Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File:                     DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier:          SchIoA7MdpFk/gCUuJVz6xpcYOkA2m9kvVWXCRkK2R4=
Subject key identifier:   A0:39:0D:A4:63:A0:FD:BD:20:2A:2B:C9:CD:10:1C:DB:25:1F:FB:9D
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer:       /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial:       01962E2ACDEF01750D19266DC214654DB14D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number:          12BC
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: cNnCvJvQZ1h9vkdlZbBIwF2ZxoCPBAixSywubrxXbm0=)
                          2: xjZ1XJhW_cFPR3oT-Y__-eT7BLU.roa (hash: iqLiaW6nsbh481RYQHU8cc/w97YkMP9DpENBWhWu8os=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cd:ef:01:75:0d:19:26:6d:c2:14:65:4d:b1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=a0390da463a0fdbd202a2bc9cd101cdb251ffb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:76:bf:65:c3:77:a6:55:c8:5c:7b:8b:53:
                    db:22:c9:a1:a8:81:1c:29:58:24:e8:bd:21:3e:a2:
                    d8:19:4c:cf:6e:a7:5f:e4:a6:0c:76:29:28:6e:f3:
                    d2:d1:0e:ba:29:44:1f:9b:60:c9:b0:47:bc:29:25:
                    85:64:91:32:d6:f7:24:6b:4f:98:6f:19:36:75:fa:
                    d3:66:83:d1:9d:fd:6c:02:a8:1b:b8:16:33:e9:85:
                    0e:8c:88:15:44:b3:8e:8b:a0:b1:48:a0:42:9b:29:
                    8e:fe:ca:d2:67:0e:e5:e3:52:11:84:95:8e:1a:c6:
                    d7:14:33:70:80:69:25:04:08:3e:71:70:0d:42:22:
                    70:4e:84:00:de:cd:4f:98:27:37:ac:1f:d5:1b:3b:
                    ed:ec:ba:db:e6:ab:00:9e:67:ca:c4:1d:73:35:24:
                    52:ff:f0:29:9a:ce:98:72:26:ff:be:82:7d:ea:13:
                    d8:7e:99:61:82:ed:57:85:1b:d2:cf:52:7f:92:33:
                    26:02:bd:cf:0e:4f:c5:b4:8c:af:ef:e6:79:d2:b4:
                    d0:71:86:05:b5:ef:ec:dc:12:99:f1:88:5e:7d:fd:
                    d5:d9:c7:5c:57:9a:35:39:14:c2:df:ab:01:ec:9b:
                    d9:bd:43:49:6d:9b:47:87:7a:42:d1:40:55:51:b5:
                    a7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:39:0D:A4:63:A0:FD:BD:20:2A:2B:C9:CD:10:1C:DB:25:1F:FB:9D
            X509v3 Authority Key Identifier:
                keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:16:81:8e:7b:f7:3a:dc:f3:be:bb:5e:a3:1f:1b:13:ce:06:
         9c:fe:a8:fe:02:a6:ea:2d:ff:be:6e:4e:5d:1e:33:52:c7:b6:
         1d:31:a9:38:02:1f:1f:eb:0f:79:d4:d2:44:79:bd:b2:c5:7b:
         f8:26:a7:95:61:c3:d6:66:2f:10:b4:e9:1d:8b:ae:f3:f9:4d:
         94:52:97:82:9f:f5:01:09:5b:74:18:19:b2:84:e1:40:ad:de:
         cf:24:7e:12:6d:2f:24:d1:2d:79:5c:59:02:64:50:7f:fd:d5:
         c3:8c:85:fa:50:6e:1f:35:af:53:7a:52:d7:20:42:df:84:34:
         1b:06:0f:d7:6e:3f:bc:ed:17:7d:cb:02:6b:ba:42:93:49:c2:
         99:c1:63:fd:68:e4:d1:11:c0:f8:89:bd:db:cf:80:54:d3:68:
         f3:33:91:88:39:b0:dd:4c:03:42:7c:a4:32:18:2c:15:1a:37:
         02:58:0f:6e:97:31:39:2f:5f:dc:0c:b4:82:cf:d9:c0:bd:f7:
         11:c2:c7:fd:e2:33:39:a0:cb:d5:ee:69:3b:c0:df:86:37:cc:
         a4:3c:b4:7c:d6:a1:d9:10:0c:a5:34:16:c5:ae:a0:3a:ef:6f:
         d1:e5:23:62:a1:cc:06:ca:b5:0a:55:79:2f:cf:38:b2:a0:bc:
         2f:4d:31:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----