Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File:                     DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier:          3cV0DimmM9IEFpZdXAgxOkMNN/GRrKa3rGLNMrOTHB0=
Subject key identifier:   9D:EC:E3:D1:AB:88:24:18:8E:D7:A0:58:24:B7:33:CC:BC:AA:1E:DF
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer:       /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial:       01962FAB315FC15B7EB7D28DD5F84D0C8261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number:          11B1
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: MGOnjl15zKsl+9Fn5uebl8/IJXYPdXChJNayJm7abAE=)
                          2: ZWVOs3WDW-rx5m7taQu6I2WYx7Q.roa (hash: yPh81fsK4TJM83HFw4j8d9BB5tZUMJFngOFcn+J9UgQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:31:5f:c1:5b:7e:b7:d2:8d:d5:f8:4d:0c:82:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=9dece3d1ab8824188ed7a05824b733ccbcaa1edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:71:91:c9:84:d1:8b:95:af:98:17:b3:9b:
                    f5:6c:7b:eb:a0:87:0b:a8:8d:cf:28:67:ef:6e:ef:
                    89:ca:5a:75:39:33:f5:c5:d7:7e:40:da:aa:72:89:
                    3b:bb:f2:1f:6c:04:1a:dc:d6:15:86:4a:09:b4:4e:
                    c6:69:3f:9c:62:b6:27:6f:86:61:e4:83:46:0b:96:
                    e5:04:b8:91:19:89:81:b1:e2:c5:19:72:e3:23:a5:
                    b7:56:eb:ff:83:05:93:3d:a0:08:02:05:98:10:b4:
                    ff:de:52:19:d5:14:1d:57:1d:af:6c:22:df:f0:dc:
                    f1:d6:cd:64:e2:68:32:a7:21:20:b7:19:41:54:2b:
                    42:a4:3c:f0:8b:96:22:1a:ea:34:e4:e4:fc:a9:fc:
                    73:81:7d:c7:94:95:96:eb:9d:9c:4b:48:b6:bb:76:
                    89:87:03:5e:87:39:3f:6d:89:cd:b7:56:0c:a6:a7:
                    5d:8b:ff:df:fb:9e:d8:f3:ea:6a:b0:3c:0d:5e:c4:
                    14:8f:a3:e1:73:cb:4d:68:8f:92:88:85:b0:6a:7b:
                    14:40:a5:fe:a9:5d:a3:0d:b6:eb:a8:e0:07:94:f7:
                    c3:aa:f4:b0:75:14:54:30:d7:7a:12:0c:05:fe:1e:
                    24:6b:08:bb:8d:f0:59:63:46:89:86:74:99:bf:e5:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:E3:D1:AB:88:24:18:8E:D7:A0:58:24:B7:33:CC:BC:AA:1E:DF
            X509v3 Authority Key Identifier:
                keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d0:de:ff:88:42:51:73:df:9d:cd:17:c9:18:05:d6:62:ed:
         43:13:7e:be:2c:84:03:7e:91:6c:c4:75:94:a6:bf:b4:b4:75:
         83:9a:63:34:73:6f:f1:09:7d:a2:7a:e2:7b:58:d9:f3:60:de:
         f0:b8:ae:2b:9f:3e:1e:5c:ef:35:b8:7a:ff:a1:ae:eb:af:46:
         d0:c9:8d:05:d0:2d:a6:16:0d:b2:19:b0:35:ac:23:02:ce:33:
         e5:70:a8:37:b8:a7:90:a5:3c:58:8d:6a:35:fa:fd:d8:bb:cb:
         39:e1:de:84:d6:c6:4c:86:b4:37:bd:9c:58:5e:f1:71:91:6e:
         81:48:13:2c:60:b1:38:47:da:54:91:13:b7:2c:2b:98:ac:d4:
         7b:04:37:a0:5d:74:82:15:31:24:a9:78:73:1a:8a:44:21:db:
         d2:5f:d4:59:1c:b0:31:a6:37:b1:2f:74:06:e8:76:3c:df:8c:
         7d:87:5c:b3:f2:64:23:57:a6:64:5c:e0:55:ca:ac:9f:ce:5c:
         f0:86:48:75:d9:fd:94:3b:05:6e:47:eb:d1:68:0e:33:f6:ee:
         45:01:4d:a1:1c:8f:48:e3:58:37:ce:c4:5d:de:87:54:f0:1f:
         55:63:cc:e6:93:54:94:ba:0f:06:4c:12:43:7b:d1:2b:92:a6:
         50:3d:70:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----