Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
File:                     Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft (raw, json)
Hash identifier:          A6fgBhI6K+debiRigZNMgZ2IwRjbKE3nO83Q83xK79w=
Subject key identifier:   3A:0E:A0:BE:E9:C6:E9:17:47:AF:68:64:25:ED:B1:85:97:D9:26:AA
Authority key identifier: 0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
Certificate issuer:       /CN=0e1dd539525a39d847014e8fea3c641d973cc866
Certificate serial:       01962E986AE32CB68A79521785890A20570F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
Manifest number:          046D
Signing time:             Sun 13 Apr 2025 10:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:02 +0000
Files and hashes:         1: 5qU9a0oGWmmroynSN69UsFF4Lyw.roa (hash: ck+/DYuUP9vUcXqAS40voGKy/13DDBxa+VF1/FTp/II=)
                          2: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl (hash: S1NzxUGz9OCs2DlrORltiaF/IPG624YyiOE5WW2vRjE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6a:e3:2c:b6:8a:79:52:17:85:89:0a:20:57:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e1dd539525a39d847014e8fea3c641d973cc866
        Validity
            Not Before: Apr 13 10:01:02 2025 GMT
            Not After : Apr 14 10:01:02 2025 GMT
        Subject: CN=3a0ea0bee9c6e91747af686425edb18597d926aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:da:4f:89:46:66:9c:18:5f:c0:0d:61:23:
                    4c:ea:ee:40:10:45:dd:8d:7c:d4:5c:46:c5:77:26:
                    39:5f:82:38:8c:6a:2d:56:29:53:9f:8c:57:b7:14:
                    86:29:c7:0a:10:77:10:19:3f:9e:b0:e1:1d:27:cc:
                    69:05:9b:1e:d4:52:03:16:7c:f1:3c:eb:a4:d3:bf:
                    6f:e4:8a:ca:60:82:22:e6:9f:d8:0e:99:05:27:26:
                    67:85:f0:81:5b:88:ed:5d:e8:93:f5:94:26:9c:45:
                    91:6c:4e:a1:d0:6d:c2:0d:c1:02:3e:cc:4c:2b:10:
                    2e:eb:75:67:2a:d8:69:53:82:64:41:23:c3:59:6d:
                    9f:3f:af:01:bc:b8:ae:ff:b1:60:4d:8a:d2:1e:98:
                    c0:5c:c0:3a:9a:57:53:ef:f7:04:e5:bf:24:41:21:
                    3d:d5:05:42:c2:be:76:98:0b:d3:3e:30:af:27:f7:
                    ac:3c:20:d1:8b:a5:9c:8b:8c:39:9a:c7:48:3a:cb:
                    5f:c0:6d:72:7f:c7:f4:f8:21:eb:91:93:db:76:2c:
                    4f:4e:58:f3:7a:81:af:b5:f1:85:23:46:f9:db:aa:
                    45:b0:15:bc:09:e4:cf:02:e0:53:c0:d3:a7:c3:bb:
                    ab:4b:e0:bf:e6:76:e1:d7:85:20:44:18:3e:fe:c6:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0E:A0:BE:E9:C6:E9:17:47:AF:68:64:25:ED:B1:85:97:D9:26:AA
            X509v3 Authority Key Identifier:
                keyid:0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:59:01:70:78:37:d2:84:63:18:22:cd:fe:33:aa:f0:85:fb:
         1f:7f:6f:a3:1f:d7:13:a7:89:f3:0c:45:39:cd:95:7a:92:3e:
         35:ae:0a:9c:55:81:6d:79:d3:91:71:3e:46:b1:fb:f3:de:a3:
         cc:7e:2f:45:f8:6a:97:18:13:2b:28:b1:f8:db:47:8f:ac:44:
         ac:ee:7d:3d:41:33:50:1d:3f:1f:16:c1:ae:2e:5d:d8:ff:5e:
         72:2b:2a:d4:3f:06:cb:ed:a8:19:06:b1:a1:cb:41:72:2b:91:
         af:f0:bf:b0:80:b1:b6:e1:49:a5:b4:ad:f2:80:31:d7:26:79:
         25:95:eb:d0:19:56:93:d4:ee:bf:34:bc:59:4c:02:81:e0:4e:
         89:ba:c3:ff:59:0f:e1:9c:cf:c4:54:ee:46:c5:16:36:6a:73:
         e2:8e:0a:bf:8f:88:15:bf:e4:4f:b1:83:22:24:37:d8:e5:43:
         b5:fd:3d:d9:33:0a:ec:fd:1c:c8:2b:3c:df:ca:3e:66:25:e6:
         cf:0e:e2:e0:01:11:59:71:6f:84:97:4e:79:46:c0:3b:34:24:
         ff:a3:90:ce:df:56:72:82:b3:b3:e7:09:3c:ea:e8:8f:a4:f9:
         53:5f:bd:5c:03:c4:ee:cd:bd:3e:4c:e2:88:23:7f:a4:c8:06:
         be:54:97:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----