:66:
                    33:55:e2:7c:35:21:97:d5:bb:f5:b7:ee:d1:e7:1c:
                    01:48:94:0c:fa:5a:e3:a4:4a:ee:9b:de:34:f6:49:
                    9f:87:9e:1e:1c:21:4a:ba:5a:bd:e8:07:e2:bb:d9:
                    7b:09:8b:1b:21:73:ec:9c:23:a3:55:49:77:1b:8e:
                    c8:70:8d:d1:b6:06:92:76:06:4a:fd:7d:42:8d:6a:
                    3d:c9:96:bb:30:9c:98:b8:f2:2d:4e:81:29:74:17:
                    98:e3:97:88:8d:51:21:e0:d3:f5:ed:11:06:cc:96:
                    ed:e9:b6:a8:cb:d4:f8:b6:af:05:7d:85:ce:5c:fc:
                    01:15:65:44:ac:a5:46:da:b0:6b:76:1f:37:6e:11:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4D:48:7D:53:C6:08:AF:B6:AD:21:D9:0F:19:82:10:BB:D7:5D:26
            X509v3 Authority Key Identifier:
                keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4d:27:87:02:65:ab:08:95:58:8a:bf:40:d3:d2:ca:9c:b8:
         c0:69:e9:35:93:d8:57:3a:8d:8b:63:e6:0c:e5:84:7e:dd:8b:
         22:c7:d8:73:d7:47:19:45:37:c8:4f:38:36:50:6e:67:ec:3b:
         39:45:18:89:ca:4c:ef:ed:4e:cc:8f:c1:a5:4b:50:6a:5f:10:
         71:e4:90:d7:02:7a:56:ad:a4:78:38:61:15:27:67:fd:70:d5:
         b6:69:4f:c2:14:e9:7d:da:f7:3a:51:38:74:4a:dc:fd:3f:03:
         2d:cb:ef:e5:4c:54:be:49:79:1b:16:13:73:35:6c:95:a1:71:
         e5:2c:e2:50:23:dc:15:35:9d:14:9f:87:d6:66:de:da:03:13:
         5f:c1:be:c5:5a:89:ad:df:03:44:7d:84:bf:47:d7:6c:d2:83:
         9a:47:d1:c1:8e:d5:96:0a:e4:a1:2d:7a:48:d9:ac:05:e0:fc:
         12:a2:aa:9e:9a:a7:93:bd:ae:39:85:55:d3:10:d6:a7:8d:6f:
         e9:99:a5:3c:a3:e9:40:ad:d3:44:eb:ae:8e:6f:6e:2c:f3:8b:
         5c:84:37:b4:a2:c2:b0:e6:af:da:b7:9d:a6:fd:c6:28:58:5b:
         af:c4:75:e5:c9:ca:00:dc:39:99:f0:9e:0c:ca:e9:0d:5d:e9:
         0a:46:e8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----