Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File:                     0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier:          L4kg9+FZK5CR0fp2G+WtoRGQ/lwKYRic3artlxTDISE=
Subject key identifier:   36:9D:04:05:D8:E2:6B:3D:CA:80:45:5B:DB:D0:07:F0:24:50:A4:70
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer:       /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial:       01962E61809B6CC3DBC378EA2BD2B086703C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: nP9MHrMlR0uZCbtOnBdCrW/BtboBJzTqj7yEQu6HykA=)
                          2: j-Iupp3EcWQfbMD2aDvdXh5buVM.roa (hash: vNF4TPFh0oVURLAenwqLDdq2RvvuTpEILFtX5lE+Y4U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:80:9b:6c:c3:db:c3:78:ea:2b:d2:b0:86:70:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=369d0405d8e26b3dca80455bdbd007f02450a470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ec:80:3d:e2:a5:5e:49:d0:39:6c:aa:b4:12:
                    69:14:0d:ab:f3:0e:9f:42:e6:cd:be:51:07:3b:8e:
                    b5:a1:e6:1b:a9:4e:34:3f:14:2e:bb:6d:29:0a:31:
                    ce:88:fc:32:33:16:a3:9a:5d:24:ab:dd:8e:53:ed:
                    db:b0:e5:5b:f0:8b:80:c3:74:9b:65:93:c2:5f:64:
                    dd:e6:0b:1f:61:27:7d:3f:30:62:c2:a7:59:a7:63:
                    83:04:d1:0f:27:97:69:e9:1e:ea:bb:2a:1f:af:b8:
                    18:22:15:cd:3b:03:d4:f6:3a:2c:34:eb:49:d6:6e:
                    ad:1f:8d:8e:f5:5e:48:c2:24:9d:90:00:84:da:7c:
                    55:01:df:39:f3:46:b8:0a:bf:8e:46:fb:33:73:12:
                    c6:b3:24:af:87:14:10:86:da:f6:a7:08:1f:64:e6:
                    05:e5:7e:a1:9b:c5:1a:5c:40:f9:d1:c3:92:48:cf:
                    cc:1c:bf:a0:56:fb:f3:e2:bc:e0:b8:ff:31:97:20:
                    c7:30:f2:08:e0:5e:9f:60:e5:2f:17:40:2b:49:5d:
                    94:b7:b8:fc:ef:87:e4:b9:32:fc:dc:b9:2c:f7:42:
                    ee:80:84:17:ff:e4:ee:5b:f1:9b:83:32:28:c5:0f:
                    9c:7a:71:2f:65:04:f3:d9:a8:8f:61:7b:35:46:5e:
                    fc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9D:04:05:D8:E2:6B:3D:CA:80:45:5B:DB:D0:07:F0:24:50:A4:70
            X509v3 Authority Key Identifier:
                keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:10:69:00:9b:f7:0c:98:6f:d9:a4:28:c1:9a:85:cd:75:a0:
         2b:f4:bc:18:0d:62:82:34:1b:13:f5:5e:ee:63:1c:17:81:46:
         48:c0:71:63:d5:f6:cf:a0:b3:57:13:05:3f:5f:37:76:20:01:
         d0:51:41:b5:8b:70:17:3d:0e:fb:c3:94:9d:cb:f0:47:f5:12:
         90:20:bc:cd:89:1f:b3:42:64:88:c9:5f:de:26:5a:f0:4b:71:
         39:32:a4:e4:ef:d1:24:c0:4c:4e:f9:d5:ed:c4:53:a1:b6:c3:
         35:c4:77:97:2e:55:69:6b:0b:10:9f:b3:40:bc:09:47:0c:6a:
         36:fe:df:d7:af:bd:5b:e9:0d:2b:eb:75:90:e2:74:0f:6d:82:
         a7:ca:49:b5:f8:84:8f:0e:70:45:18:7b:86:3f:61:7c:93:f0:
         0a:3d:17:64:56:ef:b1:1e:81:8e:3a:0a:f6:02:45:fe:df:fd:
         18:79:42:27:72:47:d3:b5:e7:1a:d9:f7:c2:65:f1:cf:b9:63:
         ac:94:c3:a8:6d:38:f0:27:20:74:d2:71:35:f8:76:38:b3:3c:
         72:d5:6f:ab:a1:8d:22:74:24:7e:0b:ac:6b:13:b1:71:b2:47:
         27:01:05:65:80:18:76:e2:d7:bf:80:80:57:3d:85:35:f6:15:
         1c:e1:7b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----