Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
File:                     DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json)
Hash identifier:          SD4YlWsx/aUjhnKo2ULgQXIc//ugOxq1iGKB/4g7bdQ=
Subject key identifier:   4A:70:15:A0:F5:B9:33:18:CA:ED:0D:DE:07:5F:3B:48:EA:30:0F:7A
Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Certificate issuer:       /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Certificate serial:       01962F74BCA235859DC66295E98817064BD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
Manifest number:          0FA2
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: 5C3OBNWJVX0XYEPy1WMxBH9P3fA.roa (hash: paK6hyOcqXDBN745vkYjBiywiYBVzqMBn2uUtBINBBA=)
                          2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: t2LRGoelGNx/Cwa4p+eabpOJHPC2y01vj86tIPkmMII=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bc:a2:35:85:9d:c6:62:95:e9:88:17:06:4b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=4a7015a0f5b93318caed0dde075f3b48ea300f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:64:00:13:f2:94:c1:6b:67:b4:52:25:39:
                    b4:78:29:56:36:85:f7:c8:6a:68:65:d9:a4:2f:06:
                    0a:34:85:05:89:0a:6c:66:f1:37:37:84:75:f3:e1:
                    da:10:71:b8:ce:00:d9:c5:cc:63:eb:f9:d6:68:c9:
                    de:27:5e:54:3b:46:35:08:33:8b:68:a9:76:c8:ff:
                    5a:17:ac:3d:19:58:6a:be:77:43:3f:b3:42:0b:bf:
                    6b:23:3c:e6:cb:04:ef:30:8c:de:96:b4:40:7d:d7:
                    31:cd:63:1c:04:fc:29:6f:b8:b9:a1:c5:06:ea:53:
                    f4:c5:6f:e9:a0:c7:24:58:2f:39:be:7c:00:dd:d2:
                    39:8e:b1:b7:3c:96:b8:91:66:dd:85:40:71:0e:7e:
                    48:8e:e7:26:c4:7f:90:fc:00:c1:25:31:cb:b9:71:
                    fe:ea:37:bc:9f:a9:8e:71:90:9b:fc:3c:15:21:bc:
                    32:9f:6d:02:fd:b6:99:87:7a:f3:15:22:d6:ad:72:
                    e0:68:f1:99:02:de:6a:17:71:6d:1a:6a:52:c3:58:
                    87:ee:3c:b4:ed:cf:b3:03:a4:97:99:62:f6:21:a2:
                    ac:9e:69:58:a9:8e:cd:50:98:ea:7d:4d:dd:e6:c5:
                    16:3d:01:b9:74:e0:c0:f5:6e:c8:56:6f:93:8d:50:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:70:15:A0:F5:B9:33:18:CA:ED:0D:DE:07:5F:3B:48:EA:30:0F:7A
            X509v3 Authority Key Identifier:
                keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:78:90:e8:2d:cd:98:e0:06:54:25:5f:4a:45:1c:53:2d:16:
         a8:7d:3e:cc:2f:0e:d6:d4:cb:bb:f1:09:72:6a:61:4a:0a:d4:
         3c:48:dc:69:af:09:d4:37:c0:fd:7c:e1:a4:33:03:93:65:31:
         58:7c:dc:a5:ca:8a:6c:55:f2:46:db:e4:5e:f2:cd:85:fd:66:
         14:fd:9e:a4:8b:74:71:13:29:a0:f4:79:5e:8c:03:80:6f:60:
         2a:cd:73:d1:ad:df:85:79:09:0f:22:c6:c9:0b:b2:1b:ec:16:
         21:62:de:f9:d1:c9:5c:87:d7:21:1f:f9:c2:ff:fe:95:6f:ef:
         1e:e2:1b:30:8b:a5:2f:35:dd:04:ad:db:34:ae:81:e8:d9:bc:
         d9:3d:01:56:a9:67:59:ec:d5:0f:bc:50:bd:78:a8:a5:17:a8:
         c6:0d:dd:0c:55:d1:f5:32:85:a1:00:aa:f7:fd:56:86:f5:37:
         04:0c:16:31:df:7f:4d:c8:24:87:e9:ea:c7:51:52:a9:23:5f:
         9a:36:33:f9:0a:7e:aa:f6:e6:c2:53:8e:b5:17:08:ce:7c:4c:
         ea:f9:16:25:89:d4:e1:bf:07:fa:e6:39:8a:c1:ce:52:0f:cc:
         44:9c:d2:63:3b:a1:f3:59:60:c2:e0:7e:53:ca:96:54:3d:69:
         db:3c:1c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----