Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File:                     0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier:          lFUA+dKHY9RGb8akQkjkokNf6MORK6vHrn0KuYEvH9g=
Subject key identifier:   14:89:3D:F0:FF:9E:81:2B:6F:03:40:8A:66:63:29:F6:4B:E9:E4:C4
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer:       /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial:       01962E98946A4ECD74F0BBA3310B75BC8DF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number:          1182
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: ueddAVxat0j6CjIVV375YgvDAkFEAc6JMyY1SPu74YA=)
                          2: KrQvju8wsP_1pgegWQDfP_dBbsE.roa (hash: 41ILiMyCbiBXLBStCWRCt8ZnN2evNZdt0aku7rFi6gM=)
                          3: MT4hr9PSkUajZkci1pWS9v2orok.roa (hash: qezGbt2cfl90iVziKgXNGmy2fO9q+dUTbPbEn9xA5FQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:94:6a:4e:cd:74:f0:bb:a3:31:0b:75:bc:8d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=14893df0ff9e812b6f03408a666329f64be9e4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:25:1b:0f:95:0e:96:54:f9:a7:8b:64:e1:5c:
                    40:72:fb:f6:39:03:da:d6:fb:60:ab:0b:e5:91:98:
                    d4:6a:ff:24:f1:b3:fc:46:f7:f9:a3:42:68:be:18:
                    69:9c:2d:42:ca:c2:61:5e:0b:97:08:42:3c:bd:35:
                    80:6d:6b:29:f7:67:da:ea:e0:9d:9c:59:13:07:8a:
                    34:5b:f0:84:2a:77:a0:66:9b:b3:6e:21:9a:46:45:
                    10:e7:fe:c1:48:45:84:37:66:c9:98:a7:76:fa:58:
                    2a:cc:5f:32:0b:c3:4f:0f:a6:91:1b:a2:4d:2c:54:
                    26:02:a7:33:db:8b:34:e4:c8:d4:09:ed:6e:d6:2a:
                    5f:eb:18:94:ee:45:29:fa:e2:61:68:1e:a3:36:52:
                    3a:29:f1:54:f5:c8:16:c2:92:b2:ef:0c:3e:33:11:
                    a8:be:c2:ea:b9:b1:59:47:34:53:87:58:ff:b1:61:
                    fa:84:69:26:f6:7d:b8:2a:22:98:2f:06:88:89:86:
                    02:04:83:08:70:55:4f:30:29:89:7e:df:9f:cd:a4:
                    23:32:45:44:fc:d3:f6:41:e3:d8:d6:cf:6f:87:c9:
                    24:d7:60:48:5d:1a:f5:6e:ef:67:c2:ce:a3:15:0d:
                    07:29:bc:a6:7c:69:76:0c:bb:71:f5:da:7b:0c:0e:
                    89:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:89:3D:F0:FF:9E:81:2B:6F:03:40:8A:66:63:29:F6:4B:E9:E4:C4
            X509v3 Authority Key Identifier:
                keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:fe:c4:8a:1e:ee:76:83:11:cd:be:a0:04:a9:8f:1e:b1:24:
         a2:3b:e3:0a:53:36:de:a7:45:03:23:2f:c3:d9:f1:52:c6:b6:
         63:78:b8:32:54:e6:d4:22:c8:95:94:8d:e5:de:7f:cd:ae:8e:
         b7:f2:52:91:e5:7f:40:a7:40:c0:92:10:bb:3b:5d:de:8b:f4:
         59:9f:1c:10:63:ca:1e:a0:12:d5:7b:eb:c6:db:f7:cb:c7:3f:
         01:0c:29:76:86:80:c4:9c:30:e9:2b:11:41:97:be:40:45:ba:
         9c:9a:e3:79:cc:46:dc:73:61:62:4c:cb:be:df:b0:01:83:b6:
         ed:87:06:6a:fe:a8:a2:57:73:d6:7b:92:22:66:ca:99:9c:94:
         2b:bf:dc:82:a8:1a:95:57:92:db:0a:69:a4:16:b8:2b:d8:d6:
         c3:9a:52:0d:bf:e0:5b:f2:b5:6d:bc:67:fe:85:56:31:3c:38:
         1e:8c:08:7f:0b:f2:56:ab:7b:de:2d:c6:78:75:b6:91:17:cc:
         8f:2b:6c:e1:a1:8a:4d:5e:db:27:48:4e:01:3a:2c:73:40:e9:
         c5:7b:d3:47:ce:39:89:8b:d3:94:31:09:02:35:db:f5:8b:ed:
         99:ae:68:47:28:e7:fc:35:2f:69:a5:e4:58:cc:2d:a0:50:2d:
         69:e1:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----