Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
File:                     pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json)
Hash identifier:          D5vsPGEwwq0x80BsCkJX2i0G5BXP45a1u7mSxppRm3A=
Subject key identifier:   67:47:94:41:7C:F3:B4:28:6B:58:9D:10:89:F2:0B:97:07:98:47:ED
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Certificate issuer:       /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial:       01962E9882B20BD93F80EC253CC041A54AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
Manifest number:          0BD5
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: cYxXj0hlXiP5gs8KsYZK3ONPB+RVXz3Xj1aPxYOLVjQ=)
                          2: z4rUk_E4AGcR7M7P_EXqaAGwIrE.roa (hash: vdPESCF/t7U31UD2O57fuph7iNy0Hlzj8MYZvwZ4bj4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:82:b2:0b:d9:3f:80:ec:25:3c:c0:41:a5:4a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=674794417cf3b4286b589d1089f20b97079847ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:ac:ef:dd:04:26:6e:5b:d7:d7:ab:ce:91:
                    6d:b8:05:0d:3f:cf:e6:9e:c1:3d:58:49:ec:d8:b5:
                    3f:ef:dc:da:a4:15:8d:87:fb:22:60:7f:4f:2d:75:
                    d0:46:64:f6:a0:2f:7e:64:d9:4e:8e:60:eb:b4:5a:
                    b9:5d:d1:bd:98:a5:46:c5:f1:ae:0f:65:f4:e6:02:
                    1f:47:a7:bc:a2:25:5e:ed:34:bd:4a:5d:23:c8:20:
                    a9:43:5c:fa:e0:d1:27:31:f2:9c:6b:4b:fc:8c:9a:
                    a1:2e:66:f3:9c:d2:42:9a:a1:1a:f3:3e:b1:20:be:
                    bd:c8:d0:93:63:37:1b:32:a0:d2:e2:7b:ee:8a:8a:
                    2c:d2:7c:92:34:bc:91:66:fa:9c:e6:cc:fd:89:20:
                    0d:3c:70:99:57:ac:46:f9:db:d7:ad:f9:71:a8:50:
                    f3:c7:36:49:1a:07:4a:f7:d4:f5:b9:d7:08:6a:f1:
                    72:93:94:6f:8f:eb:d9:d8:2e:18:06:4f:c7:51:d6:
                    3f:1b:85:94:1a:40:43:00:d9:e6:0b:69:ca:a4:83:
                    22:20:b2:4a:06:ff:f9:12:56:04:a4:11:91:1e:94:
                    8a:6e:c0:65:9f:0e:87:5c:4c:93:d7:30:70:53:b7:
                    55:22:d1:40:de:49:25:a5:04:96:1c:fd:2f:78:54:
                    b9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:47:94:41:7C:F3:B4:28:6B:58:9D:10:89:F2:0B:97:07:98:47:ED
            X509v3 Authority Key Identifier:
                keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:61:9e:3c:5e:55:4d:0c:38:3a:18:46:a4:e1:e0:94:3f:38:
         19:dc:a6:2a:66:92:c5:95:22:37:66:56:86:03:af:f3:79:cf:
         df:79:b8:cc:e9:ba:69:d3:a3:c7:05:74:30:e1:3c:41:e5:f2:
         35:be:0e:35:f4:90:62:9e:84:73:3c:3d:3f:30:a1:65:a5:d3:
         51:85:a4:c9:e1:b5:05:2f:a0:24:73:a8:fe:7c:03:20:1b:4e:
         e4:08:59:e1:ac:45:9d:5f:82:8f:2e:af:25:d3:57:60:40:03:
         da:12:ad:a3:e4:28:84:a0:65:2b:50:e9:fe:05:94:31:f1:a5:
         b0:3a:34:ad:b1:7e:2a:f9:26:3b:41:89:57:bc:c6:73:bb:26:
         7f:3d:4c:cc:01:4c:19:46:a3:5a:fa:f9:4d:fe:69:ed:de:30:
         39:cf:29:3c:1d:76:82:5e:96:cd:ee:7f:b7:4e:f5:a8:27:91:
         8e:19:9d:08:54:f0:2b:53:5f:9c:20:ea:46:6a:99:4a:b4:46:
         f6:78:a3:a5:3e:82:3a:16:73:b2:c1:36:63:a4:a0:bd:2f:3d:
         48:b3:d7:57:36:dd:f6:45:a7:4a:ae:56:39:9e:b4:d3:d2:a2:
         27:f6:54:08:d2:dc:67:5d:3a:d4:10:e2:e4:52:63:cc:18:81:
         83:4c:be:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----