Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File:                     DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier:          VSeWoHniPcgvIA0Zc+fxURuA/4Sc4tSaDRrLTsBxhQk=
Subject key identifier:   60:A4:9C:A4:A0:B1:8B:BF:4D:82:FA:3F:AE:6C:9C:62:EF:6F:94:EB
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer:       /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial:       01962E99A8DDB88B6758B6371DF8A3292A3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: 5zY8cTJ9_ultsIEeFLr1owXqfpo.roa (hash: uKuIcfTOzja04k3xKWkz2SqmI76812eF5kHKV8ubvHA=)
                          2: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: 92TpCC6eB4mXMtEptjmEteXrEcWHteP++fIpmq1x9ko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a8:dd:b8:8b:67:58:b6:37:1d:f8:a3:29:2a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=60a49ca4a0b18bbf4d82fa3fae6c9c62ef6f94eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:52:fd:8d:8b:c0:1f:42:30:64:e2:51:17:
                    fd:00:87:60:c3:f3:3b:66:35:f1:59:87:b8:aa:92:
                    d3:20:e2:fb:f3:1c:40:7e:56:6a:4f:10:39:be:ab:
                    eb:c5:52:24:6d:a3:f9:72:c2:b2:66:59:da:c3:08:
                    fb:ba:cd:f4:81:41:17:db:45:fc:fa:29:26:d1:3b:
                    52:67:6d:b1:92:b1:7d:c5:1c:bb:4e:3f:a9:a7:76:
                    65:a2:1b:53:9b:13:b7:87:c8:18:9e:1e:e0:8c:45:
                    10:12:3c:5b:20:54:2f:0c:12:73:4a:11:ef:11:23:
                    1e:85:ef:2b:07:06:7e:7a:cc:3e:a5:98:7e:7b:9d:
                    4b:fa:b9:6a:17:e1:59:c1:5f:9d:94:a1:26:95:2e:
                    09:7b:bc:a8:99:c4:29:86:e7:8a:67:a7:09:38:fa:
                    d3:1b:89:04:76:db:3e:ff:43:59:44:80:2d:f2:d0:
                    20:d6:61:1d:67:2f:55:68:2c:62:92:3b:fc:0c:7f:
                    7a:3e:ef:12:15:2c:11:00:4a:64:ec:68:8b:84:df:
                    ba:d1:33:90:9a:2a:3f:a1:65:a1:fc:e5:51:ba:a9:
                    0a:a4:b3:b3:b0:d0:3b:08:38:81:cd:4b:cf:aa:9a:
                    70:c0:e3:18:2f:85:71:3e:0f:33:f5:da:36:db:88:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A4:9C:A4:A0:B1:8B:BF:4D:82:FA:3F:AE:6C:9C:62:EF:6F:94:EB
            X509v3 Authority Key Identifier:
                keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:0d:a0:8d:8b:8a:cb:2a:d4:ed:40:0c:92:fc:ce:9d:7e:b3:
         1a:c3:a1:9b:48:af:a9:1b:e7:5a:e1:27:1c:14:04:a3:8b:64:
         ac:0f:f0:1e:e0:0e:f8:9f:c5:ed:3d:b2:34:9d:3d:d0:0f:15:
         20:b2:4c:fe:b6:99:da:a6:e1:53:09:9e:0d:e8:8c:9f:ec:c3:
         e6:55:cb:dc:59:76:65:0d:e7:6e:5e:53:d2:fd:8c:30:4b:cc:
         cf:da:3c:7e:2c:67:c1:db:f0:a9:32:68:8d:eb:6c:f6:71:ee:
         d7:98:53:1e:ee:72:20:4b:2e:99:2f:7b:57:1b:e1:99:65:33:
         a2:9c:47:d2:84:a9:0e:be:7a:a2:3d:90:e8:a1:55:b5:38:7e:
         05:fd:31:7a:c7:cb:cc:05:b7:f7:53:4b:7f:f3:9a:bf:77:27:
         c1:5a:4d:dc:ca:33:f0:a7:d5:8d:10:1b:69:4d:09:1d:6a:db:
         75:cf:e3:0a:8f:92:a5:d5:20:54:82:97:4c:2c:10:34:6f:a5:
         0e:64:34:c3:29:90:88:2c:35:60:47:5a:58:d9:94:47:e4:f5:
         db:48:42:f6:c7:8b:51:0b:ae:7a:a5:15:3e:0a:e9:0f:90:c7:
         d0:10:7e:c8:aa:4d:05:3c:ba:cc:4c:c1:6d:5c:30:0c:89:44:
         9c:a5:05:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----