Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
File:                     D97nlErE2jERKV2B4p3roAwWOpY.mft (raw, json)
Hash identifier:          tQ5BYC2TWrQaYnnuTxxODMICDtB73JukrnweMk1YRfo=
Subject key identifier:   B0:F5:5B:7B:FB:0A:E9:FB:07:54:F9:EE:DE:9F:98:37:EC:7E:87:2D
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Certificate issuer:       /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial:       01962F064E28196ED275EA75F06581F2EB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: D97nlErE2jERKV2B4p3roAwWOpY.crl (hash: dzFAI5s0j9JtdrbinWAGJEvq7VagKjTJExdSpCf8dcA=)
                          2: Fe73gwKx3TfChZQCePRdIEAemH0.roa (hash: qBzf7ILpA60OZzhZbHEoimpJXoZWWGpm51oGlU43AdU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4e:28:19:6e:d2:75:ea:75:f0:65:81:f2:eb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=b0f55b7bfb0ae9fb0754f9eede9f9837ec7e872d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:02:9f:6e:52:a4:c7:79:22:ba:9e:9e:96:0c:
                    8f:b9:4d:bb:95:0b:79:21:f7:3d:1c:11:6b:ff:00:
                    10:81:7a:d5:9f:8e:f4:bf:48:b8:77:44:ac:5e:10:
                    cf:05:b2:8f:16:34:9f:f7:bc:c7:de:14:38:41:78:
                    9e:66:b6:2c:df:04:b5:44:22:00:e4:6d:ef:d5:ba:
                    c7:5e:38:f8:c3:a2:b5:93:8d:c0:e1:11:d1:98:46:
                    88:bc:1e:ec:3f:9e:fa:f2:a6:07:a9:e6:38:02:87:
                    63:40:d1:02:7b:e0:fb:28:8c:35:2a:3a:9e:f2:bf:
                    7b:47:f4:16:d7:7c:cc:ce:2a:43:21:5b:13:29:e7:
                    9f:2e:05:c3:e4:d1:b9:82:cb:48:c6:78:f9:6c:58:
                    27:c4:0c:cc:8b:02:9f:8a:9c:33:dc:95:ae:a8:08:
                    b4:18:8f:97:15:6f:61:a6:ca:c8:64:47:99:d8:18:
                    53:43:cb:50:52:0a:67:19:43:f9:5d:f6:78:9d:fa:
                    38:a5:66:45:88:2c:14:ee:80:90:65:b8:17:bb:5d:
                    4f:a0:a2:ae:a6:b8:cf:24:cb:68:17:c0:33:1e:51:
                    5d:35:69:71:6d:57:5c:8b:8f:b7:7f:73:20:5a:0b:
                    e8:a6:59:c5:10:f4:37:0b:5d:48:2f:6e:27:cb:93:
                    e1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F5:5B:7B:FB:0A:E9:FB:07:54:F9:EE:DE:9F:98:37:EC:7E:87:2D
            X509v3 Authority Key Identifier:
                keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c5:a4:f8:62:23:a0:95:f5:34:4c:96:4b:06:f0:6e:2b:6c:
         58:06:77:70:96:b0:10:6b:d1:a3:4c:a5:6a:ba:0b:4a:38:cc:
         b2:0d:48:94:b1:db:9b:47:3e:38:55:fa:2f:c3:cd:ea:d5:30:
         d9:df:fc:ad:1a:47:ad:63:7b:9e:88:ce:e4:78:96:ec:f7:e6:
         d1:ab:13:a2:b8:41:c9:0f:bd:b1:ca:fa:1b:a1:d8:dc:8c:b5:
         1d:1d:c8:89:b4:86:a1:10:8b:81:7f:bc:49:d5:f8:e1:a0:4f:
         3a:92:8c:d8:d7:51:4b:bc:96:96:f1:09:a7:33:45:9a:4a:f2:
         72:88:b1:99:b1:b0:cc:74:ed:12:2c:f1:3c:a4:ad:6e:6b:90:
         60:d0:2c:ec:c2:72:4a:ee:54:1c:9e:2e:fe:03:87:f0:14:5d:
         21:d6:1c:fe:fd:52:bf:cf:5e:d3:3a:73:4e:e1:10:69:d7:ea:
         17:e6:78:48:33:6e:24:b1:0c:37:90:20:55:01:a9:65:a3:14:
         c0:1e:6d:90:60:43:5d:32:f8:83:51:bc:11:39:b1:92:55:c3:
         9b:3e:8c:b7:3c:8f:62:70:26:29:55:2c:65:d6:47:ff:9b:8a:
         f2:39:7c:cf:ca:70:ae:8a:ba:52:02:c2:44:30:7a:9a:fc:b5:
         d6:40:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----