Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File:                     DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier:          JfMF2KtIaSudQGfa5tFF0HCFt+2vuo5b2t0qvJUgPyc=
Subject key identifier:   48:C0:A5:03:5C:D6:5E:01:9E:99:44:BE:F0:DD:97:A3:C2:85:CE:55
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer:       /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial:       01962E2ADF44F2C4373665AB62530821DD48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: 4Kpt6Xf5p4/Nv6g4ahlVQZMW1FaLX0Kkc9mK7Zhq0nw=)
                          2: zXvVe6nLVwFkSDCiUM6x3r-Uf8g.roa (hash: pz+KoscFR8BxDTxynFStXcnjiXaUWD5kwjcvZLm4qMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:df:44:f2:c4:37:36:65:ab:62:53:08:21:dd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=48c0a5035cd65e019e9944bef0dd97a3c285ce55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:c5:3e:73:d4:53:62:60:d7:d1:1b:c7:a1:
                    c3:72:03:ed:28:27:ec:5e:0c:b3:35:13:f1:d6:aa:
                    d8:d8:91:11:d7:fe:6f:8d:74:1d:53:e3:6e:77:64:
                    79:66:2c:59:7f:8c:0d:a3:40:ae:37:81:b2:1c:0c:
                    bf:a8:08:f6:b5:ec:8f:d6:c8:ac:d8:d7:31:b7:42:
                    40:56:0c:93:df:e9:6b:6e:bc:b5:cd:ec:9a:2c:3f:
                    e5:22:d5:19:35:8b:fc:2f:50:e6:e9:16:d9:66:01:
                    78:6c:b1:de:d4:74:e2:db:38:95:a9:08:59:b8:77:
                    b1:9a:f4:2f:3d:28:20:04:b6:d3:67:90:0f:1d:a4:
                    11:81:3d:8d:7d:db:35:e1:f3:d4:ac:8b:29:da:ab:
                    c0:2b:18:45:5e:ca:8c:20:b7:6c:01:8e:59:27:29:
                    0a:2f:b1:4c:e0:50:8e:41:20:6f:c1:9b:88:1e:0d:
                    b8:ad:e8:7b:68:ab:1e:f8:63:fa:6a:d3:d2:dc:95:
                    4d:07:12:b7:5c:6c:75:20:64:37:ea:55:73:2b:34:
                    d6:04:1d:37:98:28:53:4d:aa:21:27:30:0e:de:2c:
                    64:77:19:b6:e5:39:c4:71:1a:cb:65:a7:f6:5d:38:
                    97:7e:12:01:59:53:96:fb:32:0a:0e:e9:e3:db:4d:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C0:A5:03:5C:D6:5E:01:9E:99:44:BE:F0:DD:97:A3:C2:85:CE:55
            X509v3 Authority Key Identifier:
                keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b3:e2:4e:84:d7:bc:a6:04:fb:4a:4c:0a:e0:f9:23:90:1a:
         f0:f0:d2:15:98:49:4d:32:f7:32:e3:31:e5:6a:80:15:79:a5:
         88:ec:3e:93:d2:15:b5:74:16:64:4c:d4:c7:a0:47:32:3a:75:
         bb:c7:b3:64:29:29:d8:05:cb:45:4d:d0:75:d3:ed:9e:c3:57:
         67:a4:07:92:b0:3c:bd:09:35:15:27:44:88:aa:2e:85:01:03:
         f5:16:c7:4a:96:ff:02:e4:21:a2:8c:4e:b4:4d:34:b0:a1:35:
         95:ab:b2:ee:48:8d:51:96:10:41:ad:ea:af:65:7c:e8:6c:a8:
         28:1d:ee:c5:4d:a5:9c:1e:36:27:dd:78:34:19:7f:25:d9:b4:
         1d:f1:43:9c:44:60:9a:b7:a9:e5:09:84:69:fb:82:8a:00:6c:
         1d:d1:69:73:0d:d9:ec:12:97:1d:b2:c1:7d:1c:cc:2b:84:a7:
         d9:82:d8:f1:0e:23:e5:61:89:b0:88:40:ec:7c:20:ba:b7:b3:
         e9:2b:78:65:e0:e0:76:54:71:b6:db:55:5c:c4:f1:7b:f3:f4:
         ef:d6:67:5c:d6:b9:47:b1:5f:f2:6c:92:d0:0e:15:b6:83:92:
         85:69:7d:97:43:b1:dd:5e:11:6a:e5:6b:2c:2d:b8:3a:e4:17:
         8b:ab:80:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----