Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File:                     DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier:          JPHpJLr0tfXXSGFYbCIH3CAyqic5f4obI/JxUzp1+Y4=
Subject key identifier:   29:2D:D1:74:16:42:A1:88:AD:30:79:44:16:70:2B:61:4D:E3:0D:02
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer:       /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial:       01962F067E8406A8BD3854AB5129FF45EE74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number:          0AF4
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: 1-KvMzZmip20mq_6TE6zao4jxRAY.roa (hash: +e++mFx5okLj8UNvWINUv13IrPw1m2hTZhWWjifAWCI=)
                          2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: bijmwAnfp2nIAEYP0isnJffQ7ascmywyanlynoi0s20=)
                          3: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (hash: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7e:84:06:a8:bd:38:54:ab:51:29:ff:45:ee:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=292dd1741642a188ad30794416702b614de30d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:d7:91:f9:a1:3d:f2:4f:38:39:80:d5:41:
                    6a:9f:94:36:40:e4:29:01:7e:18:70:f8:9b:44:ff:
                    5e:8d:35:9f:18:c1:0a:17:a7:4c:32:57:8e:b2:6f:
                    4a:12:aa:fc:04:96:87:15:5a:0a:15:8a:1d:36:bd:
                    39:90:8d:84:b9:b1:87:59:fd:f3:69:aa:cf:36:ef:
                    66:e4:cd:26:40:a2:61:2c:13:4a:94:a1:db:e8:3d:
                    f2:55:64:04:fb:c7:0d:81:60:c4:db:8f:eb:0b:38:
                    03:a1:fe:ad:aa:8e:f4:0d:50:a1:0b:fa:61:d3:82:
                    bd:5f:d1:e4:88:a5:a6:1c:51:28:ce:8b:ce:78:4a:
                    09:c5:29:4b:a6:04:e4:f2:06:bb:c4:96:76:69:85:
                    00:f0:09:4b:f8:f2:35:65:ff:6b:ba:53:49:9c:aa:
                    56:4a:ea:75:96:17:cf:ef:e4:5f:42:22:9b:1f:f1:
                    36:a1:85:5d:77:51:96:c2:c8:2d:f6:f3:9a:70:1f:
                    d2:c4:07:e2:88:0e:45:b7:8c:fb:98:c1:71:fa:6f:
                    bc:02:57:eb:92:f9:37:2b:c2:f5:45:2e:3a:b2:8d:
                    6f:5f:6d:07:ed:a2:f2:3a:f4:79:16:a7:21:26:4e:
                    cd:c7:42:01:ae:80:6b:ba:fb:e0:02:11:01:16:98:
                    f0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2D:D1:74:16:42:A1:88:AD:30:79:44:16:70:2B:61:4D:E3:0D:02
            X509v3 Authority Key Identifier:
                keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f2:ba:07:82:11:1e:4a:4f:17:f1:f3:64:e2:fc:21:7d:8a:
         db:be:3c:28:48:a9:d2:e7:28:06:3f:b4:e4:ba:3b:96:7b:8c:
         4f:8b:b2:9f:c6:69:d1:15:1f:64:fe:82:96:bd:2d:78:bc:13:
         f3:50:7c:01:9c:ca:f0:27:5a:78:99:41:37:73:e1:04:7d:ac:
         0a:c3:68:59:49:92:85:77:cc:a5:4f:ea:e5:58:2c:7e:0d:ec:
         90:fe:49:d8:fa:c7:20:93:ab:09:1a:77:65:48:c3:c7:0e:0d:
         56:88:69:22:39:2f:6d:d0:98:ad:22:c0:a7:e8:74:03:bc:f3:
         9c:69:93:1b:21:21:a8:b4:35:24:2d:d1:ca:a3:23:ef:0a:43:
         f0:8f:69:77:35:ed:09:eb:8c:3f:8d:db:6d:70:8f:10:00:be:
         4b:dc:cd:3a:51:71:e5:9c:77:dd:38:c3:58:81:b5:7b:7f:7b:
         57:d3:68:91:e4:a7:a9:c3:9c:5a:8f:0b:c5:25:23:d0:b8:98:
         8c:24:7e:97:86:06:cf:5b:f2:32:25:85:2c:6e:74:d9:db:6c:
         6d:90:20:18:94:c4:01:c9:ab:82:e2:1b:23:2f:4a:d2:72:35:
         02:9c:f6:d6:d2:21:f3:85:95:a4:42:f9:17:f7:41:eb:47:47:
         5e:e1:49:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----