Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File:                     0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier:          w7rTrUX5sdQf77xTv5l3rYhOivkSJd7f7N9mUhv5iqA=
Subject key identifier:   73:7A:4E:EB:6C:A5:0F:27:90:42:E4:68:B9:ED:8C:9E:6D:96:18:72
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer:       /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial:       01962ECFBB3AF5CEA58A025FBC0F4E9560B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: 9/nAHhVWurZUw8uZvSvCTVjSuIw06man6187QArHmbY=)
                          2: 5Iq99HGOQym0RGozEyZTnwgi5-c.roa (hash: 81JX76zEEyAwuma2A2j1xpYjvTQiYo/8wBvDbJx61DE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bb:3a:f5:ce:a5:8a:02:5f:bc:0f:4e:95:60:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=737a4eeb6ca50f279042e468b9ed8c9e6d961872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:53:1d:d3:16:3e:b5:cf:18:a0:5b:0d:45:5a:
                    74:b0:d7:ec:3a:b2:cc:84:60:1d:6a:7d:65:5e:fb:
                    5a:58:84:4b:ce:54:90:33:0e:9e:78:5b:31:5b:70:
                    60:ae:fe:b9:48:9c:5a:eb:cf:c4:7f:28:3c:d0:d8:
                    d1:7c:15:94:09:7e:02:61:87:37:ed:15:35:59:5d:
                    e1:9e:3e:3d:52:9c:da:1a:cd:0c:be:63:84:76:f7:
                    f9:c7:5b:57:ad:8b:2a:45:16:92:3e:e5:fd:42:8c:
                    f2:6f:61:16:df:a0:cf:26:11:61:cd:40:e0:e0:ae:
                    b6:22:96:41:2b:93:48:2a:62:6f:51:25:e2:30:ce:
                    68:23:38:7b:a5:c1:f7:97:53:09:88:4e:38:2a:0a:
                    4d:9d:50:04:60:18:d4:4b:3a:90:bc:bb:23:92:a0:
                    80:f8:c2:00:8e:dc:bb:52:30:e9:a6:83:4b:21:f8:
                    5f:06:cf:74:ce:6f:ff:3e:a0:6e:85:70:6f:a2:30:
                    bd:e8:2f:34:7e:fa:c6:e0:93:37:42:23:5f:08:a5:
                    3f:d2:06:66:2b:75:50:f2:09:5c:85:32:a1:48:3f:
                    75:ba:3a:72:e1:e9:4e:71:a8:7d:cf:bb:07:95:68:
                    de:a7:6d:8e:80:52:ce:2c:63:5b:b7:67:03:04:33:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7A:4E:EB:6C:A5:0F:27:90:42:E4:68:B9:ED:8C:9E:6D:96:18:72
            X509v3 Authority Key Identifier:
                keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a6:6b:a8:91:75:86:a7:1b:31:6a:4e:15:cd:93:70:33:67:
         d0:1f:e9:ee:00:e4:d1:86:42:58:db:d2:64:9f:1a:6b:c4:d3:
         4f:f9:8d:14:2f:1b:dc:0f:53:f1:02:57:f7:87:60:75:cb:30:
         6a:6a:40:45:e6:23:7b:db:d4:35:4b:b4:07:d1:cb:04:d4:f8:
         e5:b1:78:e1:3e:a4:4a:07:72:a1:8e:8a:4d:62:78:91:a6:98:
         0d:05:02:cd:fe:ea:f8:e9:f5:c3:e8:50:1f:ce:ef:ab:de:47:
         eb:87:c3:e5:c9:80:53:3d:2d:42:67:c1:02:75:3b:23:78:1b:
         bd:22:b8:10:68:45:a7:c9:36:36:3b:29:2e:5b:7a:86:bc:68:
         4b:0c:06:9b:84:e7:78:53:0a:d9:f3:b3:e3:b9:c4:cd:fc:56:
         f1:3e:c3:92:89:2f:65:73:11:8a:08:1b:a5:b9:0c:ca:22:6e:
         87:b3:f1:1b:d8:88:b7:2d:28:9d:b3:1e:6e:d6:09:2a:fc:e8:
         75:06:5d:dc:24:70:67:a5:fe:06:e9:3d:95:8f:33:6e:a6:a8:
         4b:de:2d:fc:98:68:6d:82:1f:ba:a7:e8:86:6f:57:dd:2f:13:
         90:89:8e:32:1a:95:60:0c:ed:37:36:81:5c:4f:dc:2f:d8:98:
         b6:5a:ed:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----