Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File:                     DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier:          JU8fY1dCd2EiowVlR3t8aYHPQAtf19RTF/3/5DLFFeU=
Subject key identifier:   A1:53:93:E8:7A:5F:EA:88:42:07:31:12:92:45:0A:B5:93:A2:F3:66
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer:       /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial:       01962E2B339D737C278AC2038E70A7D346D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number:          05B9
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: 7j43t3dg2tP3DSKOOyDvFDPSQ0E.roa (hash: +Rb8Ckbhx24K2SYro30q4c7lAYAS1/PtJbtnZ0q2YK8=)
                          2: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: Xpu1jdZv8TSauPaXuPDQ8W6Z2eMl9hx9z918siW0J68=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:33:9d:73:7c:27:8a:c2:03:8e:70:a7:d3:46:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=a15393e87a5fea884207311292450ab593a2f366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:5d:9d:d9:c7:34:97:3a:64:8a:c8:c5:28:
                    d9:f7:5f:0e:e5:05:2c:cb:2f:69:ef:24:68:a0:36:
                    a4:c8:19:df:34:99:6c:d6:b4:7a:8c:23:28:6c:0c:
                    84:c3:a8:63:78:5b:39:2e:c7:82:d5:58:10:dd:ea:
                    41:fa:af:38:18:b0:53:55:16:35:d6:6b:a0:ec:86:
                    b0:ea:cb:69:39:17:24:fd:b9:e6:02:de:2f:eb:e2:
                    07:27:0a:48:00:12:45:96:d1:fd:3e:d0:23:90:b8:
                    ed:3d:8b:02:86:4e:4e:fc:27:f5:f5:4b:69:d6:46:
                    bc:24:8b:1a:77:0c:00:2c:31:d5:0f:06:ed:30:31:
                    11:8c:93:6f:3a:81:ab:62:60:e1:3e:05:24:1b:54:
                    b8:50:9f:34:41:80:05:f9:91:91:dd:21:fb:d9:aa:
                    18:3c:74:08:64:5f:c9:5d:06:d2:5c:d6:ed:08:da:
                    dd:e1:31:9e:7d:38:38:65:b2:9e:ce:b3:ea:cf:6a:
                    96:b6:96:2d:21:93:5b:7c:8e:75:4e:9c:c4:23:a1:
                    c6:31:7f:b1:00:5f:51:1b:4b:09:a9:f9:23:59:81:
                    c5:36:20:c7:0d:6e:26:10:3f:2b:cb:19:63:ca:8b:
                    0c:4f:4b:59:d2:6e:16:6d:33:43:49:bd:e6:e7:be:
                    d6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:53:93:E8:7A:5F:EA:88:42:07:31:12:92:45:0A:B5:93:A2:F3:66
            X509v3 Authority Key Identifier:
                keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:22:71:eb:8a:22:db:dc:b5:3b:bb:68:52:4c:0b:4c:5d:d9:
         49:20:f2:82:1d:65:5c:b7:01:76:ce:09:af:e0:c6:9d:76:28:
         d0:b1:7d:62:d4:7b:f9:62:0e:f2:5e:13:9b:c4:24:d7:a6:58:
         aa:b3:e4:f2:3c:81:23:3d:82:e4:1a:58:8a:f5:a6:1c:7c:1f:
         c2:44:cd:c3:c8:de:85:7e:47:aa:30:61:30:d3:90:89:32:c6:
         e2:f0:ed:b3:dc:c2:9f:92:cb:f6:84:8e:57:73:1f:81:24:91:
         37:e6:75:16:0c:fa:4d:4f:35:09:a4:ef:87:0e:11:f3:a8:08:
         de:cb:d9:56:a0:b7:4f:a7:3e:a4:6d:6d:fa:63:26:4c:24:c0:
         38:34:36:a5:19:bf:49:b7:4b:47:8b:e7:46:ef:7b:4d:34:25:
         89:72:54:f9:3f:b1:f9:19:f9:99:93:f6:91:a0:35:37:50:cc:
         79:c3:9b:98:53:eb:cb:47:c7:32:99:49:85:9f:2d:01:23:1d:
         2a:5a:79:8c:87:60:3f:6d:a1:af:b4:34:ff:1e:4c:47:4d:e6:
         77:b3:fa:9c:5b:e3:83:1c:fd:60:35:c2:44:d5:3c:91:61:86:
         43:73:78:9c:67:90:67:f7:83:80:c7:fb:c9:df:dc:3a:eb:1f:
         16:6d:d9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----