Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File:                     Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier:          F2MDB7eJ2pye1X4cxlrFcZDAagxbdw9OKj3rXQbixQw=
Subject key identifier:   D6:7D:96:07:DD:40:06:CB:BC:53:70:DA:C3:B2:25:1C:A9:D2:D6:1F
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer:       /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial:       01962E2AF29523E076DA0BB23C7CE0F151BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: 1-0L6QihwgCIdPcxlSZx30BVCxIU.roa (hash: r/v9bB2/O8eoqo0SdsHJ+0cV0GGG/FpWoOUcPgNpIWM=)
                          2: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: FJUtbcquRB/3GuOkxOGcqvXSDZXE5HyoKBEAY/mPG9c=)
                          3: IJAOzCgcOmnwLYeg7ILsOnQE_C4.roa (hash: qNB39/8R46KNEQ+i+JNvTzUgavEQepnYZFITugyt9Gk=)
                          4: K-WcYZp1Vr4DrhTlbDa1XAsuu4s.roa (hash: FTkwxwLsNPLRvw7XfELnO2lGIpcQ3JUT+SSorDdEIQk=)
                          5: _-Nj3Wxrzq72VbfAQ-gOeiTBlqY.roa (hash: WkUPk3FG1mZgWIT5TOZx+C1om/GIx7f7SQjsDV5hIfQ=)
                          6: fPUfeSK-zqhYqo9RI5ZO_RvTAnI.roa (hash: 2BLh0mt6BN3cuK7N2qRXjH6g7/lfrSvhbtCftnz6qGo=)
                          7: l4iAztFdyWZxSOfl8q_e1dKH1is.roa (hash: Uv7SVk02b8fR8AImRa4OOMzROmZWxN56DleM+7FbEo4=)
                          8: wdQu71DwsSZCWEGjtF-c6H8Remk.roa (hash: nQC972cihJ5AOMxuc+A8aMUofttqjMugRlO4fZX1z8w=)
                          9: zwK7zErLOq-Lh2vm_AxCgFBZ4xs.roa (hash: iF8UE/8pbMpYaV1IVf6cowiiQQTnx+niOONavMOR9ho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f2:95:23:e0:76:da:0b:b2:3c:7c:e0:f1:51:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=d67d9607dd4006cbbc5370dac3b2251ca9d2d61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:1b:85:44:af:cd:4e:74:4c:e8:bc:b2:e2:
                    5b:f6:d7:c6:c8:11:e9:43:4d:06:7f:f1:3f:b8:d6:
                    a1:ff:35:80:d6:61:0f:3c:ce:2e:73:34:72:9b:e8:
                    0b:f6:cc:c6:33:b7:8d:08:08:f5:f4:bb:60:a6:0a:
                    05:3d:52:28:01:39:cc:bc:b0:d3:c3:64:cd:fd:08:
                    a1:e7:6c:62:17:f7:d9:2f:0b:97:c6:4f:aa:d6:79:
                    6a:3b:bb:77:e0:c0:d7:c0:3a:73:b8:7d:bd:e0:9f:
                    e3:ce:26:26:f5:3c:74:5c:aa:a4:42:2a:8c:99:63:
                    6f:f3:fe:44:49:e8:58:c7:29:ee:1c:c0:ef:70:be:
                    b4:15:5f:8e:99:d4:89:fc:74:d8:40:28:ae:eb:8a:
                    bb:ec:1c:d5:5a:ba:62:75:ce:27:81:e7:50:c0:21:
                    a5:54:5a:81:ce:1c:51:b5:70:e2:05:fa:c1:30:dc:
                    31:d6:e8:da:cb:f8:74:32:84:ca:c4:3f:f4:b6:0a:
                    ed:aa:52:b3:46:0c:17:e8:7d:c3:d7:93:1e:f1:70:
                    74:60:b3:be:82:05:c7:82:b5:bd:c4:be:c9:23:b5:
                    0c:27:7a:de:b7:ad:e7:a2:46:7b:78:41:43:f8:97:
                    f4:19:80:59:36:ad:53:5c:61:cd:8f:be:08:d1:d5:
                    ee:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7D:96:07:DD:40:06:CB:BC:53:70:DA:C3:B2:25:1C:A9:D2:D6:1F
            X509v3 Authority Key Identifier:
                keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:9c:a3:2d:20:68:fb:ed:34:c7:f2:53:bb:4b:2c:24:5d:1b:
         1c:41:89:40:86:cf:d1:35:b4:7e:88:b6:fa:46:29:94:c3:b0:
         2f:b1:56:c9:db:71:64:0d:7f:04:ed:98:3e:16:c8:aa:20:ff:
         84:cf:89:65:26:bf:55:d1:df:46:2f:7d:e9:c9:ae:d7:d0:5e:
         e1:c6:a1:05:75:96:48:41:a9:75:79:b3:2b:b9:1c:6d:13:84:
         e2:55:ca:6f:c0:58:90:33:c1:9b:04:97:d2:ed:8a:87:0e:c7:
         4d:31:d0:a6:f1:08:24:da:d8:18:f7:51:de:0b:2a:03:45:59:
         3b:47:e1:54:dd:e4:c4:9f:ef:8f:22:bf:0e:ea:0a:33:8e:17:
         ab:9b:dd:8a:13:a9:d6:3e:d4:a1:10:0e:ec:26:d4:ec:00:ac:
         5f:1a:df:74:40:c0:a6:cd:d3:3c:bf:73:e0:71:f5:72:9e:ba:
         ef:93:17:23:07:a9:32:9f:10:67:b7:f7:6e:11:d5:e9:76:ae:
         20:b3:50:68:87:f5:cf:3f:01:0f:d2:18:0e:9b:0b:cb:36:10:
         f6:67:2d:7e:ba:c5:ff:bb:04:2f:1c:2d:ef:4a:16:2d:9c:ac:
         fd:22:92:2c:e4:39:df:c2:d0:80:cf:5b:d5:73:4e:98:bc:05:
         10:6c:32:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----