Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File:                     DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier:          JuZgyH8XKDIEuPEx6lrib2HQq1+9WXPBx6Y9PAWrm18=
Subject key identifier:   80:4B:4C:72:37:A1:7A:93:42:41:C4:D9:D1:1E:76:4C:6C:2D:FD:1D
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer:       /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial:       01962ECFB54DC529B66877C4050BE039DAFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: jLWooI8mRTP+p/oqTFYJ4N9OQkdsTPbDl4anRcrCdRA=)
                          2: PGpk2qjaEHATBO5WJqpwQvvo-t4.roa (hash: sxUY6k6RZnsEb5wstWgn4/zoH8gCs5vVrsT2wup6jP0=)
                          3: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (hash: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b5:4d:c5:29:b6:68:77:c4:05:0b:e0:39:da:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=804b4c7237a17a934241c4d9d11e764c6c2dfd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:43:c7:ea:0e:e4:c6:fb:ac:a9:27:c5:8d:
                    ac:7e:f7:af:d2:f8:44:e6:72:73:ca:d6:87:19:cf:
                    89:23:6b:42:7e:0a:ee:15:e4:c6:e0:62:86:67:ac:
                    d3:7f:16:23:55:f9:61:d6:f5:90:58:9e:06:3d:3d:
                    f6:11:5e:f2:98:80:ac:2e:d1:0c:50:55:4b:32:40:
                    71:c6:4a:de:65:10:16:b3:ee:dc:f0:df:a0:ba:ae:
                    de:b1:62:cc:99:07:3e:eb:34:5b:68:2d:ee:00:e2:
                    54:08:ad:1d:08:8c:cf:d6:c0:03:fa:25:c2:17:fe:
                    db:70:38:a2:ad:0c:4f:71:66:9d:39:43:a5:70:35:
                    6c:a1:1b:47:93:58:3a:45:4a:80:ac:d8:ca:a4:63:
                    09:0f:28:0a:53:9d:a6:cb:63:00:b8:d5:f3:c9:e3:
                    23:9b:de:10:8e:ec:d7:22:5e:71:7b:8f:b0:77:0d:
                    52:a4:42:e8:3a:73:4b:72:d8:82:69:5b:80:75:4c:
                    96:56:ce:de:2b:00:44:5d:2e:36:d7:7f:98:c1:49:
                    07:a2:51:91:6a:81:f9:21:6d:5d:4d:89:27:4b:c7:
                    ff:dd:67:b2:8b:13:89:4f:ff:30:53:92:77:27:4d:
                    19:d1:29:3d:04:7a:a1:35:db:6a:db:84:75:b1:ab:
                    03:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4B:4C:72:37:A1:7A:93:42:41:C4:D9:D1:1E:76:4C:6C:2D:FD:1D
            X509v3 Authority Key Identifier:
                keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1d:cb:18:8a:01:42:cf:f6:25:e4:3f:c5:59:78:17:5b:3a:
         20:47:78:8b:ea:5c:85:8e:2f:3a:a2:95:5a:2a:40:f8:eb:80:
         83:3d:e8:e6:85:f1:8b:8d:1e:2c:2a:cf:35:7a:31:51:f2:af:
         f1:cf:b7:af:e4:4c:07:d0:5a:b3:2c:2f:dc:7d:8b:c6:7e:87:
         0e:b6:1e:27:70:09:a0:9c:80:e9:2d:80:5e:81:30:f0:87:bb:
         c6:9e:31:3b:31:bc:17:92:1d:05:8d:34:91:b6:73:26:4a:30:
         ab:9a:18:87:16:20:66:ba:ca:df:b5:a4:d8:ee:94:af:9a:e3:
         22:1f:e3:f0:65:d3:7b:13:2b:2d:7a:2d:6f:4e:7a:68:82:a0:
         70:95:bf:4a:31:51:8f:41:ef:1f:57:bd:34:6e:24:0c:14:70:
         7a:f0:58:e3:16:62:ca:b5:9c:44:23:ce:77:62:a3:aa:af:9a:
         f1:b2:5f:6e:ab:61:d1:4e:70:3c:96:35:ea:15:45:cb:d0:67:
         d7:7c:47:3f:e3:17:4f:47:e0:b7:ff:c1:4d:c2:b9:e4:8f:4b:
         ac:20:75:56:2a:2a:fe:d9:d7:cc:2d:97:af:bd:ac:24:78:56:
         92:5e:19:ac:4c:c4:ef:10:bf:36:04:0c:b6:0a:df:0e:14:96:
         90:86:42:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----