Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File:                     D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier:          /OUBh6SDStuUJTFSa2IEsoY1soWM7zCBZZtL8L3Avm8=
Subject key identifier:   F9:F4:82:C2:47:62:88:A0:F7:11:FD:4D:DB:60:E6:6D:E9:87:3A:1F
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer:       /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial:       01962ECFCC1103EA0245EAEFAD4F7B024978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number:          024D
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: 2FPktE5q+VNXfLq5rmZzPBtZcZsjyBkrqdU6uSLzBvY=)
                          2: OEYyZZKZhp-2fVGqVtoifeZmQ8A.roa (hash: SXPo45Zy5oQW0FXPgd1Rr0ybBjZhh0uTBvIGSnzxV5o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cc:11:03:ea:02:45:ea:ef:ad:4f:7b:02:49:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=f9f482c2476288a0f711fd4ddb60e66de9873a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:8b:a9:ae:8f:d2:84:eb:ed:d7:f3:34:0e:
                    0a:d1:f0:32:de:75:c3:86:70:79:e0:77:83:0d:db:
                    ef:8f:6f:d1:d5:d0:da:9c:50:d9:52:ae:8e:ba:d2:
                    16:be:3a:42:47:21:0d:61:bb:58:f4:d9:83:97:af:
                    59:99:a6:7b:95:33:0b:7d:7c:85:78:c3:48:26:0d:
                    83:db:9b:76:c2:23:14:71:71:d3:5f:62:72:c9:d3:
                    65:ca:40:64:70:4c:44:2c:d7:9c:90:e4:09:8d:71:
                    c4:26:17:a9:ec:ac:f0:e6:9a:05:c2:f6:fc:3d:2f:
                    fa:71:4c:f3:49:aa:73:0f:40:92:cb:30:fd:cc:09:
                    cd:f7:f7:61:30:22:1e:c2:11:81:6a:f0:14:87:4d:
                    25:f9:fd:92:fe:12:14:0a:ce:e8:ee:61:74:87:79:
                    e4:8c:11:7c:bd:f9:29:1b:48:7f:06:5c:ed:fa:0f:
                    c5:2f:9b:3a:fb:1b:fd:0b:47:da:32:24:eb:a2:b7:
                    78:a5:f9:e8:6f:5b:39:fb:0e:91:5b:04:0c:26:38:
                    ca:0a:bd:cb:99:fb:03:2c:6e:06:83:74:9b:ea:5b:
                    61:51:08:b9:ba:7c:86:1b:12:3c:07:e9:16:57:36:
                    39:12:90:94:9a:32:c5:ac:f1:b7:70:d8:05:85:03:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F4:82:C2:47:62:88:A0:F7:11:FD:4D:DB:60:E6:6D:E9:87:3A:1F
            X509v3 Authority Key Identifier:
                keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:03:59:1c:04:f1:1f:eb:b8:c2:e8:42:b3:c1:71:2c:16:e2:
         25:c5:57:90:f4:7b:50:77:ed:5c:b4:36:24:11:97:16:c3:dc:
         f3:66:8e:4e:96:ec:9c:2c:99:97:e9:1a:16:78:5a:19:71:11:
         c3:94:c7:e8:83:46:e7:ed:11:47:8a:64:30:eb:b3:66:7b:ed:
         14:57:18:96:ee:f9:1a:e8:90:c7:15:5c:0f:c5:35:52:36:e2:
         e2:72:12:20:e3:ca:f0:a8:76:ab:aa:87:5a:e8:e0:cf:42:38:
         bf:07:5e:7f:8f:f4:f4:7f:90:30:fa:03:4d:b5:98:7a:af:0e:
         98:34:8c:73:3a:18:a1:e3:8d:8d:c5:a1:69:a7:ab:81:d2:4e:
         7a:58:38:0f:d7:cb:20:9e:ec:d0:be:cd:12:d8:96:f8:0f:19:
         f2:c3:c0:e8:04:eb:3b:f8:b4:8b:95:c6:99:71:d5:14:b9:eb:
         83:9a:de:d4:50:78:f1:01:7c:39:1e:01:55:21:7e:62:64:da:
         bb:c7:94:fd:8a:a9:ec:3d:99:a0:2a:7b:6a:67:3b:a1:f7:b2:
         8d:dd:60:19:2a:d9:01:bd:e8:1c:c5:94:6b:38:fe:ab:00:44:
         28:69:03:4c:67:9d:7c:37:29:75:91:a4:8f:d8:56:9c:2b:1d:
         15:29:3b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----