Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
File:                     DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json)
Hash identifier:          7qfsNientQtBVNII59mSD6Ly0mCC+o3OD2bPAoPe4ak=
Subject key identifier:   37:40:F1:18:4E:D0:C8:A9:7E:4A:D0:AC:92:88:A1:1F:49:BD:D3:1E
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Certificate issuer:       /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial:       01962DF4381038DD73F695C5ED0E3CF948C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: REpmtyTNZXDwJutxKHaQlM6zWz3Xj41Yk0a8gCGU+GI=)
                          2: oiZHTdtEDz6aP8WgUPcMGh6h5wQ.roa (hash: ewlicz9ndLYefeC/+lwNbWi0WIXINkEHOt0Ubc6GHQg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:38:10:38:dd:73:f6:95:c5:ed:0e:3c:f9:48:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=3740f1184ed0c8a97e4ad0ac9288a11f49bdd31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:44:22:91:01:03:48:47:72:e8:81:64:79:
                    ea:1d:3d:91:e0:0f:5f:b1:d6:02:07:0f:98:25:dc:
                    71:7d:b8:ed:d1:0b:f5:f7:a7:29:e7:59:59:8e:2c:
                    78:d3:ae:59:b7:df:e9:3e:46:4b:99:5a:87:45:2c:
                    7f:f9:30:c3:bd:fe:61:eb:4d:6b:35:e5:84:52:2a:
                    c0:22:51:46:b5:25:ba:b9:05:f3:4e:25:3c:35:e6:
                    56:0e:ce:9e:fa:07:44:d9:33:e8:e2:0a:e5:3b:bc:
                    d8:5e:58:74:05:ce:65:b6:76:8f:4d:ba:5c:c5:11:
                    cf:78:d9:aa:af:77:98:c6:29:36:47:51:fa:31:e3:
                    7b:6e:d4:39:de:03:64:d5:72:22:66:5e:04:2b:bb:
                    c5:67:e9:fb:9c:52:f5:dd:94:9b:70:03:10:56:bc:
                    ba:8d:33:9b:e0:3b:b3:2d:5b:99:34:0a:d0:94:4c:
                    bb:93:52:67:fe:7f:be:39:c3:09:82:ac:b4:3c:20:
                    30:e0:61:4c:03:25:b3:78:e5:5a:db:25:12:32:b7:
                    2a:03:17:6e:2b:19:d0:f5:2d:37:f0:72:22:2f:08:
                    0b:d6:ad:cd:90:64:77:1e:05:69:bc:53:cd:7d:01:
                    bb:a5:b4:11:3d:01:30:2a:d8:a0:22:9e:e7:6f:9c:
                    7d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:40:F1:18:4E:D0:C8:A9:7E:4A:D0:AC:92:88:A1:1F:49:BD:D3:1E
            X509v3 Authority Key Identifier:
                keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:04:e8:5b:2a:5e:dc:d0:7e:3d:8c:f0:e2:8f:bf:b6:5f:4f:
         89:b9:83:e7:b5:ef:56:b4:ab:f6:9d:99:9a:96:74:9e:a5:ea:
         0a:51:44:67:ba:49:6d:48:1a:36:f8:56:c8:53:22:16:4c:91:
         bd:fb:1d:31:65:15:d6:81:5e:0e:ac:24:83:7d:c5:26:45:79:
         aa:fb:f5:22:1e:11:08:65:5f:fb:49:d9:46:91:d9:81:41:0f:
         1e:4c:d0:6e:43:69:62:be:39:88:af:7e:46:b1:e1:7a:83:ac:
         38:04:da:61:06:b6:83:ab:92:b2:14:0a:a4:3e:94:89:41:cb:
         74:6e:49:dc:0e:91:d7:df:69:30:ed:5c:f8:79:b2:ae:4a:c9:
         9e:6a:34:b9:59:06:f7:4a:ab:d0:f8:6a:cb:e4:c7:33:33:97:
         5b:63:54:a6:8a:33:ce:cf:9d:27:3f:38:80:2d:25:04:5a:9f:
         cf:77:cc:66:e8:da:9f:be:fa:10:c9:eb:77:6e:aa:0d:6a:0c:
         92:fc:c3:1f:2f:62:7d:58:2f:20:61:4b:ac:ca:52:c7:80:b0:
         59:af:1e:49:b1:fb:65:6e:9b:29:97:51:4c:b0:6c:51:03:19:
         15:f1:fc:c7:3c:33:62:04:53:41:5b:30:b3:98:07:60:c6:e1:
         b8:95:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----