Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File:                     o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier:          OIQHiWle+PLvN24sLzYdtvHIWWmIAsYeQ6CxSEYPvM8=
Subject key identifier:   EE:D0:A5:2E:15:FE:6A:5B:3A:1C:AB:C8:C8:4E:B9:BC:43:07:44:19
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer:       /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial:       01962F066ECEF5BA8248062F30A5A2123E72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number:          1469
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: NZCcmWMu3SL4lvLRXGmLfuZeQm4.roa (hash: EKuPrmDOqjvIb0P5ALzTBFMc5GRcKpakwtWPyDrs5oc=)
                          2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: sYAh9wJN8rHbqdTfPOECIQQI0ieFSs7dPVJdDomhT+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6e:ce:f5:ba:82:48:06:2f:30:a5:a2:12:3e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=eed0a52e15fe6a5b3a1cabc8c84eb9bc43074419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:ea:4f:79:39:e0:93:d7:9f:4e:0d:c2:24:
                    38:01:c5:bd:4e:28:f4:7c:1d:f0:f8:a9:2c:96:55:
                    1f:0d:f2:ed:20:65:d8:85:dc:75:05:6f:51:17:4c:
                    10:ce:62:01:2d:cd:ca:13:46:2f:67:54:40:8b:7b:
                    f2:79:a0:99:af:e6:71:e6:88:d5:d5:b1:c9:26:05:
                    23:1b:8b:61:56:34:8d:8b:79:90:9e:17:8c:f0:62:
                    d3:ed:0e:f3:29:4a:2a:e6:b8:d9:3f:47:52:a5:52:
                    e5:a8:ab:af:88:0a:d2:40:9f:f7:d6:23:dd:c9:4d:
                    60:8b:b2:9a:59:f0:89:f1:04:9a:a4:a9:b2:ae:20:
                    4e:34:9a:75:95:7f:21:e6:d2:d6:5f:1f:33:ce:cc:
                    2a:cb:67:f7:c9:88:95:da:ed:06:13:6f:87:c2:45:
                    6f:05:be:72:7b:56:65:d5:b4:0b:7e:52:c5:5d:97:
                    72:70:7c:b1:a7:de:8c:95:2c:29:df:f9:33:70:3f:
                    64:58:8c:b2:da:24:87:75:29:2f:67:b1:8a:ed:6a:
                    fc:83:34:9b:89:0b:79:80:6d:91:7a:1d:43:20:39:
                    aa:45:5d:85:2f:6e:74:ee:f3:b3:e4:5d:77:77:88:
                    ab:60:5c:cf:90:9b:03:0c:08:14:07:b0:ee:02:bb:
                    37:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D0:A5:2E:15:FE:6A:5B:3A:1C:AB:C8:C8:4E:B9:BC:43:07:44:19
            X509v3 Authority Key Identifier:
                keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:cb:00:a4:0a:6b:5e:32:df:d9:31:ed:60:5e:9b:07:13:24:
         d7:1c:60:c1:39:d8:28:b3:34:27:ab:2c:06:c2:70:7b:b5:03:
         6e:d0:9f:c3:2e:4a:b4:b0:9f:56:c7:d9:cb:16:84:91:6f:c6:
         78:af:f3:af:de:91:d5:9c:a9:22:89:8d:6e:28:39:5a:53:a1:
         2b:68:fe:d2:bc:00:0c:03:0f:55:65:5e:b5:19:06:10:bb:05:
         88:d4:a9:f5:bd:22:23:b0:12:35:59:cd:5b:db:d0:c3:e4:6b:
         e1:14:78:43:7a:a9:7c:d2:79:1e:ab:fa:05:11:bb:44:9b:fe:
         63:42:3c:f0:2e:f4:b7:49:2f:b7:20:ea:8c:c5:da:ef:c2:5a:
         12:1f:1c:aa:d9:11:d1:5f:75:04:7a:1b:a7:59:ff:57:96:24:
         f6:68:3d:50:b3:2a:3a:97:31:24:4f:85:9a:55:5c:40:e7:a6:
         b7:f7:c7:a6:a7:e8:76:5f:27:02:4d:26:b1:3e:c8:82:66:61:
         c9:9b:a9:7d:00:88:e7:37:21:19:cf:b0:61:26:b8:3a:41:a2:
         b9:07:e1:91:9f:57:0c:be:89:e2:da:6b:18:97:91:64:ab:f7:
         9f:2c:c9:c8:1b:6b:0b:99:55:76:97:58:ec:40:89:46:1e:e8:
         f4:e5:4b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----