Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
File:                     DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft (raw, json)
Hash identifier:          Vh8YyGQ/SgJiMrrH8eNhciHpMWvOBuJ+bL4KipTZDmg=
Subject key identifier:   47:16:4C:48:12:EA:AA:9F:FE:1A:55:3A:75:ED:B2:B9:16:A1:01:72
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Certificate issuer:       /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial:       01962FAB1C7BB63AA05B0AD0728936FD87B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
Manifest number:          1212
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl (hash: gFFW6mRcvaHNPCTltZ3VuXbIX3UB96SPqR1PojVaZpA=)
                          2: v5vd3x3XjeefXJEwufhUGGb4X2s.roa (hash: Q56G00WWpMRZXSZJI+Ae5yRJxVdvk5MUrhK76sZeFtc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1c:7b:b6:3a:a0:5b:0a:d0:72:89:36:fd:87:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=47164c4812eaaa9ffe1a553a75edb2b916a10172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:59:30:33:3a:49:65:f6:51:8a:86:9f:65:
                    48:a4:71:28:10:00:d8:a2:50:7f:09:c3:ce:96:9c:
                    68:24:55:ef:39:1d:7c:b6:b2:e7:dc:0c:2c:bd:b6:
                    12:86:17:9f:bd:d0:69:02:c1:0c:01:27:e3:a5:16:
                    24:ea:90:29:39:38:56:4c:af:13:9a:5c:ea:29:fd:
                    bf:41:ab:e6:da:42:93:9f:07:cf:fd:aa:2a:38:98:
                    5d:83:5e:72:1c:71:1a:8a:73:1a:03:f9:d9:82:78:
                    f4:02:65:1c:34:71:79:7f:86:91:39:59:01:3a:65:
                    9e:b0:6b:a4:de:41:0c:13:29:f7:59:da:a2:a8:d3:
                    6a:01:b6:ef:16:5a:10:77:ad:e7:c8:38:24:e7:a9:
                    16:61:8f:c4:97:f8:b1:e9:a2:e2:bd:43:e1:f9:12:
                    43:29:8c:66:54:54:1e:0f:99:53:1d:a3:01:78:62:
                    0e:1b:e9:37:f7:5b:17:d9:9e:d5:ad:65:9b:bd:83:
                    48:7a:2b:8a:fd:7e:2c:e2:02:cb:63:71:e8:8e:49:
                    e7:7f:66:56:13:ea:8d:48:74:10:61:65:7d:ac:ab:
                    67:d4:a0:b9:57:eb:0d:c7:f2:fc:dd:16:4b:2d:78:
                    04:87:4c:d8:96:33:7d:cc:9a:de:49:45:0d:d8:d7:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:16:4C:48:12:EA:AA:9F:FE:1A:55:3A:75:ED:B2:B9:16:A1:01:72
            X509v3 Authority Key Identifier:
                keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a2:5e:be:3a:c4:6e:02:95:84:64:64:7f:24:3f:8f:b1:16:
         83:ce:b5:e6:84:b0:25:b1:b6:b0:0c:c4:55:ec:b2:c7:aa:7d:
         61:ed:8e:a5:31:20:b8:5a:c9:84:42:82:97:5d:3e:f8:92:fa:
         b6:e2:18:8c:5c:57:b6:1d:5b:bc:70:4c:9c:56:95:d3:b2:35:
         5c:7d:d7:00:17:99:3c:f9:d1:9f:e3:33:70:4a:67:4a:98:9f:
         99:92:36:84:e6:1b:e6:1e:7c:52:7d:de:a4:04:b9:bb:44:f6:
         7a:40:ce:2c:ab:5f:51:a6:75:a3:a1:d6:c0:30:bf:86:84:b7:
         c9:fa:9a:af:52:ce:1b:c5:bb:e2:e1:a2:a6:96:62:0f:07:70:
         dc:7e:64:f7:72:95:54:07:f4:4d:5b:e5:af:b2:2e:94:22:94:
         8c:b3:ed:81:b3:20:da:15:68:a8:f3:01:89:e7:04:d8:96:99:
         fa:ef:bf:67:c2:99:1d:01:63:13:46:ad:d5:91:28:bc:3b:cb:
         9d:04:38:fc:89:4f:08:c9:6e:04:a3:3c:87:45:ab:0b:ab:23:
         c5:65:e0:a9:ab:d8:3c:7b:3d:d2:fa:ab:88:88:4a:3b:6a:65:
         13:60:20:e7:5d:e4:ca:cf:6b:1b:4b:9f:7a:db:1f:0b:6d:f6:
         cc:cf:36:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----