Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File:                     oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier:          7eqwTkeW7+QSYant+OmwAiVZYyG4TCFKrZ9xPW07dS4=
Subject key identifier:   86:11:5A:18:9B:FC:36:05:FC:D9:39:EA:AC:87:8F:E2:26:B8:C3:80
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer:       /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial:       01962F071A5B7C359C43677A5FC77A6A1103
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number:          0A48
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: 6Rx93MHDvbSnXe8VNlIOu+IcbcIjD0EN9gL9qRKYjBM=)
                          2: tD78yaOKHxAMN54cZ_UiavO4CHA.roa (hash: jAbvoTBMupwzsMRTiVDhIW4eUBQnYA3NsicKftAzOOQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1a:5b:7c:35:9c:43:67:7a:5f:c7:7a:6a:11:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=86115a189bfc3605fcd939eaac878fe226b8c380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e9:24:99:43:ea:97:7f:e8:7a:ef:e6:5e:15:
                    27:31:d5:b0:39:d6:fc:f8:c1:b7:4c:92:8f:bd:ad:
                    a1:0d:3a:12:82:4c:fb:82:bf:d5:22:17:c1:9e:f8:
                    c4:32:70:7f:4c:82:a2:f0:b6:60:bb:be:0b:d6:28:
                    c8:2b:e4:e1:93:57:bd:f6:0a:1e:fa:7f:7d:43:a9:
                    14:39:e7:ac:01:18:36:a4:4c:2c:32:3b:34:0d:30:
                    f3:59:e1:80:57:0f:3e:f3:ce:e1:0a:b1:d1:c5:8d:
                    ca:1b:64:54:0a:48:ec:3b:67:b5:d1:ca:5e:80:ba:
                    7d:f9:12:0d:19:d0:f8:87:2c:44:16:15:40:85:42:
                    21:e1:72:52:9d:0d:ee:a2:7c:0f:c1:19:41:c4:9d:
                    b2:f9:c3:0b:24:89:5f:a8:08:d6:45:8d:d4:32:f3:
                    d1:a3:1a:68:4a:13:66:aa:a3:cb:fa:0b:1f:e6:7a:
                    e8:0c:36:06:b9:63:59:3a:11:30:b1:75:12:a7:d0:
                    85:d7:51:d4:d4:38:cb:aa:cd:e0:39:b9:20:ed:14:
                    3b:10:a6:d0:70:65:19:de:e6:bc:af:75:a9:62:1e:
                    ee:6f:93:b1:de:7f:b4:8f:d3:c8:43:f7:ca:b6:ad:
                    8d:c1:37:16:55:97:07:04:f6:ee:fa:aa:f8:50:44:
                    78:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:11:5A:18:9B:FC:36:05:FC:D9:39:EA:AC:87:8F:E2:26:B8:C3:80
            X509v3 Authority Key Identifier:
                keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:99:86:15:8c:7e:15:8d:fc:8f:9f:fb:d4:88:be:e9:8e:25:
         cd:55:0f:53:87:1c:59:7c:32:46:92:c3:18:e9:fb:30:f3:69:
         7e:b8:48:2c:30:1d:c6:b2:ee:70:e1:4c:2c:34:63:e0:b6:db:
         5f:6c:45:07:3e:82:09:08:d5:16:aa:72:3d:d1:66:5f:86:b9:
         e6:0d:b5:f2:71:f1:58:78:67:ac:93:66:df:02:74:60:fb:88:
         d9:bf:c9:9b:18:3a:bc:c1:c6:e4:f6:18:79:1a:af:81:0e:85:
         50:57:6a:24:12:2c:84:f7:cf:03:a0:37:ba:0b:e5:fd:ab:dc:
         f5:b3:30:a2:76:df:73:54:36:d6:09:71:c0:03:06:39:81:eb:
         ec:bc:48:47:5a:16:d4:eb:2f:e9:ce:85:38:f1:60:f8:0a:2a:
         94:98:d9:ae:57:b3:a8:c1:75:cf:a6:bd:28:a0:ee:44:79:9e:
         b8:c9:c7:ed:b6:3b:a9:80:7e:c9:1f:82:53:84:88:d0:5b:f9:
         85:8f:63:89:c0:8e:f9:6b:9e:18:f7:96:e7:13:14:e8:38:31:
         96:42:e2:7f:82:e8:ab:f1:9c:d8:df:2c:d9:f5:80:96:8b:9a:
         67:c7:c4:8a:57:56:2b:c4:dc:6f:3f:2c:98:f9:ad:43:ac:63:
         dd:2a:e9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----