Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File:                     0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier:          CZkliIH0C5yCIF68DLtRKSSnjKzPZQkfB/5RuY92rxE=
Subject key identifier:   2C:67:9E:F4:E4:A1:9E:E8:D4:B0:82:6E:28:A5:B4:CF:84:A4:85:3D
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer:       /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial:       01962F0701DFA3C81F9E3D5096F45A6847F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: R9Mt4J892BwIwWERJDQVUHmdGEq3Ucj+iHnvz6EoFpE=)
                          2: cednPNYKxfRsr4W4osQ0UxWr_xg.roa (hash: bAnClABodJAGvw6mOL61pHv3A1a0Gmryz3vjrqAKOxo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:01:df:a3:c8:1f:9e:3d:50:96:f4:5a:68:47:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=2c679ef4e4a19ee8d4b0826e28a5b4cf84a4853d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:74:c0:fc:82:d3:55:fe:6a:a2:3e:67:f2:70:
                    d4:93:d1:af:14:03:f6:b9:a1:d5:fd:cb:71:7e:5c:
                    bf:e9:08:12:91:e9:3c:f2:8c:a4:9a:c4:73:ea:a5:
                    73:70:5b:d7:7e:82:a4:65:9f:ef:3c:fc:73:f9:a9:
                    bf:73:48:8a:8e:9e:a8:7e:90:05:81:70:52:02:be:
                    fb:c7:b5:60:3a:28:75:89:41:02:0a:4c:d8:9c:59:
                    9f:7e:7f:64:db:75:35:42:ec:30:9c:a8:66:fb:d2:
                    01:98:da:25:4b:92:0d:60:ef:02:3c:76:26:be:96:
                    dc:15:5f:83:15:ce:23:77:38:30:f7:4f:bf:97:5a:
                    1e:e0:d1:6d:41:44:76:22:4e:e0:d6:28:04:6d:bf:
                    72:28:2d:95:0f:a6:a3:34:c4:61:53:e8:59:d5:1e:
                    45:38:bf:eb:f5:f1:ce:36:56:53:56:3e:3e:a4:a0:
                    89:e7:38:a0:bc:00:04:f4:da:1d:99:d6:f1:fa:17:
                    57:c7:39:6f:f8:0f:4d:05:b0:f5:13:26:6c:af:63:
                    af:00:4f:72:aa:c4:93:3a:b4:80:03:3b:52:7b:9c:
                    66:4f:b5:a6:26:8a:29:c4:d6:32:53:43:f5:33:f2:
                    56:19:f7:1a:f4:87:ed:c7:6b:09:e2:b6:51:b5:dc:
                    28:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:67:9E:F4:E4:A1:9E:E8:D4:B0:82:6E:28:A5:B4:CF:84:A4:85:3D
            X509v3 Authority Key Identifier:
                keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:3e:97:17:33:d8:39:7e:75:13:c8:fb:3f:aa:99:70:e1:7e:
         04:b5:07:54:38:2e:34:a0:a9:86:8b:58:2d:b4:4b:8c:be:f0:
         ba:da:7f:6f:2d:3d:fa:eb:e8:c8:85:00:f3:eb:76:8b:64:14:
         0c:e9:97:0f:4c:5d:64:5d:95:53:ed:2d:bd:79:b3:8a:33:9b:
         c7:94:95:7b:f9:93:58:f4:bc:9d:ec:3a:b3:22:ed:88:55:76:
         63:e8:4d:3b:67:02:c8:7d:bd:5a:ca:2b:6d:19:6b:15:88:01:
         51:86:8e:a5:0b:a7:3d:22:e9:d6:c6:21:d9:f3:c2:01:10:dc:
         40:8a:10:f9:97:7e:57:66:a5:f0:f3:9e:5e:04:e1:ba:66:11:
         de:5c:a9:57:2d:e4:4c:d5:3e:6f:32:e7:41:a9:b9:19:22:71:
         61:fd:01:52:cf:b9:83:06:7b:ba:71:88:2c:32:2c:c2:5d:6f:
         ee:b9:9a:32:69:dd:3b:d9:b6:2b:a8:ef:cf:ce:75:f2:e8:16:
         c1:1c:19:e5:36:16:41:38:cb:be:3c:3c:39:df:f8:24:bb:76:
         e0:eb:4f:73:9d:c0:25:83:dd:06:92:69:12:bb:57:99:36:af:
         31:a3:52:0c:a5:06:79:2e:f3:02:0a:08:c3:b3:6a:4a:f9:23:
         9b:25:df:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----