Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
File:                     DkTxM_OHWTqvor6rOIhJBPrJvRk.mft (raw, json)
Hash identifier:          +px9sXJpt00NCUJ4FVnxuka5h2d3nSFMvRhtGry5I4c=
Subject key identifier:   D6:28:FA:D2:50:C6:7D:90:47:CE:28:30:CD:E7:32:55:FF:95:38:84
Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
Certificate issuer:       /CN=0e44f133f387593aafa2beab38884904fac9bd19
Certificate serial:       01962F74DB6606325E11E1E4D2CB1772A341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
Manifest number:          0176
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: DkTxM_OHWTqvor6rOIhJBPrJvRk.crl (hash: oqODei278L8c234AxnYCHHifLPFP6gG45JqQjAapdKE=)
                          2: Wiv0DHdRF2zh8D5DY6J3_PLSV6Q.roa (hash: /xs5AGgsSlLOCnLD+1aaT+DfL+K36ivL9muQHygs7c4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:db:66:06:32:5e:11:e1:e4:d2:cb:17:72:a3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=d628fad250c67d9047ce2830cde73255ff953884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a1:c5:82:4f:95:d9:f3:13:02:88:50:fb:1e:
                    a1:43:22:03:16:df:da:24:2c:7e:37:d3:d9:c7:84:
                    6b:8b:14:ff:e8:34:e8:4f:2b:09:92:49:d2:d7:2a:
                    95:a6:a2:a4:12:d1:2f:46:f0:04:36:b3:a9:b9:b8:
                    d6:3b:98:f9:07:8b:b5:39:5c:29:87:2e:67:47:2e:
                    37:58:ae:86:e2:18:a9:76:07:00:95:b6:c0:aa:8f:
                    1a:d2:a8:38:c6:5e:6c:53:fc:5e:aa:1d:9b:0e:8d:
                    e8:5d:78:6f:a3:85:ca:38:b6:7f:a6:b1:6b:46:b5:
                    7c:93:7f:d2:fe:f1:0c:f1:dc:8d:c0:1b:c1:57:4b:
                    51:d6:c8:c7:42:b7:0f:de:07:75:62:4b:7b:8a:8d:
                    15:57:53:32:44:45:5b:65:47:e1:3f:d1:3a:9e:6c:
                    c3:3a:bf:2c:66:46:eb:b5:61:5e:a9:1c:4f:49:09:
                    e8:e5:6a:85:5f:73:b3:ef:ce:5c:3b:22:98:d6:66:
                    74:af:4e:e0:81:1b:19:12:f0:40:ad:f3:26:75:83:
                    cb:22:14:a4:66:46:0d:8c:28:b1:b8:db:57:54:0e:
                    02:67:3c:79:6a:81:b5:45:1e:37:9d:54:a3:fc:60:
                    c0:e8:3a:28:e0:6b:f8:fc:85:a8:48:ef:bb:95:ab:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:28:FA:D2:50:C6:7D:90:47:CE:28:30:CD:E7:32:55:FF:95:38:84
            X509v3 Authority Key Identifier:
                keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:48:66:03:c4:2a:60:89:59:97:34:59:6c:26:4e:0a:54:ea:
         33:cf:d5:63:d7:8e:6c:00:cc:e6:64:8b:6b:d8:7c:80:d3:31:
         2f:c7:25:2c:e0:15:dd:28:91:3d:ef:7f:fd:e6:10:eb:73:65:
         5e:a3:48:08:59:ce:db:4b:ee:74:93:a0:58:cf:cb:ab:b9:c5:
         a7:5b:c4:ce:85:f8:fe:49:0a:7e:58:9c:1f:78:3d:1a:8f:88:
         83:94:d7:39:59:5b:49:9e:8c:93:5a:4d:7e:1a:f3:3f:7d:6b:
         40:3b:fd:83:e5:22:a1:e5:d6:7c:42:33:ef:16:c7:9e:97:c6:
         5b:30:1e:36:c6:2b:36:a1:c4:b3:d7:43:2a:a6:e0:9e:9a:50:
         5d:39:17:d6:4d:a3:6a:2f:eb:da:da:19:7b:8c:a0:48:d9:bc:
         29:9b:d4:df:76:32:52:8d:fd:b8:38:d9:ef:0a:2c:41:cc:f2:
         f7:04:a6:80:81:a6:5c:2e:03:60:4c:44:ef:2f:1e:0b:58:7f:
         c4:10:39:5c:19:71:0b:b2:7f:ef:ef:cd:23:8d:89:69:1f:aa:
         11:87:ea:79:09:3e:d6:34:e6:9a:97:26:02:b6:cb:0f:63:6a:
         0b:eb:1f:c6:b3:ec:c6:c4:5d:a2:57:51:31:73:ed:fe:c9:5c:
         68:06:01:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----