Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File:                     _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier:          vd2jff0F2DI1v9z3wlDZdouNHRCTtrONPGos7QKMjkM=
Subject key identifier:   D9:B7:D4:03:71:8C:E4:21:E3:CD:DB:28:F6:72:0A:0D:00:52:8F:FD
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer:       /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial:       01962FAB5893C0ED00BC46774781EE5DA271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number:          0ABF
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: FLJVwq3wzQuxp8jY2tLAT-Rnh-Y.roa (hash: BIb7Su95oQINtrVuibHjqkXlgWcfxoPczkywr4wwUxM=)
                          2: ISP7AwV7T2uPChZASc5YrPiTlkk.roa (hash: oFTsPiIdNPqfQz+HEt0vWKZqmx2ZRwTaVu/Xdt0P09Q=)
                          3: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: dcBBeOpMnZUTsQtPylobyOuXYc6Qcu1bVsCsrDiDyic=)
                          4: _tDDtYeC4guX6wO-zUHsidoSz_E.roa (hash: 8nbY0JFVrWrDRZsP3hnIFWTN85PCkZ4W8FZDcNxDifM=)
                          5: knqD2Ha_mIK6TeaUs6rdEtXjm7Y.roa (hash: IG4vqFBPbvWgHsxQujBWqMW5v3cVtaifoxJ+vZ5e8BU=)
                          6: t9sNc0uQI6gHaHDMTUeW7X8c5pI.roa (hash: I2z+OvE8dHq8WvzVKbss4tbH6KggeV9GWqIKnOXdtk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:58:93:c0:ed:00:bc:46:77:47:81:ee:5d:a2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=d9b7d403718ce421e3cddb28f6720a0d00528ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:f7:26:de:33:02:eb:25:f2:14:a7:d2:79:
                    88:fc:42:15:fb:28:a1:43:fc:8b:5e:a7:1d:59:a0:
                    ea:c8:fd:de:fc:8a:5b:93:1a:2f:86:c0:f7:a6:f9:
                    e2:81:fe:55:88:4f:89:a2:f8:bf:be:27:57:f4:a9:
                    d9:f5:00:50:f5:48:4c:59:cc:cf:e3:fe:66:dd:c6:
                    85:83:c2:d1:9a:2c:48:e1:91:60:d8:f7:7e:16:a7:
                    3d:23:dc:45:aa:02:92:a7:04:ff:05:a0:f1:d6:81:
                    c7:98:89:cf:43:cd:12:b8:2f:61:eb:9e:c9:99:c6:
                    37:d8:89:bb:ea:8e:04:27:99:b7:e8:a3:5c:29:6d:
                    6e:96:41:dc:d9:24:9c:2b:02:75:b6:20:c2:54:5a:
                    ad:a5:08:c4:36:49:54:1b:2f:2c:be:8d:6f:75:06:
                    87:5b:e6:60:b4:fb:1a:10:cd:55:5b:c2:ac:31:c9:
                    d8:29:7d:ed:4a:75:c3:d2:44:92:c6:6d:c3:9a:59:
                    d4:2b:a7:d7:de:da:13:b4:fa:f6:07:08:a9:e5:96:
                    4b:2d:c9:fc:c9:7c:99:b2:a3:8e:ba:41:66:fc:ae:
                    b6:33:a1:46:cf:60:d7:13:f5:38:ab:67:dc:40:1d:
                    71:73:28:75:ba:c2:df:34:f1:f3:c4:36:3c:bf:e9:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B7:D4:03:71:8C:E4:21:E3:CD:DB:28:F6:72:0A:0D:00:52:8F:FD
            X509v3 Authority Key Identifier:
                keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d5:5d:ac:2c:22:9d:cd:3e:a9:e8:4d:6a:7b:b8:47:8a:78:
         02:cc:bb:11:ae:e2:d5:2a:e1:f2:55:48:61:88:58:96:04:83:
         41:f5:9a:df:97:64:90:65:e6:7d:6d:57:04:83:fe:a9:3a:bb:
         0e:70:39:a0:a8:b4:a8:3e:3f:61:bf:d1:45:67:48:80:e1:c7:
         ab:28:d3:01:4d:98:9d:1f:94:c3:c7:46:d7:c8:37:f5:0d:65:
         46:de:d7:98:c9:3e:32:8b:ee:c6:8f:7c:ce:45:e9:31:44:52:
         33:31:d5:44:6a:20:47:c6:84:fb:4f:51:f4:b9:72:3c:ff:c6:
         e6:ca:0e:08:66:b9:59:0d:26:66:66:c6:c9:93:a8:ad:04:5a:
         9d:1e:37:8e:22:57:1a:2b:af:b4:ac:fa:a3:17:54:00:b2:6b:
         02:dd:be:0f:35:7d:86:f0:4a:cc:47:1e:0e:b5:1a:6e:37:33:
         16:7e:57:5c:d5:e7:b9:ea:52:33:4b:38:7f:ed:9e:71:0e:b2:
         74:c8:15:21:70:f1:98:5d:af:3b:47:b5:71:b3:be:77:7a:ea:
         7e:bc:8c:76:89:db:a3:02:a7:8a:3b:8a:28:b9:06:bf:ea:6c:
         e5:dd:ff:18:64:1f:47:ab:36:db:77:0d:7b:e4:5d:09:2a:4d:
         c6:be:11:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----