Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File:                     osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier:          EJfilJ6CDocrVlMNBms3XxnmJmjzTEsRcl9frZyT2wo=
Subject key identifier:   1A:5F:2E:C9:3E:21:AF:F7:5F:0E:34:A7:DA:18:D1:F5:DC:D2:14:A2
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer:       /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial:       01962F3D7733E6E135CF1C999B127B2FFDB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: T1KxzYg5ki8jROBXHnXsuuF1Usc.roa (hash: pSMvp0rn5YAkLffVlSaMpmmw60CI4RpSAuDI1ZJ7Bys=)
                          2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: N/nialCnzDyw8rrlIdkbsGSXiX/N+mCUUE41HvQoEmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:77:33:e6:e1:35:cf:1c:99:9b:12:7b:2f:fd:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=1a5f2ec93e21aff75f0e34a7da18d1f5dcd214a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:87:fc:15:60:d8:5e:24:86:f0:ec:07:b1:
                    84:be:31:e9:89:4f:df:29:9f:39:ef:7e:dc:35:e1:
                    59:bc:2c:92:28:49:78:88:f2:73:92:4a:3f:b7:65:
                    da:5d:30:ae:97:73:6a:12:19:db:b3:31:47:0d:4c:
                    fa:95:78:35:a5:09:3e:e0:f7:7d:6f:dd:9f:f0:1c:
                    24:82:9a:a7:a8:c1:e2:7e:fd:d4:b9:60:44:87:89:
                    c3:35:35:31:44:c4:2a:24:cd:e3:7b:aa:44:aa:1f:
                    ad:c2:21:e3:e6:e5:9a:9a:fd:ff:d8:e2:aa:54:8a:
                    6a:54:7b:bc:54:74:81:7e:38:26:4b:37:4f:0b:9e:
                    e4:7c:fb:fd:9b:b3:0e:f0:d4:52:90:c9:c3:05:c8:
                    a7:c2:c6:3d:46:5c:18:11:df:f2:3c:2a:26:9f:b3:
                    6b:03:96:ef:a3:78:03:c0:1b:cc:c3:bd:d9:f2:98:
                    7d:c9:74:53:2e:5d:30:14:cd:5a:c2:5d:e0:a0:1d:
                    26:16:b6:61:eb:8b:9e:d1:49:35:63:d5:d3:31:32:
                    8d:f2:3a:1c:e1:4e:be:40:d2:ee:b1:bc:c0:37:39:
                    b5:ab:d5:55:18:59:fb:db:4b:00:1b:2a:d8:04:2b:
                    6d:04:c5:0c:6d:33:88:30:83:6e:cd:bd:0a:8f:86:
                    0f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5F:2E:C9:3E:21:AF:F7:5F:0E:34:A7:DA:18:D1:F5:DC:D2:14:A2
            X509v3 Authority Key Identifier:
                keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:48:95:91:97:36:32:53:7c:e0:ea:76:cb:cd:1a:c9:85:a5:
         0f:ea:05:87:3e:ce:ed:66:d8:22:1e:ca:94:c3:2e:4a:d5:6e:
         aa:86:1d:41:c5:ba:a4:93:50:e5:5c:48:1f:6e:b3:de:84:1e:
         89:c8:b7:02:a7:84:f6:d8:fd:da:bc:2f:cc:fd:6a:21:dd:11:
         c7:f9:37:a2:b7:79:70:1c:fb:c9:95:91:3e:9e:58:8a:b2:37:
         f6:63:d9:fb:82:c5:ad:8a:e2:34:ae:67:67:14:8a:80:63:d5:
         4d:d0:1b:b4:cf:c9:f2:1b:2c:c4:22:6d:20:e7:2c:1c:58:72:
         e4:66:76:dc:81:18:60:a1:b8:d3:6d:3a:d2:f8:d7:e9:48:27:
         bf:70:09:64:16:1e:9d:24:c4:2c:df:c3:2e:d4:ff:8e:00:a7:
         6a:bc:ca:f0:3c:22:88:95:db:1e:17:85:ad:38:68:97:26:99:
         f2:ab:5a:e0:e8:d4:cc:d2:73:6a:81:b5:90:09:90:b7:96:24:
         1b:f7:f7:e7:a7:9b:d6:73:55:9d:ac:eb:da:bb:a2:ac:ee:5e:
         ca:f4:86:d6:af:0e:80:00:77:7d:78:cf:cb:a4:fb:ee:2e:42:
         ff:7f:06:09:5e:65:06:a3:71:f2:60:15:53:b6:b5:d4:1a:3b:
         c1:62:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----