Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File:                     oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier:          DVGbs4/OgPu0arwjyV/A3ORNr9gNOiiNtGsdXFOQClY=
Subject key identifier:   CE:1E:C3:B4:82:41:07:44:3E:51:A7:F9:FE:90:3C:2A:BA:DC:25:9C
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer:       /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial:       01962E2AD6717FBB364B80C6C3D50E155541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: lj932tTJcQXzWOvOh5jnC2dHBANH95/vk1CmUDRvM+o=)
                          2: yDa2dQgeJJIFzKakaTK1-AlXD1I.roa (hash: mJdwofIlP4KR52j+bqtWhT0oD7xOVgPS7SMsHC+21ug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d6:71:7f:bb:36:4b:80:c6:c3:d5:0e:15:55:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=ce1ec3b4824107443e51a7f9fe903c2abadc259c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:40:15:6e:2c:55:21:ad:7d:98:dc:c1:04:
                    22:72:6f:8c:10:32:88:5a:b9:20:78:ba:48:09:e0:
                    fb:e2:3e:2d:79:7b:fc:2c:e3:6a:29:0c:f8:4c:8f:
                    d7:c1:a2:12:68:be:f1:1c:a1:23:4d:1e:2b:e1:2d:
                    8c:1e:5b:09:b5:b2:25:8f:17:13:e0:7c:43:11:30:
                    fa:06:b1:41:ed:99:25:38:9c:e3:37:f7:62:bf:0a:
                    42:6c:15:d2:53:84:c4:67:26:16:a2:23:09:e7:85:
                    2d:cc:f5:1e:50:01:40:fd:4f:0b:b5:6f:f7:1a:9a:
                    43:0e:aa:7c:dd:b7:13:9c:37:56:56:94:bf:ec:a1:
                    98:82:16:8d:04:56:70:7a:04:92:da:e4:ef:48:ef:
                    87:48:89:bd:95:a9:68:a6:21:68:33:87:f9:80:08:
                    6a:42:d4:fc:ab:86:ff:4e:6f:9e:a0:c1:9a:34:f8:
                    67:4a:00:a4:0c:d6:fc:a4:c1:84:e2:6a:95:78:7d:
                    8b:3a:41:69:05:77:2a:2a:f0:43:36:df:de:f6:85:
                    b4:2a:d0:24:69:0f:06:02:26:7b:af:86:ed:92:92:
                    e3:71:74:ea:45:19:a2:40:13:a9:7c:3b:81:8d:77:
                    c9:0f:10:d4:e2:d9:38:a2:ed:03:8d:25:9b:6d:2a:
                    03:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1E:C3:B4:82:41:07:44:3E:51:A7:F9:FE:90:3C:2A:BA:DC:25:9C
            X509v3 Authority Key Identifier:
                keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:61:28:e7:7c:ed:e2:0f:4f:cd:db:2c:0a:07:a5:2c:c9:bf:
         f4:d9:47:0b:17:f1:b0:3b:13:39:e9:7f:b4:cb:ea:64:fe:a6:
         bd:3d:f2:c4:2d:37:1c:d4:58:b0:6c:09:ad:62:a9:8c:38:24:
         f5:61:bd:d3:4f:d2:44:db:7a:8d:86:71:89:9d:a3:d7:44:92:
         c9:59:3a:14:e0:94:81:17:3c:3e:f7:f5:3c:dc:86:d2:4c:10:
         9f:03:f8:51:4d:0d:dc:7b:21:17:ff:f8:97:f9:91:0f:58:2c:
         66:4d:af:70:d3:e1:bd:59:16:98:a8:89:24:77:4b:49:63:6a:
         bd:eb:69:4b:63:07:65:1e:52:a1:e9:41:8a:6e:86:4a:a7:06:
         8b:9c:e5:83:81:43:e9:6c:ee:0d:5e:d1:dd:5a:08:d6:fa:15:
         b5:7b:e0:15:ff:f2:c1:7c:e8:f7:7f:9c:33:83:11:db:57:dd:
         b8:ca:c9:14:96:cf:67:cb:bd:27:46:42:fa:6d:f7:44:c6:b6:
         ab:2d:93:39:cd:4e:b8:e9:af:80:04:06:b5:bf:c6:fa:45:76:
         80:90:98:c6:90:0f:eb:b1:53:02:5d:71:11:20:f5:09:c3:74:
         fe:8f:f7:bd:1d:ad:0c:68:a9:5d:49:7b:81:42:10:db:da:03:
         58:2d:19:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----