Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
File:                     DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json)
Hash identifier:          bBzXYPtHT6rCnFTEYyT2EOMGBv+3iVRl/s6DKXpabso=
Subject key identifier:   6E:F4:66:91:B4:23:1A:29:22:57:B0:34:54:9A:24:BF:65:D5:B3:EA
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Certificate issuer:       /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial:       01962ECFB478D03FF46613F3765DEB7D46A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
Manifest number:          0FE2
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=)
                          2: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=)
                          3: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=)
                          4: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: er1WGduLv/tLbi5NR66R9MXtK5UDStp9EINYPLIICLQ=)
                          5: FI6bfjPN7t6NFAgQVExPOIQtMIg.roa (hash: PXiteBbCStnt/SqubPRrbNoWhhfQi1ko8O4Z1tf6P4k=)
                          6: PUVo5ST7GwSNOno6GEB7-_75840.roa (hash: cD6D5iZgvHwEh63NtvZYi1ih3mUJsM/67jxgu3bl/KM=)
                          7: QmLqclIeKgJyec7JezomHprMxUI.roa (hash: jnGw1aX/bbjBYQipqNzcy1dm9N/v8qMjZ2OnfDvSpes=)
                          8: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=)
                          9: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=)
                          10: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=)
                          11: j-BmNE1PL8fJEwiUUtO9Mv28nV0.roa (hash: z6EQyduvcoZf7YV0u5wyMfuoZtiWFaeEgvTRcTy87Qk=)
                          12: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=)
                          13: kh0epdLNSddiQFDfyRWlWNSgNTc.roa (hash: hMYh6cNkenwqAq3pUFKO3vM0qKRLjOoLvXbL/3HS8fo=)
                          14: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=)
                          15: vJODnu8qBB0BlR1jt5n-BRo4qmc.roa (hash: cVd7WS0pSoOiicbKp9gmdhaO5+PWfMgG5srT6gEkT+I=)
                          16: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b4:78:d0:3f:f4:66:13:f3:76:5d:eb:7d:46:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=6ef46691b4231a292257b034549a24bf65d5b3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:de:26:4a:de:ef:14:39:e9:d0:7b:bd:01:
                    fb:02:f2:81:ed:e7:9a:36:45:0e:fd:ed:33:d4:2b:
                    43:2c:59:ec:c5:20:cf:dd:14:7b:a0:a1:29:fc:98:
                    be:46:5b:b0:29:ba:f3:79:03:dc:2a:b6:3a:26:e3:
                    79:89:aa:ae:7f:2b:8f:b7:5a:cc:88:62:94:d7:21:
                    16:65:7b:00:54:6e:90:3d:1f:e2:a9:bb:e9:f8:53:
                    04:db:36:a1:92:06:fc:dd:5f:c8:80:c5:e2:42:3c:
                    49:32:41:c7:cf:14:42:5f:03:10:0e:d7:e9:87:90:
                    4a:c3:d2:5f:9b:72:6d:1e:29:e6:a1:3b:6e:39:a3:
                    7f:30:8e:3c:64:66:f2:b3:db:aa:45:ba:bb:6f:0e:
                    a3:de:16:c6:67:41:58:cf:20:16:42:2c:48:52:21:
                    e0:c0:d9:36:e1:61:86:4c:7b:2b:e7:fe:bc:30:b7:
                    2a:26:8b:4c:a0:61:4f:a6:1e:61:6a:66:80:f8:c4:
                    e9:3d:02:6e:15:5d:68:9d:fc:0f:1c:e7:bd:1f:6d:
                    24:f3:70:55:c8:1d:28:c2:4a:8f:7b:90:af:d8:70:
                    72:f4:04:94:f8:ff:ce:d6:c9:4f:88:7c:71:7c:2d:
                    6b:c7:ca:32:ed:92:16:97:85:1f:fb:cb:76:2b:80:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F4:66:91:B4:23:1A:29:22:57:B0:34:54:9A:24:BF:65:D5:B3:EA
            X509v3 Authority Key Identifier:
                keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:56:63:3c:cd:8d:b0:88:77:56:ed:bf:57:3e:bf:0d:6e:e7:
         be:10:39:c2:de:75:e4:ac:25:a8:cd:0c:0b:b4:48:0c:b4:f1:
         0b:19:7b:24:11:a1:67:b6:e3:8f:80:81:39:de:9a:dc:6f:6c:
         4c:3f:c0:1c:78:76:2a:8f:c9:9e:9b:d5:5c:9d:3a:23:1a:b4:
         0e:89:84:68:9d:7a:a8:60:49:72:17:4e:e3:00:46:3e:d3:9a:
         27:1d:0f:c4:11:56:c3:dc:a5:81:a9:81:89:9c:c0:38:cc:52:
         ab:68:73:45:e0:ef:39:5d:48:8b:8e:be:7b:1c:cf:b5:c5:29:
         c1:b7:42:b7:a2:c8:2e:a0:9c:c6:9b:43:84:3d:f3:42:d2:d6:
         42:2c:cc:5e:f9:ba:b5:ca:3f:a8:d4:27:d2:d0:c4:dd:b3:7a:
         d5:93:de:2d:21:ec:bf:07:df:8a:94:dc:18:7f:a0:4a:be:9b:
         86:7d:0f:4a:18:c7:45:c9:79:0e:59:60:16:43:87:fe:c2:fb:
         78:2a:ec:7f:b6:2d:3b:0b:0f:b5:6c:1f:67:da:7e:29:ef:c5:
         83:bc:76:92:e0:50:16:8d:42:93:47:a4:fa:59:a0:34:58:a3:
         35:82:c8:af:f6:35:f1:f6:0a:fd:11:12:ae:44:76:b1:bb:d5:
         0b:60:60:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----