Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft
File:                     oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft (raw, json)
Hash identifier:          176mZWr+2W485YTURTFwNsfdzWYmEvbNYd6Bous+Foo=
Subject key identifier:   7D:37:D2:1F:2E:89:B2:A8:B9:FC:63:C0:80:22:0D:EA:90:1D:21:2E
Authority key identifier: A0:9F:DA:04:7B:3A:0B:1C:82:04:35:E6:99:38:86:60:DA:32:C6:3F
Certificate issuer:       /CN=a09fda047b3a0b1c820435e699388660da32c63f
Certificate serial:       01962ECF6EAA008E497B6313092476A248AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft
Manifest number:          0445
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: FfIlEvStYRtAHT_4tgisj2sboIA.roa (hash: u8VtTRQomqZri4fvKgtiux4C4c/ZHFagnd78Z59URa8=)
                          2: oJ_aBHs6CxyCBDXmmTiGYNoyxj8.crl (hash: irlvoU0SlXLsM01VPRcWcQgFkhfQWBpv0xVcPmuJ9og=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6e:aa:00:8e:49:7b:63:13:09:24:76:a2:48:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09fda047b3a0b1c820435e699388660da32c63f
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=7d37d21f2e89b2a8b9fc63c080220dea901d212e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:15:04:7b:78:c2:4f:49:25:7e:00:8c:a4:84:
                    2e:2f:3c:76:62:7c:d2:b9:d3:a8:17:0b:ae:f8:53:
                    08:27:ff:ff:c9:29:4f:82:f8:b4:13:1f:cc:67:e0:
                    ae:75:48:05:c0:9c:2a:5b:a4:b2:cc:62:06:23:8c:
                    f4:bb:92:8d:ba:d0:0c:e9:dc:2b:d4:62:87:40:ee:
                    95:ab:fc:86:f4:da:e4:ff:2c:de:3e:17:d3:73:ea:
                    d8:0b:1f:42:1f:dc:b3:a5:b6:49:05:05:49:1c:d8:
                    ab:28:dd:76:26:2d:7f:87:92:74:86:4e:3d:14:cb:
                    fb:88:1a:a1:c5:f4:1b:64:20:ef:32:16:63:24:fa:
                    0d:34:67:99:c9:4c:4b:da:f0:c0:8b:cb:eb:55:7e:
                    d7:a2:53:1d:95:b3:6e:ab:c0:7e:84:aa:6c:a3:84:
                    81:03:4c:8f:8d:07:cb:4f:20:a6:6d:f1:87:74:89:
                    bf:4d:88:52:98:17:f1:21:3f:45:0c:5d:c0:b9:ef:
                    ca:39:03:f5:bd:6d:f2:80:f8:1d:8d:25:f5:5e:f5:
                    f9:85:dc:a8:2c:94:d3:ce:21:4b:85:ac:30:ee:e2:
                    f6:2b:18:18:51:45:27:24:58:1e:2e:29:61:81:03:
                    9e:c3:ae:fc:ef:49:bc:76:26:3c:f4:c1:87:66:a2:
                    5d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:37:D2:1F:2E:89:B2:A8:B9:FC:63:C0:80:22:0D:EA:90:1D:21:2E
            X509v3 Authority Key Identifier:
                keyid:A0:9F:DA:04:7B:3A:0B:1C:82:04:35:E6:99:38:86:60:DA:32:C6:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c7:23:82:66:cd:25:26:09:21:63:bc:09:1a:09:28:cb:00:
         32:dd:4a:6c:06:d1:72:18:55:fd:35:af:8d:3b:19:8f:41:6b:
         aa:fe:a4:35:08:ea:af:88:e8:42:16:2d:b5:6b:b7:af:20:d9:
         f1:84:ae:e0:74:70:c0:1b:f1:95:b3:bc:99:ac:fa:ba:ac:5e:
         e7:7f:1a:d5:7d:df:ac:71:e5:14:c5:16:4b:46:68:b7:b1:ef:
         6e:66:08:16:56:87:32:75:78:6f:1b:10:16:0a:7a:f9:97:82:
         03:9e:9f:af:59:f2:b6:df:4a:24:d6:62:0a:3a:5d:6d:35:ba:
         88:7a:c0:dc:a7:19:6f:d0:46:17:9e:22:51:5e:4a:79:04:37:
         f1:02:1f:0d:b8:2d:20:b5:7f:ee:07:0e:f9:cf:03:e6:51:58:
         9f:48:56:a9:28:b4:18:93:cc:79:9f:a4:fc:36:29:c5:7f:a2:
         f5:5e:42:06:c9:27:dc:ff:3c:e3:32:69:7a:74:5d:54:ec:ba:
         dc:3c:d9:a3:6f:bb:10:34:2b:f9:64:23:2d:88:54:1d:de:63:
         27:ed:82:a4:9b:bb:02:d4:e9:f6:3c:b6:42:93:9a:bd:a5:5e:
         57:94:3c:b2:e4:5d:5b:79:63:c2:bb:61:30:5d:4f:41:90:23:
         97:b9:4e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----