Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File:                     DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier:          fvwhfnwjwV5YL2U1nKrBFpRnTOWwEhekxDvbvNJ/i7g=
Subject key identifier:   41:27:30:52:E8:6E:EA:23:E4:3A:27:7B:60:F5:56:E1:FD:63:0E:DB
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer:       /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial:       01962F74CBCC204074025664683BC21F52D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number:          0E13
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 12Zahr8ypxTDNrQSGTJX87wf4FU.roa (hash: 1xnPEzPjKosfERE7d2w2vVj9bJxLTdzPRRY8ixKvDnU=)
                          2: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: umS3TX/DKn/ZGCFq6LlVJUVJjTrXrQgOUWqPp1QqQLo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cb:cc:20:40:74:02:56:64:68:3b:c2:1f:52:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=41273052e86eea23e43a277b60f556e1fd630edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:46:10:64:f3:27:bf:df:93:09:16:de:5e:
                    c8:2e:86:52:97:65:ac:94:4d:a4:bb:f9:e5:5c:bb:
                    c4:c9:c5:77:2a:4e:7c:fe:a8:4f:53:b1:3e:d9:54:
                    af:13:0a:ea:cf:25:9b:10:15:42:87:eb:b0:68:03:
                    b2:2c:fa:2b:97:ed:3c:9c:45:7d:26:b7:b0:13:7b:
                    ca:fe:34:ae:98:b0:8c:d7:8d:16:0c:4b:c9:ce:eb:
                    aa:da:93:57:c1:a6:48:54:c7:3a:30:d2:31:40:3a:
                    d8:3f:28:6e:fc:a0:60:bb:df:f3:9e:0c:00:a8:52:
                    21:b4:d4:a0:1f:7f:d8:0e:21:c1:71:09:da:b3:3d:
                    d5:40:ac:aa:cb:f1:28:a1:36:c5:61:60:ff:31:7f:
                    46:20:2d:29:27:bd:99:a4:67:4e:59:df:02:3b:5b:
                    f7:4a:ba:73:3f:49:a3:49:81:1e:4f:5a:e0:1b:37:
                    78:e1:8b:ba:c7:f0:75:26:c8:bc:34:7f:ed:d9:95:
                    e0:de:3e:8e:ad:36:32:98:fe:3f:ae:e6:7c:74:dc:
                    78:b7:63:5a:5c:96:96:78:30:21:f2:eb:a5:fe:d8:
                    03:95:c5:06:ce:47:0a:20:72:52:a7:80:ea:ef:79:
                    08:ad:dc:f5:ad:aa:0b:46:d9:ff:b2:5d:29:91:cb:
                    16:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:27:30:52:E8:6E:EA:23:E4:3A:27:7B:60:F5:56:E1:FD:63:0E:DB
            X509v3 Authority Key Identifier:
                keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:e2:f8:4c:8a:46:25:fe:3b:24:54:2f:cf:b9:44:99:35:42:
         08:36:d7:14:3b:a7:c1:2b:86:23:d9:a3:7c:69:ce:d8:4c:1d:
         db:ac:af:48:b3:f4:80:97:36:ed:a9:2f:ba:52:6a:b5:90:50:
         2b:1c:0b:78:d0:45:72:29:d8:57:3e:63:23:41:20:2b:e6:8d:
         09:3b:22:61:cf:de:ac:e8:04:cc:a8:5a:5f:21:5f:03:82:08:
         2e:90:41:e4:6d:cd:ab:6a:f0:86:69:5f:3e:3c:83:1d:56:4e:
         f2:c3:d5:dd:88:25:ff:66:e2:9e:c0:25:8b:7f:e3:7a:9f:bc:
         67:74:e2:9d:0e:bd:e2:8b:3e:f0:5d:bc:a5:05:c3:1c:94:f4:
         48:81:69:06:84:85:c3:c5:02:94:94:f6:90:d6:71:5b:7f:3d:
         8a:2c:64:10:23:63:20:6e:e0:72:5a:9d:4e:02:7a:02:e3:7d:
         5b:a7:dc:ec:df:73:65:8b:5a:21:d3:51:0e:79:22:ce:fd:00:
         34:2a:4a:bb:d5:c6:d1:e7:51:9f:a7:cc:2e:b2:3a:43:c1:1a:
         71:d3:c7:c6:5a:d7:1b:38:02:e5:be:37:e1:a4:80:bd:c8:78:
         a5:2a:8c:5a:8b:60:4f:9e:43:a5:07:e9:a6:2c:c2:5b:61:4d:
         41:0c:9d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----