Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File:                     om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier:          23WCgos4OneKyht3wIpfC/AKlfruKtPb7ceppjJ/7jo=
Subject key identifier:   42:B0:43:11:F6:FB:C4:B0:EA:AA:68:F1:5A:1A:3C:19:35:44:71:41
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer:       /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial:       01962E2B3679C474F56FF214793E5CBD9014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number:          0BB5
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa (hash: IF9hTJNwg+C6sOiJxM0wjia7V2gTMUUf+M1j+KMX6Hk=)
                          2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: aXL11N0qj1kl5RXYRqUJe+lkRErHGZ5utjfavG7pjno=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:36:79:c4:74:f5:6f:f2:14:79:3e:5c:bd:90:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=42b04311f6fbc4b0eaaa68f15a1a3c1935447141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f0:83:94:31:84:56:c9:ab:3a:ca:a4:de:c1:
                    93:17:53:5b:c5:c2:02:a7:41:db:a2:61:18:0f:0c:
                    ae:dd:e8:0c:4b:f6:22:02:51:8e:ca:90:e4:ef:eb:
                    ad:d4:fe:e1:a6:3b:9f:0a:54:a1:c5:d9:63:c2:88:
                    e8:fa:34:04:73:c8:89:b3:49:ab:f8:67:68:b5:08:
                    0a:ca:1a:69:84:18:9a:9e:59:cf:95:9e:be:90:33:
                    6d:96:6f:0d:fd:61:d8:01:c2:2e:d6:d3:d3:6e:0f:
                    45:b3:18:d9:95:0d:2c:81:0e:8e:67:6e:5f:1e:8b:
                    e7:da:32:4a:f4:a9:b5:0d:2f:b9:80:2f:b8:90:b1:
                    d6:bb:9b:81:47:61:e2:cc:57:63:15:20:bc:5b:8b:
                    7d:7b:5d:b6:1f:39:bd:70:54:3d:c4:5f:85:87:fa:
                    21:bd:b6:24:81:2c:af:48:5c:d8:06:de:f1:e5:74:
                    4b:c5:01:d7:9b:8e:5b:95:c8:67:a2:c2:1d:28:94:
                    a9:53:da:18:88:76:ee:6e:60:64:ef:a2:7d:9b:25:
                    f4:5b:38:65:c1:9a:74:73:79:73:40:ca:5f:a0:6b:
                    88:2c:95:a1:a5:3a:6b:70:4e:b1:07:41:fa:e2:94:
                    69:a2:19:9a:51:42:3d:39:29:96:ad:49:4b:38:68:
                    df:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B0:43:11:F6:FB:C4:B0:EA:AA:68:F1:5A:1A:3C:19:35:44:71:41
            X509v3 Authority Key Identifier:
                keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:3a:bc:1a:e9:f7:82:57:8d:10:a1:6e:6d:d9:da:39:74:9b:
         2b:ce:4d:50:6b:ed:9f:d5:ac:2e:8a:13:4d:2d:b4:d6:29:0f:
         bc:09:a2:cf:73:4e:b7:f5:5d:33:4f:a4:40:1e:4c:58:29:65:
         c3:e3:74:ce:6f:bb:c5:27:64:b5:28:46:1f:bf:75:5d:8c:5d:
         07:b8:a9:f1:56:4e:8d:17:d4:c5:00:c6:eb:ed:86:3d:43:fd:
         36:f6:ba:18:e8:a0:f2:59:e1:a2:bd:39:c9:9e:a0:a4:7a:1f:
         7d:70:58:38:48:6a:81:17:a7:48:3c:19:00:c8:b2:2e:20:75:
         63:84:41:72:d2:c3:14:e1:b7:3e:8c:92:3b:14:e6:06:bd:c3:
         cf:f5:9f:be:62:49:29:e5:de:f4:3d:f6:61:ed:06:56:c0:1f:
         a8:cc:80:8b:2a:cb:8c:37:1d:41:2b:57:74:0f:00:ae:38:35:
         1a:f6:ff:0d:f6:45:ef:15:f6:49:2c:f0:96:b3:60:61:f8:c6:
         cf:de:72:b8:36:d1:37:e5:e4:49:2e:e7:da:53:6a:4a:7b:b4:
         0a:9d:e7:25:1d:cb:cf:41:08:41:b3:5e:37:ea:3c:1e:20:34:
         f5:12:a0:27:af:48:94:40:ab:4f:bd:05:f7:a2:8c:0b:4c:61:
         5b:1d:92:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----