Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File:                     obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier:          5xrQUqm+w1lF6/c2tU1XhOvRpa4Q9q566kG6BX3+dG0=
Subject key identifier:   35:65:C1:42:51:1C:C8:10:48:CD:C8:A5:0F:93:85:26:92:50:26:1C
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer:       /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial:       01962F06C835BF4865284F310EC467559EDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number:          132F
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: 5vBO9ldNAgQorlXIjJJIuksBB3E.roa (hash: ySv9QcbHKkFQxdG6EN90SAbcPMFf6P8uzGjssVVfzx0=)
                          2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: TiIajC+HynVLqh5NmOXCH2J8DOLaX684YnflnnvCgXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c8:35:bf:48:65:28:4f:31:0e:c4:67:55:9e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=3565c142511cc81048cdc8a50f9385269250261c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:80:75:13:14:24:04:fb:06:0b:c3:d2:f4:d6:
                    1b:35:82:9e:8c:d1:e5:e9:db:fb:bd:23:98:db:09:
                    e7:78:0d:1c:39:ac:4d:09:1c:1c:66:4c:4a:f0:3c:
                    7f:45:9e:15:52:19:b0:3c:58:30:b1:74:a5:6f:c5:
                    ba:46:14:c4:76:6b:94:65:d6:bf:73:0a:2c:36:1e:
                    b6:b7:02:71:ed:34:88:20:78:c0:62:c5:2e:97:20:
                    47:6b:50:96:94:83:ac:31:1b:29:a1:98:9b:21:db:
                    e2:e5:a1:6a:28:06:0a:62:37:d2:4e:d5:0d:ac:f8:
                    67:26:86:da:42:c8:93:45:a6:de:1a:10:3f:a4:7c:
                    fd:0f:cd:5d:d9:52:74:2a:0a:de:c5:ac:1f:76:76:
                    68:6e:59:0d:56:52:4a:dd:76:1e:99:cc:29:b5:cd:
                    e6:37:92:f3:17:35:cf:78:5e:e1:39:41:ff:f8:a8:
                    83:f7:b2:60:71:5e:36:bd:f4:dd:e7:fe:02:e2:dc:
                    06:2b:7f:38:1a:11:b9:ec:d8:7a:95:c7:98:44:95:
                    ba:6a:1d:68:c5:27:1f:2c:75:10:0a:51:5c:f6:66:
                    66:8e:b6:a6:e3:86:d8:cd:14:5c:12:58:27:2d:d7:
                    fc:90:ca:72:0c:34:f7:b5:8d:72:58:fb:0c:4c:da:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:65:C1:42:51:1C:C8:10:48:CD:C8:A5:0F:93:85:26:92:50:26:1C
            X509v3 Authority Key Identifier:
                keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:16:1f:04:85:03:f4:35:07:f8:3b:8d:be:73:12:08:0a:e4:
         02:fb:c5:74:58:e0:03:bb:e5:bd:a6:18:b9:22:ec:c5:fe:d4:
         83:31:61:bb:a8:d7:7b:2d:3f:89:4c:5a:f9:32:41:d4:3a:4e:
         87:34:83:f1:dc:55:cb:d7:61:dd:c3:bb:3a:d6:a5:39:3a:1b:
         36:a9:58:21:ad:f5:a0:d6:19:77:63:a4:ee:ae:e5:1e:45:c0:
         ef:40:7e:5b:91:53:89:9b:fa:2f:9b:38:14:84:52:4e:46:74:
         bf:4c:2c:0c:c6:37:09:46:5b:46:b3:52:ed:c2:6e:87:4f:6c:
         76:59:9b:ad:65:1f:17:f4:be:22:15:46:30:4d:f7:d4:42:47:
         b4:79:60:0f:46:bd:fb:bb:05:24:22:e4:60:30:bf:47:4c:36:
         ae:4e:e8:4e:15:ef:01:49:05:c7:c4:f5:67:09:41:35:73:81:
         1c:6f:bf:df:0d:93:e0:ee:bb:bd:86:fb:95:f8:71:9b:ec:09:
         42:a3:60:8e:8e:d3:cc:88:88:4e:5c:bd:37:b5:3a:b5:22:79:
         5e:fd:97:f5:01:86:59:d0:f3:41:35:8a:0e:78:56:ac:2b:3d:
         40:88:33:0d:cc:6a:6f:e5:fd:d7:f2:00:38:ba:4c:d1:46:9a:
         83:9b:95:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----