Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File:                     DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier:          97DzI+rhhyD0QP9tKdjVXDymzYZXaFxYS7f8JzVdF1s=
Subject key identifier:   5E:64:95:19:17:08:9A:40:22:9B:A4:F5:8E:B5:A9:8F:3C:87:D5:B4
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer:       /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial:       01962DF40843433CBACCD50527971AE492E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number:          0CC5
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: ZtqfpkQ19Nmr7/sYMeuLTIE4oL6oGWTQ+muxJgmY/7U=)
                          2: NWAGhC2XbatfDitWodooC7bbFFI.roa (hash: FWUOW7wQ0G0TGl1V+k/KtSrSZ/FDNVfXj5gqfrNEtSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:08:43:43:3c:ba:cc:d5:05:27:97:1a:e4:92:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=5e64951917089a40229ba4f58eb5a98f3c87d5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ad:3f:cf:65:97:46:a8:f1:37:f8:bf:f4:3d:
                    b1:f2:9e:5a:78:9b:ae:06:a5:1e:05:82:dd:09:b5:
                    6c:79:a7:4e:6f:1f:b6:27:65:68:ee:cc:f2:6b:87:
                    7d:23:0a:15:36:6a:80:d2:c0:2e:18:e4:67:e9:b6:
                    c8:45:0e:3e:5e:60:90:fb:f7:ad:fb:5c:6b:01:c2:
                    25:33:f4:e3:27:d0:f7:2a:e4:2e:58:6f:b4:b1:10:
                    9d:a4:9e:08:c4:01:95:f1:38:66:5e:50:8e:30:54:
                    17:e0:4b:6c:0c:4d:77:97:d1:93:14:8d:9e:22:5a:
                    8f:df:90:6a:13:a8:12:35:19:e2:9b:4a:e0:aa:d7:
                    d8:d6:f1:70:dc:9e:86:aa:e8:19:06:75:6e:ae:ab:
                    4f:60:85:f1:62:7e:80:60:dc:92:a6:59:f2:8e:bc:
                    67:74:81:32:15:5f:a9:8f:10:03:8d:e8:99:12:39:
                    60:cb:c7:ac:8e:e6:ea:13:29:9c:f2:ad:d2:7e:6c:
                    11:61:c3:91:b8:56:3e:3e:a8:21:98:1a:b5:4e:cb:
                    f2:09:69:ee:62:3a:9e:94:69:c2:de:35:4e:92:fa:
                    df:04:7a:2e:bb:ab:8b:93:70:b3:62:f5:4a:04:7b:
                    db:af:54:4a:12:56:00:61:5c:01:74:00:5b:b8:2c:
                    34:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:64:95:19:17:08:9A:40:22:9B:A4:F5:8E:B5:A9:8F:3C:87:D5:B4
            X509v3 Authority Key Identifier:
                keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:32:30:9a:8e:75:03:a5:2d:0e:28:77:06:ea:0c:78:90:4c:
         83:bb:e5:13:6a:ec:19:f0:cc:53:fe:eb:50:04:12:4e:ff:b8:
         b8:3d:9c:18:f0:64:6a:fc:42:f8:69:75:1f:04:c8:ca:dc:e1:
         2a:18:7e:c1:e0:4a:86:16:42:8d:2d:14:6e:c3:2a:b9:ca:88:
         d9:4d:89:e6:a0:e3:fa:8a:f5:7b:a5:be:75:f3:a9:62:a1:14:
         f5:39:d2:bb:cf:df:30:72:29:d9:07:1b:e6:af:ac:9d:85:cb:
         75:c2:03:da:e9:9e:69:0c:7e:12:75:38:4c:59:76:77:81:68:
         0a:99:50:a3:2b:35:a2:15:f1:54:57:bf:1f:1c:f8:11:c0:2b:
         80:79:b5:cf:7d:87:44:75:a6:4d:4c:d9:3c:cc:58:98:98:1b:
         8e:6b:fc:ae:06:2c:00:a5:ac:14:d2:45:ec:c2:77:e9:b8:98:
         be:d5:31:d2:bb:69:c8:45:43:34:ab:52:c8:62:d2:57:ec:d3:
         12:60:6e:78:f1:cb:da:d2:31:bb:f0:fa:fa:c5:89:6a:75:87:
         71:7c:41:2d:59:e0:13:fd:79:99:f0:e8:3e:a7:63:f4:08:36:
         9a:76:bb:1d:d7:da:bb:bb:4e:df:6d:81:93:05:a2:06:de:91:
         e1:f6:d4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----