Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File:                     DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier:          KkjFwScy0EB7yr29HYoVa2NfLmOpWBkDsQ3NtnsOh6M=
Subject key identifier:   70:F3:9B:15:41:FC:3D:38:63:D3:D7:9C:51:B8:2B:95:FC:AA:0D:CA
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer:       /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial:       01962F3DE1A5094593DA91695C23E3B8466F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:46 +0000
Files and hashes:         1: 3yv-zmmgfXirN5akYyOZ225Erpo.roa (hash: K+9VHB7ShEik6QpuUx3J66d/K6RXrAo5ZliJg0jvNJw=)
                          2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: 7vT39OTkYzy5lbj3PMLTmqzvXUuxxpVtDOEe2Fk8WVE=)
                          3: PDj9CbhapwaiDPTHl4V_zSatG1U.roa (hash: y9pPTUUi0Tga4prSiUslZJiX9MosJ/c0ePSWJE6OCf4=)
                          4: jF8Pgd5Bgl8f2cMDpAgMnJwOiNM.roa (hash: pnp8ADM8uhliAwKsnA0g8scyokzHgOV+zWcR7wMxlws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e1:a5:09:45:93:da:91:69:5c:23:e3:b8:46:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
        Validity
            Not Before: Apr 13 13:01:46 2025 GMT
            Not After : Apr 14 13:01:46 2025 GMT
        Subject: CN=70f39b1541fc3d3863d3d79c51b82b95fcaa0dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:57:ea:2d:55:f0:c5:fc:2a:89:6a:42:7d:a6:
                    dd:a9:ee:d5:40:7e:09:e6:7e:5d:5d:59:24:0f:45:
                    96:fa:98:4b:5c:9b:da:c7:14:c1:da:ff:f1:bf:90:
                    8b:01:71:35:38:1d:95:f1:cc:3a:44:90:c6:38:e5:
                    b9:8d:42:de:d3:ab:75:d4:68:8e:22:95:50:82:02:
                    fd:75:bc:e8:a6:43:aa:ce:8b:ee:f5:a4:7f:5e:17:
                    20:4f:4c:51:45:d4:21:f0:85:60:25:16:10:7a:86:
                    8e:2f:ec:8c:a6:22:da:dc:6b:4f:30:d3:97:1d:23:
                    3a:9f:89:af:80:0f:4d:41:35:1a:c0:98:f0:46:e8:
                    cb:6e:f7:b7:fe:e9:51:94:5a:9a:3c:c9:bd:a6:95:
                    3d:f6:e1:a9:c2:73:d4:ec:5a:15:c5:22:a4:b8:03:
                    81:30:c5:02:20:ce:d8:60:d4:83:f1:ed:90:58:40:
                    b3:a1:24:ee:0e:be:60:4d:71:21:09:c6:2b:5a:8d:
                    17:98:d0:77:1b:88:cd:67:21:6d:d2:86:48:a1:a9:
                    dd:41:8d:90:2d:dd:ec:91:70:06:59:7e:58:37:4e:
                    be:b3:44:51:76:df:80:3b:39:6b:ff:99:57:3b:76:
                    67:a7:d6:97:04:b0:83:68:6b:be:ba:2c:e1:7f:67:
                    d5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F3:9B:15:41:FC:3D:38:63:D3:D7:9C:51:B8:2B:95:FC:AA:0D:CA
            X509v3 Authority Key Identifier:
                keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7b:4e:db:95:16:f5:36:69:49:3a:a7:be:16:52:73:64:bf:
         e2:18:7f:28:e1:98:a4:16:bb:7d:0c:4c:ed:18:5b:b8:6a:89:
         cc:ec:1d:4a:de:06:ed:71:2e:b1:b8:70:f0:de:8a:37:15:e9:
         9f:ee:5e:21:75:e4:e9:75:79:2b:03:93:45:97:37:b9:56:1f:
         bc:eb:c3:f5:de:52:47:06:ed:b1:01:86:00:6c:76:c8:47:ec:
         d2:8e:c7:b3:bb:5d:cd:75:ec:8f:12:87:fb:86:76:0b:4b:0d:
         24:03:2b:26:04:0f:c3:54:ee:23:a6:d1:3f:3c:6e:87:cc:78:
         22:89:a2:09:ed:cb:57:f3:51:8a:43:5e:fd:c1:1f:1d:c4:bb:
         02:41:df:d1:7b:1f:ea:47:b7:87:de:4e:c6:32:cd:35:86:db:
         7d:ef:a0:6a:48:d7:11:7d:8d:f7:5f:e4:c4:b3:40:7f:b5:50:
         4a:d7:39:4a:c5:8e:f6:93:4b:64:48:c2:47:69:78:5e:b4:8e:
         20:b4:9b:54:40:c4:43:c7:09:e3:89:d9:99:ba:17:f6:51:27:
         ac:2f:10:c2:86:2b:1e:9d:5d:5e:c3:2b:8f:54:17:73:11:94:
         46:49:78:f7:01:6d:3d:44:45:0e:dd:35:d4:7d:dd:3c:11:b4:
         ed:b2:7b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----